US Catch-Up Watch for August 14: FTNT Finally Bounces, but F5 and UPS Still Say Wait

Price cutoff: Thursday, August 13, 2026 at the 4:00 p.m. ET U.S. close.
Trade horizon: roughly 1–15 U.S. trading sessions.
Macro timing: July U.S. retail sales are scheduled for 8:30 a.m. ET Friday, so I am not treating premarket moves as confirmation.

Today's answer: FTNT finally bounced relative to cyber, but there is still no clean catch-up entry

Thursday gave me the first useful change in this screen in a couple of days: Fortinet (FTNT) finally beat its cybersecurity basket by more than a token amount.

That matters. FTNT rose 2.86% while the First Trust Nasdaq Cybersecurity ETF (CIBR) gained 1.80%, giving Fortinet roughly +1.06 percentage points of relative performance for the session.

But one good day is exactly what the seven-session audit taught me not to chase. FTNT underperformed CIBR the day before, and its 3-, 5-, 10- and 20-session gaps are all still negative. I want a second session of real relative strength before calling this a turn.

F5 (FFIV) is now the cleaner unresolved cybersecurity laggard on the list: its business just beat and raised guidance, but the stock lost 1.64% Thursday while CIBR rose. UPS also remains behind transports over 10 and 20 sessions despite raising its annual outlook.

So today's screen has three legitimate research leads, but no clean buy before retail sales.

NYSE trading floor

Catch-up watchlist at a glance

Rank	Candidate	Aug. 13 close	Genuine relationship	Current read	What would make it actionable
1	FTNT	$165.44	Cybersecurity vs. CIBR / PANW / CRWD	First meaningful relative bounce, but only one session	Close above roughly $168–$169 while beating CIBR again
2	FFIV	$416.00	Cybersecurity / app security vs. CIBR	Strong fundamentals, persistent 5/10/20-session lag, Thursday relapse	Reclaim $423–$425 with positive relative strength; stronger above $435
3	UPS	$105.54	Parcel/logistics vs. IYT / FedEx	Long-window gap remains; Thursday's relative win was tiny	Reclaim $107.70, preferably $109+, while clearly beating transports

These are observation conditions, not opening-bell buy instructions.

Relative performance: candidate minus benchmark

Negative means the candidate lagged its benchmark over that window. Returns are measured close-to-close through Thursday, August 13.

Pair	1 session	3 sessions	5 sessions	10 sessions	20 sessions
FTNT minus CIBR	+1.06 pp	-0.84 pp	-2.70 pp	-6.28 pp	-8.32 pp
FFIV minus CIBR	-3.45 pp	-0.12 pp	-5.32 pp	-6.52 pp	-8.10 pp
UPS minus IYT	+0.20 pp	-0.63 pp	+0.08 pp	-3.58 pp	-7.86 pp

The interesting shape is FTNT: the one-day number finally flipped strongly positive while the medium-window deficit is still large. That is how a catch-up transition starts.

The problem is that a start is not a confirmation.

Seven-session audit: the stricter rules are doing their job, so I am not changing them just to look busy

I reconstructed the screen over the prior seven completed U.S. sessions using only prices and information available at each close.

The audit keeps showing the same failure mode: one positive relative day is cheap.

L3Harris beat ITA by roughly 2.1 points on Aug. 6, then lost about 1.3 points relative the next session.
It beat ITA again by about 0.9 points on Aug. 10, then underperformed by roughly 1.6 points on Aug. 11.
On Aug. 12 it produced another strong relative day, then was essentially flat versus ITA on Aug. 13 instead of extending the move.
UPS had small positive relative days on Aug. 7 and Aug. 10, but neither developed into a sustained turn.

That is why the current rule still requires a genuine closing reclaim plus a second regular session of meaningful peer outperformance. Tiny +0.1 or +0.2-point relative moves do not count as evidence by themselves.

The stale-gap filter also works. LHX is now removed from today's candidate table because its 10-session performance has flipped to roughly +1.24 points versus ITA while its 20-session gap remains about -6.73 points. The old 20-day deficit is still visible, but much of the actual catch-up has already occurred. Keeping LHX ranked today would be re-selling yesterday's divergence.

I am not publishing a raw seven-session hit rate. Seven sessions is useful for catching bad rules, not for pretending we have statistically robust probabilities.

