Zscaler Inc.

ZS
NASDAQFree primer · Steps 1–3 of 21Updated May 18, 2026Coverage as of 2026-Q2
Moat
Narrow
Latest Q Revenue
$815.8M+23% YoYQ2 FY2026
Top Holder
Jay Chaudhry (CEO/Chairman)35%
Institutional
65%
Bull Case
ZS's unique inline visibility into enterprise AI traffic positions its nascent AI Security product to re-accelerate ARR growth well above current consensus expectations.
Bear Case
PANW's 'free SASE' platformization strategy is extending ZS deal cycles and pressuring NRR, risking an ARR guidance miss and significant multiple compression.

Business Model


ticker: ZS step: 01 generated: 2026-05-13 source: quick-research

Zscaler, Inc. (ZS) — Business Overview

Business Description

Zscaler is a cloud-native cybersecurity platform built on a Zero Trust architecture, replacing traditional network perimeter defenses with an inline cloud proxy that inspects all traffic — users to apps, apps to apps, and AI agents to services. Delivered from 160+ data centers processing 500+ billion transactions daily and blocking 150+ million threats, the Zero Trust Exchange platform protects ~45% of Fortune 500 companies. FY2025 revenue reached $2.673B (+23% YoY) with ARR surpassing $3 billion.

Revenue Model

Subscription-based SaaS with annual and multi-year contracts. Customers typically land with ZIA (internet access security) or ZPA (private app access), then expand to digital experience monitoring, cloud protection, data security, and AI security modules. The Z-Flex program enables flexible multi-year platform commitments, generating $175M in TCV bookings in Q4 FY2025 alone. ~25% of revenue flows through top 5 channel partners; $1B+ generated via AWS Marketplace.

Products & Services

  • ZIA (Zscaler Internet Access) — secure web gateway, cloud firewall, DLP, CASB for internet-bound traffic
  • ZPA (Zscaler Private Access) — zero trust network access to internal applications; replaces VPN
  • ZDX (Zscaler Digital Experience) — end-to-end visibility into application and network performance
  • ZCP (Zscaler Cloud Protection) — CSPM, workload protection for cloud environments
  • AI Guard — security layer for AI/LLM traffic; controls agent-to-agent and agent-to-app communication
  • Data Security — DLP and DSPM integrated across the Zero Trust Exchange
  • Zero Trust Segmentation — prevents lateral movement from ransomware in branches and cloud environments

Customer Base & Go-to-Market

Serves 5,000+ enterprise customers including ~45% of Fortune 500. Land with ZIA/ZPA → expand to full platform (data security, ZDX, AI Guard). Channel-heavy: top 5 partners account for ~25% of revenue. Z-Flex drives multi-year platform consolidation deals. AI Security ARR exceeded $400M in FY2025. Enterprise expansion motion: customers consolidate multiple point security tools onto the Zero Trust Exchange.

Competitive Position

Zscaler competes in the $96B+ SASE/zero trust market against Palo Alto Networks, CrowdStrike, Netskope, and legacy firewall vendors (Cisco, Fortinet, Check Point). Zscaler's differentiation: purpose-built cloud-native proxy architecture (no appliances, no hardware), inline inspection of all traffic, and the network effect of processing 500B+ daily transactions providing unmatched threat intelligence. SAP RISE migrations and enterprise firewall consolidation directly benefit Zscaler as customers move away from perimeter-based architectures.

Key Facts

  • Founded: 2007
  • Headquarters: San Jose, California
  • Employees: ~7,000
  • Exchange: NASDAQ
  • Sector / Industry: Technology / Cybersecurity — Zero Trust / SASE
  • Market Cap: ~$25B (approximately)

Financial Snapshot


ticker: ZS step: 04 generated: 2026-05-13 source: quick-research

Zscaler, Inc. (ZS) — Financial Snapshot

Income Statement Summary

Metric FY2022 FY2023 FY2024 YoY
Revenue $1.09B $1.617B $2.168B +34%
Gross Margin ~77% ~78% ~78%
GAAP Operating Margin ~-20% ~-15% ~-10% improving
Non-GAAP Operating Margin ~19% ~22% ~25%
GAAP Net Income ~-$0.4B ~-$0.2B ~-$0.2B improving

FY2025: Revenue $2.673B (+23.3% YoY); ARR surpassed $3B. Q4 FY2025: Z-Flex bookings $175M TCV (+70% sequential); AI Security ARR $400M+; RPO growth +35%. Revenue growth decelerated from 34% (FY2024) to 23% (FY2025) — the key bear narrative.

