Zscaler, Inc.

Zscaler (ZS, USD)

Conclusion: Zscaler’s economic engine is still strengthening. This is a high-gross-margin, subscription software business selling a structural architecture shift: replacing perimeter security appliances and VPNs with a cloud-native zero-trust exchange. That is a better business than selling point products, because once traffic flows through Zscaler’s cloud, the company can layer on more controls and expand wallet share over time.

The DNA is simple: Zscaler sits inline between users, devices, workloads and applications, inspects traffic, enforces policy, and charges recurring subscription fees. Customers buy it because the old model—firewalls, VPNs, hub-and-spoke networking—is increasingly expensive, slower, and less safe for cloud and AI-heavy environments. Zscaler wins when enterprises consolidate vendors and move security spend from boxes to cloud-delivered policy enforcement.

Where the business is headed: the core is still growing, but the story has matured from pure hypergrowth to large-scale compounding. The FY2026 10-K still describes broad platform expansion—AI security, workload protection, data protection, and broader zero-trust use cases—not a company defending a shrinking niche. I do not see product obsolescence risk today; if anything, AI and distributed work make the core architecture more relevant.

This is mostly a win-win model. Customers get lower complexity, better user experience, and better security outcomes if deployment works as promised. The risk is not value extraction; it is execution. Cyber budgets are crowded, and Zscaler must keep proving it is a platform, not just an expensive secure web gateway plus upsell motion.

The few numbers I would track above all others are: revenue growth, remaining performance obligations or billings growth, large-customer growth, net retention, gross margin, and free cash flow margin. If those hold up together, the business is winning. If net retention and large-customer adds roll over while sales intensity stays high, the engine is weakening.

Most recent financial data used: fiscal year ended July 31, 2026.

Conclusion: Zscaler sits in a durable market tailwind. Enterprise security is still migrating from appliance-centric perimeter defenses toward cloud-delivered zero trust, secure access, and data protection; that migration is far from finished, and AI likely extends rather than shortens the runway. Most recent financial data used: FY2025 ended July 31, 2025.

The key point: this is not a mature, saturated market. It is a large replacement market with expanding adjacencies. The real headwind is not demand; it is fierce platform competition.

Zscaler has a real moat, but it is not untouchable: the advantage comes from architecture, operating scale, and switching costs, and it still looks modestly widening as of July 31, 2026.

Zscaler’s edge is not brand alone. It is the difficulty of replicating a cloud-native, inline zero-trust platform that sits in customers’ traffic path and becomes embedded in access policy, branch architecture, identity, and data protection workflows. Once deployed, replacing it is disruptive: customers would have to redesign security policy, re-route traffic, retest applications, and accept outage/security risk. That is a real switching-cost moat.

The second moat is process power plus scale. Running a global security cloud with low latency, high availability, and constant policy enforcement is operationally harder than shipping another firewall SKU. This also created a counter-positioning advantage against legacy VPN/firewall vendors whose old economics depended on perimeter appliances.

The moat is widening slightly, not dramatically. Zscaler keeps broadening the platform, which increases wallet share and raises switching costs. But this is still a crowded market with credible rivals, so the moat is strong rather than exceptional.

Financial Strength

Conclusion: Zscaler’s financial strength is strong, not because GAAP optics are pristine, but because the business is cash-generative, lightly burdened by balance-sheet risk, and unlikely to face solvency stress even in a real downturn. Most recent financial data: FY ended July 31, 2026.

GAAP ROE is not the right lens here: accumulated deficits, convertibles, and heavy stock-based compensation distort equity. The better read-through is operating quality and cash generation, and on that basis Zscaler looks above average for security software. Free cash flow is materially stronger than GAAP earnings, helped by subscription prepayments and deferred revenue; that is a real advantage, though investors should remember part of the conversion benefit comes from billing mechanics, not just pristine margin structure.

Debt looks prudent rather than dangerous. The company carries convertible notes, but liquidity is ample and this is not a business borrowing to survive. With no inventory risk, recurring revenue, and large enterprise customers, a severe slowdown would hurt growth more than balance-sheet viability.