1. Fortinet: finally a real relative bounce

Why the relationship is genuine

This is not a hand-picked comparison. CIBR actually owns Fortinet, alongside Palo Alto Networks, CrowdStrike, Cisco, Cloudflare, F5 and other cybersecurity names. Fortinet was roughly a high-single-digit weight in First Trust's late-July holdings.

The sector itself has had a strong catalyst: recent research has highlighted rising cybersecurity demand as agentic AI expands the attack surface, and Palo Alto, CrowdStrike and other security names have rallied hard.

Fortinet's operating story is not broken either. In Q2, the company reported $2.05 billion of revenue, up 26% year over year, product revenue up 52%, and billings of $2.37 billion, up 33%. It raised its 2026 revenue outlook. Post-earnings analyst reactions included higher targets from BTIG, Barclays, Goldman Sachs and others, although valuation opinions remain wide.

What changed Thursday

FTNT closed at $165.44, up 2.86%. CIBR gained 1.80%, while Palo Alto rose 2.32% and CrowdStrike rose 1.69%.

So this was not just “cyber went up.” Fortinet genuinely did a little more work than the group.

Still, Thursday only repaired part of the gap. FTNT remains about 6.3 points behind CIBR over 10 sessions and 8.3 points behind over 20.

Item	FTNT plan
Observation area	Roughly $162–$166
First improvement	Thursday's close above $165 counts as a real first step
Actionable confirmation	Roughly $168–$169 close plus another session beating CIBR
Near-term invalidation	Lose roughly $159–$160 again
Harder invalidation	Sustained close below roughly $154–$155
Likely catalyst	AI-security spending, SASE/firewall demand, estimate support after Q2
Main risks	Rich valuation, peer preference for faster growers, growth-stock multiple compression

Analyst / news / community temperature

The sell side became much more constructive after Q2: BTIG lifted its target to $203, Barclays to $190, and several other firms raised targets as well. The range is still wide, which tells me valuation remains the debate rather than operational deterioration.

Retail discussion is similar: the earnings beat and raised guidance are popular talking points, while valuation versus CrowdStrike and Palo Alto remains the pushback. That is useful sentiment context, but not a signal.

Verdict: FTNT is the closest name today. If it can beat CIBR again and close through roughly $168–$169, the setup becomes materially more interesting.

2. F5: better fundamentals than the relative chart suggests

Why FFIV belongs in the cyber comparison

F5 is also a real CIBR constituent, with roughly a 3%+ weight in recent First Trust holdings. Its products sit at the application-delivery and application-security layer, so it is exposed to the same enterprise security and AI-infrastructure spending cycle.

The fundamental screen is clean. F5's July quarter showed 11% total revenue growth and 19% product revenue growth, and management raised fiscal-2026 revenue-growth guidance to roughly 9%–10% from 7%–8% previously. It also raised adjusted EPS guidance.

That matters because FFIV is not lagging after a guidance cut or broken quarter.

Recent research on agentic-AI security specifically called F5 an underappreciated beneficiary, while post-earnings analysts including Piper Sandler and RBC raised targets.

Why I am still waiting

The chart has not agreed yet. FFIV closed Thursday at $416, down 1.64%, while CIBR climbed 1.80%. That widened its one-day relative gap by about 3.45 points.

Its 10- and 20-session deficits versus CIBR are both around 8 points or less, and the five-session gap is about -5.3 points. There is enough divergence to care about, but Thursday is the opposite of confirmation.

Item	FFIV plan
Observation area	Roughly $410–$423
First reclaim	Close back through $423–$425 while beating CIBR
Stronger confirmation	Break/hold above the July high area around $435
Invalidation	Renewed breakdown below roughly $400
Likely catalyst	AI app/API security demand, hybrid-cloud refresh, upward estimate revisions
Main risks	Hardware exposure, slower software mix, valuation, cyber-group rotation

Verdict: FFIV is a legitimate laggard with intact fundamentals, but it is not turning yet. I want price to prove that Thursday was a shakeout rather than the start of another relative leg lower.

3. UPS: the long-window discount survives, but FedEx is still taking the tape

Why the relationship is real

UPS and FedEx share parcel volumes, enterprise shipping, global trade, fuel and labor costs, while IYT captures the broader U.S. transportation cycle. This is a real economic relationship, not a chart coincidence.

