SailPoint, Rubrik and SentinelOne insiders sold about $49 million while cyber stocks rallied
October 23's AI-security melt-up ran on a reseller survey and a bank note, while the filings show SailPoint's CEO and six execs, Rubrik directors and SentinelOne's chief all selling into it.
Vincent Jiang · 2 min read
The cybersecurity trade everyone wanted on October 23 came with a sell tag attached 3584. SailPoint+9.17% — SailPoint, up 9.17 percent today (SAIL) closed up 9.12%, Zscaler+7.38% — Zscaler, up 7.38 percent today (ZS) 7.31%, SentinelOne+7.20% — SentinelOne, up 7.20 percent today (S) 7.0%, and Rubrik+5.92% — Rubrik, up 5.92 percent today (RBRK) touched a record $128.32, above its own $115.56 analyst consensus 3584. The trigger looked like demand: Deutsche Bank had named cybersecurity a winner from rising AI token usage, and Evercore ISI's survey of channel partners found security budgets strengthening into year-end 76. But the filings filed the same week show the people who run these businesses selling, not buying.
SailPoint led the October 23 cyber rally at 9.12% on a 32% short float
Data
| Value | |
|---|---|
| SAIL | 9.12% |
| ZS | 7.31% |
| S | 7% |
| PANW | 6.59% |
| OKTA | 6.26% |
The buyers have a survey; the sellers have the floor
Camp one is momentum. The October 23 rally ran on an Evercore−1.37% — Evercore, down 1.37 percent today ISI reseller survey reporting stronger budgets, healthy pipelines, and spending on securing data, AI, identities and cloud 6, with Deutsche Bank's investor-trip note naming Snowflake+3.36% — Snowflake, up 3.36 percent today, CrowdStrike+8.33% — CrowdStrike, up 8.33 percent today and Palo Alto as the standout AI-token beneficiaries 7.
Analysts joined: a firm lifted SentinelOne's target to $28 from $25 after OneCon 5, and Citigroup−1.57% — Citigroup, down 1.57 percent today put Rubrik at $130 4. Note what the banks did not name: none of the day's hardest risers made Deutsche Bank's list, and the bank itself conceded the benefits are already reflected in valuations 7.
The counterpoint is written in Form 4s
Camp two is the insider record. Seven SailPoint executives, led by CEO Mark McClain, sold $10.22 million on October 6-7 at $19.71 to $21.03, one week before unveiling the AI identity agents their CTO called near-AGI, with zero purchases in 90 days 1. The same company barred revenue discussion on its October 14 analyst call, and its AI line sits just past $70 million, under 6% of $1.231 billion of ARR 2.
Rubrik insiders sold 139,583 shares for $13.5 million in 90 days, including director John Thompson's $1.27 million sale, as the stock passed the consensus target 4. SentinelOne logged 30 open-market sales and zero purchases in six months, CEO Tomer Weingarten alone selling an estimated $25.45 million 5.
Insider selling ran ahead of the rally at all three names
Data
| Value | |
|---|---|
| SentinelOne CEO, 6 months | $25.45M |
| Rubrik insiders, 90 days | $13.52M |
| SailPoint execs, 2 days | $10.22M |
What the print must show
The squeeze makes it worse: SailPoint's move ran on 32.18% short interest, partly a short covering rally, not a demand read 3. The evidence either way is dated. Zscaler reports in late November, SailPoint in December, and those prints must show the AI-security money arriving, not just the pitch for it 28. Until then, the filings say the people closest to the order book took cash off the table.
When sellers and buyers disagree, read the sellers' calendar first.
Get Security by email, free
The breaches, flaws and security vendors AI is putting to the test. In our daily email, every weekday.
