Zscaler
NASDAQ: ZS
$142.34 ▲ +2.64  (+1.89%)
At close: Jul 24, 2026 · 3:59 PM UTC
Financial Ratios
Market Cap22.71 Bn
P/E-335.79
P/S7.57
Div. Yield0.00
Revenue Growth (1y) (Qtr)25.91
Add ratio to table…

About

Zscaler, Inc. provides a cloud native security platform that enables organizations to securely connect users, devices, applications and workloads regardless of location. The company replaced traditional perimeter security with its Zero Trust Exchange which enforces least privilege access and inspects all traffic inline. Zscaler serves enterprises across the globe helping them accelerate cloud adoption while reducing risk and improving user experience. Zscaler generates…

Read more ↓
Sector: Technology Industry: Software - Infrastructure CIK: 0001713683

Investment Thesis

▲ Bull case
  • Zscaler's core architectural advantages in Zero Trust SASE position it uniquely to capitalize on the accelerating adoption of AI agents and frontier models, which management explicitly identified as a profound tailwind. The company's ability to hide applications from attackers and eliminate lateral movement—critically important as AI agents become the weakest link in enterprise security—is not merely theoretical; it is already driving significant wins across healthcare, financial technology, and public sector verticals. The $100 million in AI Protect bookings over the last 12 months, fueled by the January launch, represents an early but substantial traction in a nascent market where legacy vendors lack comparable cloud-native, inline inspection capabilities. This is compounded by strategic initiatives like Project Glasswing with Anthropic and partnerships with OpenAI, which provide proactive hardening against frontier model vulnerabilities—differentiators that are structural, not temporary, and directly address the multiplying effect of unpatched vulnerabilities amplified by AI-driven exploit discovery. The market is underestimating how these architectural strengths translate into sustainable pricing power and expanded total addressable market as AI agents proliferate, with Zscaler's telemetry scale (500 billion daily transactions across 160 exchanges) creating a data moat that competitors cannot replicate without rebuilding their entire infrastructure from the ground up.
  • The Z-Flex multiyear contract program represents a hidden catalyst driving predictable, long-term revenue visibility and upsell momentum that is underappreciated in current guidance. With over $1 billion in Z-Flex TCV generated in the past 12 months—including $480 million in Q3 alone, up over 60% quarter over quarter—the program is demonstrably shortening sales cycles, increasing module adoption (as evidenced by customers adding 6+ new modules including AI Protect and Zero Trust Branch), and deepening customer relationships. This is not merely a tactical sales tool but a structural shift in how enterprises procure security, aligning with multiyear cloud commitments and reducing friction in expansion. The fact that a Fortune 500 finance customer increased ARR by nearly 50% in a 5-year Z-Flex deal, expanding across 10 modules, illustrates the program's ability to transform transactional relationships into strategic partnerships. Management's decision to provide an early look at fiscal 2027 growth (16%-17%) while highlighting Z-Flex's momentum suggests they see this as a durable engine for sustainable, predictable growth that will counteract near-term headwinds from sales transitions, yet the market is focusing solely on the deceleration in topline guidance without recognizing how Z-Flex is building a backlog of future expansion opportunities that will reaccelerate growth as sales leadership stabilizes.
  • Zscaler's geographic expansion and channel strategy are creating underpenetrated opportunities in the 2,000-10,000 user enterprise segment that are not reflected in near-term guidance but will drive reacceleration in fiscal 2027. The company explicitly identified this segment as a sizable new logo opportunity, noting it serves only 4,500 of a potential 20,000 enterprises in its primary target market—meaning over 75% remains untapped. Initiatives like expanding VAR channel incentives, deepening GSI partnerships for large enterprises, and focusing major account teams on new logo (in addition to upsell) are designed to capture this whitespace. The success of the AI Guardian program with GSIs, which extends Zero Trust architecture to AI assets, demonstrates how channel partnerships are being leveraged to solve emerging customer needs. Furthermore, the cloud marketplace channel—transacting $900 million YTD and more than doubling YoY—is becoming a critical route to market that simplifies procurement and aligns with enterprise cloud commitments, particularly for strategic engagements. These investments are not yet contributing meaningfully to near-term growth due to longer sales cycles in the lower enterprise segment, but they represent a structural shift in go-to-market efficiency that will compound over time, especially as AI-driven security demands increase spending in this underserved market.