UPS's Q2 fundamentals improved. The company reported $22.8 billion of consolidated revenue and raised full-year 2026 revenue to approximately $91.2 billion, adjusted operating profit to roughly $8.65 billion, and adjusted EPS to about $7.22. Management said the planned Amazon volume glide-down and associated network reconfiguration had been completed.

Analyst reaction was cautiously constructive. Stifel raised its target to $115 after the quarter while maintaining a positive stance. Reuters, however, noted investor skepticism about how quickly the better mix and cost structure will translate into the second half.

Thursday helped, but not enough

UPS rose 1.57% Thursday to $105.54, slightly better than IYT's 1.37%. But FedEx rose much faster, so parcel-specific leadership is still elsewhere.

The 20-session gap to IYT remains roughly -7.9 points and the 10-session gap roughly -3.6 points. The short windows are nearly flat versus transports rather than convincingly positive.

Item	UPS plan
Observation area	Roughly $103–$106
First reclaim	Roughly $107.70
Better confirmation	Hold $109+ while clearly beating IYT and narrowing the gap to FDX
Invalidation	Close below the recent support area around $102.40
Likely catalyst	Margin proof from network optimization; better second-half parcel mix
Main risks	Domestic parcel weakness, Amazon/competitive pressure, execution, labor and fuel costs

Community temperature

Recent investor and employee discussion is unusually useful as a qualitative check here. The bullish version is that the Amazon glide-down is done and the network can now rebuild higher-quality volume. The skeptical version is that volume recovery may take longer than management hopes. I do not score either side as evidence; the chart has to settle it.

Verdict: still worth watching, but Thursday's +0.20-point relative edge versus IYT is too small to call a turn.

What I rejected today

Rejected setup	Why it fails the screen
LHX vs. ITA	The old 20-session deficit remains, but LHX is now ahead over 10 sessions. The stale-gap filter says the catch-up has already partly happened.
CSCO vs. CIBR	Cisco fell sharply after earnings. That is company-specific repricing, not a clean temporary peer lag.
AMAT vs. semiconductor ETFs	Applied Materials is down sharply premarket after its own earnings report despite an above-consensus forecast. Event-specific repricing overwhelms the relative-value setup.
ZS / PANW vs. CIBR	These names have already materially outperformed the cybersecurity basket across multiple windows. They are leaders, not laggards.

The rejection table matters as much as the watchlist. A catch-up strategy that cannot say “no” turns into dip-buying with extra math.

Retail sales is today's macro gate

The S&P 500 closed at another record Thursday, and Friday morning futures were roughly flat to slightly higher. At the same time, Brent crude moved back toward the high-$80s as U.S.-Iran tensions kept geopolitical risk alive.

The Census Bureau has July retail sales scheduled for 8:30 a.m. ET Friday. Market expectations are for only a small monthly gain. A surprise can move Treasury yields and the growth/cyclical split quickly enough to invalidate a pretty premarket chart.

So today's rule is simple: premarket does not count. FTNT needs to confirm during the regular session after the macro release.

Bottom line

There is no clean catch-up buy before Friday's retail-sales report.

But the hierarchy changed:

FTNT finally gave us the first meaningful one-day relative bounce. Another strong session versus CIBR and a close above roughly $168–$169 would be the first setup I would take seriously.
FFIV has the fundamentals and the genuine sector relationship, but Thursday widened the gap. It needs $423–$425 back first.
UPS still has a real 10/20-session discount, but its short-window relative performance is basically flat. $107.70, then $109+, remains the proof zone.
LHX is off the candidate list because the 10-day relationship has already flipped positive. The old 20-day gap is now stale information.

The useful lesson from the last seven sessions is not that every laggard bounces. It is the opposite: wait until the laggard starts behaving differently from a laggard, then demand that behavior survive more than one day.

Educational disclaimer: This report is for informational and educational purposes only. It is not personalised financial advice, investment research or a recommendation to buy or sell any security. Relative underperformance can persist, and a lagging stock may be reflecting information that its peers have not priced in.

Sources and recent reads

Market / macro

Price / relative-performance data

Cybersecurity / FTNT / FFIV

UPS / transports

Community / sentiment checks

Written and reviewed by /lico

Just writing down my thoughts, interests, and the things I learn along the way.