Cash Flow & Balance Sheet (FY2024)

Metric Value
Operating Cash Flow $779.8M (36% of revenue)
Free Cash Flow $585.0M (27% of revenue)
Capital Expenditures ~$195M
Cash & Equivalents ~$2.5B
Total Debt ~$1.0B (convertible notes)

FCF profile is strong: margins expanded from 21% (FY2023) to 27% (FY2024). Q4 FY2025 FCF margins reportedly hit 52% in the quarter — reflecting operating leverage at scale. Net cash positive. Significant SBC (~20%+ of revenue) suppresses GAAP profitability but non-GAAP earnings are solidly positive.

Key Ratios (approximate)

  • P/E: ~50–70x (non-GAAP FY2026E) | EV/Sales: ~10x | FCF Yield: ~2–3%
  • Revenue Growth (TTM): ~23% | Non-GAAP Operating Margin: ~25%

Growth Profile

Zscaler compounded revenue from $1.09B (FY2022) to $2.673B (FY2025) — 35% CAGR — but annual growth rates decelerated sharply: 62% → 48% → 34% → 23%. This deceleration narrative drove the stock from highs (~$250+) to 60% below peak by early 2026. The ARR $3B+ milestone, Z-Flex platform deals, and AI Security ARR $400M+ represent the re-acceleration thesis. FCF quality is excellent at 27%+ margins.

Forward Estimates

  • FY2026: Revenue ~$3.2–3.4B (+20–27%); FCF margin expanding toward 28–30%
  • AI Security ARR: $400M → tracking toward $600M+ as AI agent traffic monitoring scales
  • Z-Flex TCV bookings: $175M Q4 FY2025 → expected to drive multi-year contract backlog
  • Analyst mean PT: ~$200–220 (82% Buy consensus); bull case $366; bear case ~$118–120
  • RPO growth (+35%) running well ahead of revenue — leading indicator for re-acceleration

Recent Catalysts


ticker: ZS step: 12 generated: 2026-05-13 source: quick-research

Zscaler, Inc. (ZS) — Investment Catalysts & Risks

Bull Case Drivers

  1. AI Agent Security = New TAM Layer on Top of Zero Trust — Every AI agent that accesses APIs, internal tools, databases, or other agents generates network traffic that must be secured and controlled. Zscaler's AI Guard and Zero Trust Exchange are positioned as the control plane for agent-to-agent and agent-to-application communication — ensuring AI workloads don't exfiltrate data, access unauthorized systems, or bypass security controls. AI/ML transactions on Zscaler's network grew 3,500% year-over-year, and AI Security ARR surpassed $400M in FY2025. As enterprises deploy AI agents at scale, every autonomous workflow needs zero trust enforcement — creating an incremental revenue layer on top of Zscaler's existing human-user base.

  2. Z-Flex Platform Deals = Revenue Durability and Expansion — The Z-Flex program shifts customers from ad-hoc module purchases to multi-year platform commitments, locking in expanded ARR and reducing churn. Z-Flex bookings surged 70% sequentially to $175M TCV in Q4 FY2025, and RPO growth of 35% (nine percentage points faster than revenue) signals a strong forward pipeline. When customers commit to Z-Flex, they typically adopt 5+ modules vs. 2–3 for standard buyers — driving NRR expansion and reducing the churn risk that has concerned bears. The combination of Z-Flex momentum and AI Security ARR growth represents the re-acceleration thesis: backlog building faster than revenue.