▼ Bear case
  • Zscaler's guidance revision for fiscal 2027 ARR and revenue growth to 16%-17% reflects a material deceleration from its historical 24%-25% trajectory, and management's attribution of this slowdown solely to sales leadership transitions and CapEx increases fails to address deeper, more systemic challenges in new logo acquisition and market saturation. Despite emphasizing the sizable opportunity in the 2,000-10,000 user enterprise segment, the company admitted that new logo growth expectations for fiscal 2027 were tempered in their early look, with CFO Kevin Rubin explicitly stating this was an area where "we can do better." This candid acknowledgment, coupled with the departure of two senior sales leaders from the CRO team—whose roles were described as part of a "strong bench" built by Mike Rich—suggests the sales organization may be facing deeper structural issues in pipeline development and conversion that go beyond temporary disruption. The market is ignoring that the deceleration in organic net new ARR (implied at 9.5% for FY26 excluding Red Canary) is already occurring and is projected to worsen, indicating potential erosion in the company's ability to acquire new enterprise logos at scale, a critical driver for long-term growth in a competitive market where legacy vendors are aggressively bundling SASE offerings.
  • The significant increase in CapEx as a percentage of revenue—projected to rise by 200 basis points in fiscal 2027 due to higher equipment prices driven by AI data center demand—poses a sustained drag on free cash flow margin that is not fully appreciated in the market's reaction, which focused only on the near-term FY26 guidance cut. Management explicitly stated that CapEx will increase "up to 200 basis points compared to fiscal 26 levels" based on current market prices for memory storage and processors, and they are pulling forward investments into Q4 to lock in today's prices. This is not a temporary headwind but a structural shift in cost infrastructure, as Zscaler's zero trust exchange requires continuous investment in globally distributed appliances and data center equipment to maintain its scale and telemetry advantages. With free cash flow margin guidance already revised down to 22.8%-23.3% for FY26 (from 26.5%-27%) due to CapEx, the additional increase in FY27 could push margins toward 20%-21%, undermining the Rule of 55+ narrative that has supported the stock's valuation. The market is overlooking that this CapEx escalation is intrinsically tied to the very AI-driven growth thesis that is supposed to be a tailwind—creating a self-defeating cycle where success in capturing AI security demand necessitates higher infrastructure costs that erode profitability.
  • Zscaler's reliance on large, lumpy deals—particularly the repeated highlighting of 8-figure and 7-figure upsells in verticals like federal agencies and healthcare—masks potential weakness in the underlying, recurring business flow and raises concerns about the sustainability of growth. During the Q&A, when asked to exclude the 8-figure federal deal to assess underlying flow, CFO Kevin Rubin acknowledged that such wins often include a significant renewal component already embedded in ARR, suggesting the reported new logo momentum may be overstated. Furthermore, the company's emphasis on displacing legacy firewall and VPN vendors through marquee wins, while impressive, does not address whether these victories are translating into broad, multi-module adoption or merely point solutions that leave customers vulnerable to competitive displacement. The fact that Zscaler serves only 4,500 enterprises out of a potential 20,000 in its target market, combined with tempered new logo expectations for FY27, suggests the company may be struggling to convert its technological advantages into consistent, widespread enterprise penetration outside of high-visibility, strategic accounts. This reliance on episodic, large-deal growth—especially amid sales leadership transitions—creates volatility that the market is ignoring when assessing the company's ability to deliver predictable, mid-teens growth sustainably.

Concentration Risk Benchmark Breakdown of Revenue (2025)

Concentration Risk Benchmark Breakdown of Revenue (2025)

Peer Comparison

Companies in the Software - Infrastructure
S.No. Ticker Company Market CapP/EP/STotal Debt (Qtr)
1 MSFT Microsoft Corp 2,842.90 Bn58.088.9340.26 Bn
2 PAGS PagSeguro Digital Ltd. 2,572.26 Bn4,596.13680.020.44 Bn
3 ORCL Oracle Corp 329.59 Bn17.644.89122.34 Bn
4 RPAY Repay Holdings Corp 314.63 Bn-2,562.84-0.43 Bn
5 PLTR Palantir Technologies Inc. 294.47 Bn128.4156.37-
6 PANW Palo Alto Networks Inc 227.51 Bn177.4823.00-
7 CRWD CrowdStrike Holdings, Inc. 183.28 Bn-1,136.8838.090.75 Bn
8 FTNT Fortinet, Inc. 112.44 Bn57.5215.820.50 Bn