Runway for Reinvestment

Conclusion: Zscaler still looks like a long-run compounder because its reinvestment need is mostly talent, product, and go-to-market spend rather than heavy capital, and the addressable problem set keeps widening. The cleanest evidence is that, by the nine months ended April 30, 2026, revenue was 2447110? Wait that's wrong. Need exact from verified data. Let's rewrite carefully.

Conclusion: Zscaler still has a long runway to reinvest at attractive rates. The business remains asset-light, the platform can absorb more modules and larger enterprise spend, and recent growth still looks strong enough to justify continued internal reinvestment.

Revenue reached 2454000000 in the first nine months of FY2026 versus 1954000000 a year earlier, up 25.6%. That is the right shape for a company that can still expand through deeper enterprise penetration, more products per customer, and adjacent security workflows. The implied organic growth rate from here is probably no longer hypergrowth, but high teens still looks plausible over a multi-year horizon if platform consolidation continues.

ROIC is messy here: deferred revenue, SBC, converts, and M&A distort traditional calculations. But the practical signal is good: revenue scaled rapidly while cash and investments were roughly flat and PPE only increased modestly. That suggests high incremental returns on tangible capital. Management historically appears to deploy cash into internal product/S&M reinvestment first, then tuck-in M&A; not into dividends or meaningful buybacks.

Zscaler looks like a category leader in SSE/zero-trust access, but not the broad-platform winner. Its closest real peers are Palo Alto Networks, CrowdStrike, and private Netskope; Fortinet, Cisco, and Cloudflare matter more at deal edges than as pure like-for-like substitutes. This is a global market, but the strongest competitors are still mostly U.S.-based vendors selling worldwide.

Using the most recent reported financials available here — FY2025 for Zscaler and Palo Alto, FY2026 for CrowdStrike — Zscaler is still growing faster than Palo Alto, with software-like margins, but it is smaller and less diversified. Its edge is cloud-native proxy architecture and strong zero-trust execution. Its weakness is platform breadth: Palo Alto wins where CIOs want consolidation across network, cloud, SOC, and identity; CrowdStrike is increasingly credible as security budgets shift toward unified agent/data workflows.

Bottom line: Zscaler appears to be gaining share in SSE, but likely not across the full security stack. Outlook is favorable, though premium valuation leaves less room for execution slips.

Conclusion: broadly aligned, but not exemplary. Zscaler is still founder-led, which matters: Jay Chaudhry’s ownership remains meaningful enough that he is not managing for a quarter, and the business has not shown the classic signs of empire-building or shareholder-hostile dealmaking. The weak spot is not governance abuse; it is dilution.

As of the latest filing used (FY2025 10-K, year ended July 31, 2025), this looks like a founder-aligned company with ordinary SaaS dilution baggage rather than a governance problem.

Management Competence & Ethics

Conclusion: management looks competent and generally shareholder-honest, but not elite because stock-based compensation still meaningfully dilutes owners.
Using the latest filing (FY2026 ended July 31, 2026), the record is mostly strong: Zscaler scaled from hypergrowth into multi-billion-dollar revenue without a large, obviously value-destructive acquisition spree, and it has funded expansion conservatively. Execution has been credible—growth has slowed from earlier peak rates, but the company still compounded from $1,617,000,000 revenue in FY2023 to $2,673,100,000 in FY2025, while losses narrowed before newer AI-era reinvestment. That is not perfect, but it is consistent with what management said the platform opportunity was.

Governance looks clean. The FY2026 10-K shows no error-correction restatement, no auditor disagreement, and no disclosed fraud-type event. Litigation appears routine rather than thesis-breaking. The main blemish is familiar to SaaS investors: heavy SBC shifts part of the economics from the income statement to dilution.

Valuation

Conclusion: Zscaler looks like a very good business priced as if strong execution will continue for years; that leaves little margin of safety at USD 38.11B. Using FY2026 as the latest hard data point, the stock trades at roughly 11x EV/sales and ~35x FCF, but that understates the real cost because share count rose from 147.2M to 163.1M since FY2023. The business is not obviously absurd, but it is still expensive, not cheap.