  3. SAP RISE / Enterprise Firewall Displacement = Multi-Year Structural Tailwind — SAP RISE migrations move enterprise workloads to cloud, making traditional on-premises firewall/VPN architectures obsolete. As enterprises rearchitect for SAP RISE (and similar cloud migrations), they need zero trust access to cloud applications — Zscaler's core use case. This is a forced refresh cycle across large enterprises that have not yet completed their zero trust transformation. Cloudflare's own 2026 growth acceleration came from the same structural dynamic. Zscaler, as the market share leader in SASE/zero trust, benefits disproportionately from enterprise security consolidation driven by cloud migration.

Bear Case Risks

  1. Revenue Deceleration Narrative: 62% → 48% → 34% → 23% — Is the TAM Saturating? — Zscaler's revenue growth has decelerated every year since FY2021, and the FY2025 deceleration to 23% despite large TAM claims raises questions about enterprise saturation. The company has now penetrated ~45% of Fortune 500 — the easy wins are done, and the remaining enterprise market requires displacing entrenched Palo Alto, Cisco, or Fortinet deployments that customers have already invested in. If growth decelerates further to 15–18%, the current ~10x revenue multiple implies significant downside. The stock is already -60% from its high, reflecting the market's skepticism about re-acceleration — and every guidance miss compounds the de-rating.

  2. AI Replacement Risk: Could AI Agents Eliminate the Need for Traditional SASE? — The most disruptive bear case is that AI fundamentally changes how security is delivered. If future AI-native security models (autonomous threat detection, self-configuring network policies, AI-embedded firewalls in hyperscaler clouds) reduce the need for a dedicated inline security proxy, Zscaler's architecture could face obsolescence risk. The "AI will replace legacy software" narrative is imprecise but real — investors worry that in a world of natively AI-secured cloud environments, a 2007-founded company's proxy architecture may not be the winner. This narrative drove the stock down 15% to 52-week lows in early 2026, and hasn't been fully resolved.

  3. Palo Alto + CrowdStrike Platform Consolidation Threat — Palo Alto Networks and CrowdStrike are both executing aggressive platform consolidation strategies: offering free SASE/zero trust modules bundled with existing Prisma or Falcon platform subscriptions to displace Zscaler. Palo Alto's "platformization" playbook (give free NBO deals, convert at renewal) has already caused Zscaler to compete on price in certain enterprise accounts. If Palo Alto or CrowdStrike successfully commoditize zero trust access as a feature of a broader security platform rather than a standalone product, Zscaler's pricing power erodes. This competition-driven pricing pressure contributed to the growth deceleration from 34% to 23% in FY2025.

Upcoming Events

  • Q3 FY2026 earnings (May/June 2026): Revenue re-acceleration evidence — whether RPO/Z-Flex converts to recognized revenue
  • FY2026 guidance: Full-year outlook revisions based on Z-Flex bookings and AI Security ARR trajectory
  • AI Security ARR: Tracking toward $600M+ — key milestone for validating AI opportunity size
  • 2026: Zero Trust Everywhere customer target achievement — enterprise platform consolidation progress
  • Ongoing: Z-Flex quarterly TCV bookings — leading indicator for multi-year revenue visibility

Analyst Sentiment

Strongly bullish majority: 82% Buy consensus. Bull case price target ~$366 (116% upside from ~$170). Mean PT approximately $200–220. Despite -60% stock decline from all-time highs, most analysts maintain Buy ratings citing the Z-Flex and AI Security re-acceleration thesis. Bears (Trefis and others) target $118–120, arguing growth deceleration is structural and valuation at ~10x revenue is still too rich for a 20% grower. The wide target dispersion reflects a genuine debate: is ZS at an inflection point for re-acceleration, or a premium-multiple stock stuck at market growth rates?

Research Date

Generated: 2026-05-13

Full Research Available

This primer covers steps 1–3 of 21. The full deep dive includes moat analysis, DCF valuation, bull/bear scenarios, management quality, earnings transcript analysis, competitive positioning, returns on capital, institutional/insider activity, and an investment memo.

View Investment MemoEach memo is $2. Coverage subscriptions for funds coming soon — join the waitlist.