We're trimming a rebounding tech stock and buying more of a catalyst-rich name

Jim Cramer's Charitable Trust is selling 205 shares of Palo Alto Networks at about $183.32 and buying 30 shares of Honeywell at about $210.68. PANW weight falls to 1.2% from 2.20% after a roughly 70% realized gain on shares bought in 2023-2024, while HON rises to 2.35% from 2.20%. The move reflects portfolio trimming in cybersecurity strength and adding to Honeywell on weakness ahead of the Aerospace separation and June 29 spin-off.

Analysis

The key signal is not the portfolio rotation itself, but the relative confidence shift: cyber remains structurally attractive, yet the marginal dollar is moving away from the higher-beta name into the lower-volatility beneficiary of a broader industrial/defense capex cycle. That suggests the market is starting to discriminate between AI as a demand tailwind versus AI as an excuse to pay up for every security vendor; the multiple expansion in PANW/CRWD can continue, but the easy rerating phase is likely behind us unless billings reaccelerate meaningfully.

The second-order effect in cyber is consolidation of “AI-security winners” around a smaller set of platforms. That should keep pressure on smaller point-solution vendors and legacy firewall proxies, while strengthening the ecosystem pull of CRWD as the cleaner narrative and execution name. If software sentiment rolls over again, PANW is more exposed to factor de-grossing than it looks because it sits in the intersection of expensive software and perceived AI beneficiaries.

HON is interesting because the market is probably underestimating the optionality from the breakup timeline more than the near-term aerospace noise. The stock is likely being discounted as a temporary earnings-quality story, but the catalyst path into June creates a multi-month re-rating window if management can frame Aerospace as a higher-growth, higher-multiple asset and Automation as a steadier cash compounder. The trade works best if the market starts valuing the separation before the actual spin, not after.

Contrarian view: the sell PANW/buy HON swap is not simply defensive; it is a bet that industrial restructuring can outperform software momentum when volatility rises. That may be right, but it leaves the book somewhat sensitive to a quick reversal in software factor leadership. The main risk to HON is that the aerospace softness proves broader than a short-lived shipment issue, which would push the spin thesis out by one or two quarters and cap the de-rating recovery.

Key Decisions for Investors

• Trim PANW into strength over the next 1-2 weeks; use rallies toward prior highs to reduce exposure, as upside likely becomes more factor-driven than fundamentals-driven unless the next print materially inflects.
• Prefer CRWD over PANW in cybersecurity for the next 3-6 months; long CRWD / short PANW as a relative-value pair if software multiples stay under pressure, targeting further consolidation around the category leader.
• Add HON on weakness into the June catalyst window; risk/reward improves if the stock stays 5-10% below the recent high, with a multi-month setup into investor days and the spin.
• For more asymmetry, use call spreads in HON expiring after the Aerospace investor day; the thesis is a pre-spin rerating, not just a post-spin execution story.
• Avoid adding smaller cyber names as a catch-up trade; if the AI-security narrative weakens, lower-quality vendors should underperform the platform winners first.