Software's earnings misses pile up right before a triple-threat event week — short weak bounces in the group

Verdict: the software short thesis is credible, but its entry has not arrived — wait

Our stance over the next one to two weeks is wait. The bearish idea — that AI-spend disappointment keeps software bounces being sold until the election, Apple earnings, and the jobs report resolve — is coherent, but its own trigger has not fired. The strongest point for the trade is ServiceNow's June 2026 quarter, where operating margin collapsed to 4.0% from 13.3% and free cash flow fell roughly 69% to $473M while revenue grew only 5.8% — the clearest profit-and-loss evidence for the AI-payoff worry. Provisional insider filings for the period ended September 30, 2026 also show net open-market selling of roughly $70.5M at Fortinet and $3.8M at ServiceNow. The strongest point against is that neither Fortinet ($136.08, $34.16 below its 50-day EMA) nor ServiceNow ($105.12, $28.69 below its 50-day EMA) has rallied into resistance — only IGV, at $104.29 versus its $105.64 EMA, is close — and both single stocks sit at deeply oversold RSI readings near 17.7, where a bounce is the more likely next move. The backtest evidence is real but fragile: the 60-month window returned +11.2% over 17 trades with a 41.2% win rate, the 24-month window +13.8% with a 37.5% win rate, exits were filled on daily bars, and the 12-month window could not be evaluated because of a market-data loading fault. If IGV closes at or above roughly $105.64 with the other entry conditions confirmed, the setup becomes actionable; a favorable event-stack outcome (a strong Apple print, benign jobs data) would invalidate the thesis within the strategy's 45-day holding window.

Trade now: Wait — the short setup is close on IGV but not triggered anywhere

The bearish software thesis is coherent and, per the idea, rests on the argument that AI-related misses linger in high-multiple names — with next week's election, Apple earnings, and the jobs report cited as pressure points. Separately, the fundamental backdrop is mixed: Fortinet's latest quarter (June 2026) showed revenue up 10.7% quarter over quarter to $2.0B and net margin expanding to 29.6%, while ServiceNow grew revenue 5.8% to $4.0B but saw operating margin collapse from 13.3% to 4.0%. The business-level evidence is genuinely two-sided; this is a tactical short, not a thesis about broken companies. Today's entry conditions are not met. The strategy shorts one of FTNT, IGV or NOW when a bounce toward the 50-day EMA stalls inside the Bollinger band. Only IGV is close: its last close of $104.29 sits about $1.35 below the 50-day EMA at $105.64, and the EMA50/EMA100 relationship is about $4.07 from aligning bearishly. FTNT ($136.08) and NOW ($105.12) are dozens of dollars away from the bounce condition — both remain deeply below their 50-day EMAs, so the required rally into resistance simply has not happened. Wait means: do nothing until IGV closes at or above roughly $105.64 while the other three conditions confirm, or until the resistance-retest rule triggers. One caveat that matters: the 12-month backtest window failed to run because of a market-data loading fault, so the evidence rests on the 60-month window (+11.19%, 17 trades, 41.2% win rate, 8.13% max drawdown) and the 24-month window (+13.75%, 8 trades, 37.5% win rate, 11.0% max drawdown) — both coarse, since exits were filled on daily bars rather than intraday prices. ### Technical details - **Setup (daily bars):** Short when (1) the 50-day EMA is below the 100-day EMA, (2) the close is above the 50-day EMA, (3) the close is below the upper 20-day, 2-standard-deviation Bollinger band, and (4) the 14-period, 3-slowed stochastic %K line crosses below its %D signal line. A second entry short requires the 50-day EMA below the 100-day EMA plus a high that touches the nearest resistance while closing below it. - **IGV** (last close $104.29, as of November 1, 2026): rule 1 is near — the 50-day EMA at $105.64 is still above the 100-day EMA at $101.57 by about $4.07; rule 2 is near — price is $1.35 below the 50-day EMA; rule 3 is met (price below the $109.26 upper band); rule 4 is near (stochastic at 35.2). All four must be live at once. - **FTNT** (last close $136.08): price is $34.16 below its 50-day EMA ($170.24) — the bounce condition is far, despite RSI(14) at a deeply oversold 17.7. - **NOW** (last close $105.12): price is $28.69 below its 50-day EMA ($133.81) — also far. RSI(14) at 17.7 suggests the selling is already stretched, which argues for a bounce before any entry, not an immediate short. - **Exits:** close above the upper Bollinger band (stop), close at or below the nearest support level (take profit), a 3.0% loss cap, a 10.0% profit cap, or a 45-day time stop. Position risk is sized at 2.0% per trade, with a maximum 33.3% per position.

The bear case has numbers behind it: decelerating fundamentals and insiders selling into weakness

The bear thesis — that AI-spend disappointment keeps pressing on software names through next week's event stack — is supported by deteriorating headline results at both covered issuers, adverse insider posture, and a backtest whose best results came from shorting these exact tickers. ### ServiceNow's quarter shows the 'AI isn't paying off yet' worry in the actual P&L The idea argues that misses by high-flying software names confirm AI ROI doubts, and per Reuters (Oct 29) Fortinet and ServiceNow both failed to meet lofty expectations. The filed fundamentals corroborate the pressure: ServiceNow's Q2 (June 2026) operating margin collapsed to 4.1% from 13.3% the prior quarter, net margin fell from 12.4% to 7.5%, and free cash flow dropped 69% quarter over quarter to $473M. If the spending concern is real, it shows up exactly here — cash generation falling while revenue grew only 5.8%. That validates the idea's causal chain: spending doubts compress margins and cash flow, which sustains selling pressure beyond one print. ### Fortinet's growth and returns are decelerating, not inflecting Fortinet's Q2 revenue rose 10.7% quarter over quarter to $2.05B, but its year-over-year growth at 14.8% (Q4 2025) sits only in the 61st percentile of the Information Technology sector — middle of the pack for a name the market had priced for more. Its quarterly return on equity fell 14.9 percentage points to 39.1%, and free cash flow slipped 4.1% to $966M. Decelerating returns on a decelerating growth profile give sellers a fundamental reason — not just a sentiment reason — to keep pressing bounces. ### Insiders are net sellers into the weakness The provisional ownership filings for the period ended September 30, 2026 show net open-market insider selling of $70.5M at Fortinet and $3.8M at ServiceNow. When the people closest to the business are selling while the market is already spooked, it removes a natural source of buying support during any post-earnings bounce — precisely the setup the idea says will be 'sold into.' ### The backtest rewards shorting these names, including the recent window The strategy's 60-month backtest on the FTNT pair produced a +11.2% return over 17 trades (41.2% win rate), and the most recent 24-month window — closest to current market…

Scores

• Conviction score breakdown: 50
• Thesis support: 62
• Trade readiness: 35
• Risk quality: 50
• Backtest evidence: 48
• Fundamentals trend: 55

Watch items

• IGV — Daily close vs 50-day EMA
• IGV — EMA(50) vs EMA(100)
• NOW — Daily close vs 50-day EMA
• FTNT — Daily close vs 50-day EMA
• FTNT — Insider net open-market selling