Management reaffirmed Q1 and FY2027 guidance on October 6, 2026. The exact numerical ranges were not available in the filing excerpt I could access, but the message was clear: management still expects solid double-digit growth. That is credible; Zscaler has generally executed well on revenue and cash flow. The issue is not credibility. The issue is that the stock already discounts a lot of that success.

My current intrinsic value estimate is about USD 31B market cap, with a reasonable range of USD 22B-68B depending on whether Zscaler matures into a durable 25%+ FCF-margin platform or settles into slower growth with ongoing dilution. At today’s price, the market seems to embed roughly high-teens revenue CAGR through 2031 plus sustained premium multiples. That is possible, but not conservative.

If Zscaler liquidated today, equity holders would not get anything close to USD 38B. Tangible book was only USD 1.17B at FY2026; even using cash less debt and some working-capital recovery, liquidation value is probably only low single-digit billions. This is a franchise-value stock, not an asset-value stock.

Conclusion: Zscaler can still compound, but from today's valuation the upside likely looks more like a solid winner than an easy multi-bagger. At roughly USD 38110000000 on USD 3352523008 of TTM revenue and about USD 1074915840 of TTM free cash flow, the stock already assumes the zero-trust platform remains strategically central for a long time.

The moat can plausibly hold another 10 years, because Zscaler is not just selling point products; it sits in traffic flow, policy enforcement, and increasingly data and AI-era control points. The flywheel still works: more modules, more traffic, more policy data, more reasons to standardize on the platform. That said, what erodes first is not demand for security, but architectural relevance: if hyperscalers or integrated platforms make secure access “good enough” as a bundled feature, Zscaler’s pricing power narrows.

Reinvestment still looks value-creative today; revenue, gross profit, and free cash flow are all scaling faster than the income statement suggests because GAAP losses are heavily distorted by stock comp and growth spending. But incremental returns will fall as large-enterprise penetration rises.

Base case: 2-3x in 10 years if the moat holds. Thesis-break signal: customers stop consolidating onto the platform - visible in sustained module-adoption slowdown, weaker large-customer expansion, and gross-margin/FCF deterioration despite healthy security spending.

Conclusion: Zscaler’s risk profile is moderate, not high: the balance sheet does not look like the weak point; trust and competitive relevance do.

As of the July 31, 2025 10-K, the real permanent-impairment risk is loss of customer trust. If Zscaler suffered a major platform breach, control failure, or prolonged outage, the damage would be worse than for most software vendors because customers buy it to sit in-line with critical traffic. That risk is low probability but very high impact.

Second is competitive displacement. If zero-trust spending consolidates into broader platforms from Microsoft, Palo Alto, or other control-point owners, Zscaler could keep growing yet lose pricing power and strategic centrality. That is a slower impairment path, but more plausible than solvency stress.

Financial risk is comparatively modest: recurring revenue, large-enterprise customers, and no obvious liquidity alarm in the filing make debt or funding stress unlikely. Governance also looks acceptable; the main watch item is heavy stock-based compensation, which is more a capital-allocation/ownership dilution issue than a business-survival issue.

Most of the rest — deal timing, macro budgets, federal spending variability, FX, and valuation multiple compression — is uncertainty, not thesis-breaking risk.

Final Verdict: TRACK

Zscaler is a very good business, but not a very good stock here. The core franchise still looks attractive for a 5-10 year owner: recurring revenue, strong gross margins, real zero-trust relevance, and a long runway to deepen wallet share. But the valuation already assumes a lot of that success, and your own base case only gets to a modest premium over today’s market cap. That is not enough.

As of FY2026 (ended July 31, 2026), the business still looks healthy: revenue reached $3.35 billion, gross profit $2.57 billion, and free cash flow about $779 million. That is the profile of a real compounding engine, not a fad. The problem is that GAAP profitability remains thin, SBC-driven dilution is meaningful, and broad-platform rivals like Palo Alto and CrowdStrike are strong enough to cap how euphoric the terminal assumptions should be.

This is closer to exceptional than mediocre, but not quite elite. The moat is real, though not unassailable; the risk of permanent capital loss comes less from balance-sheet fragility and more from overpaying for a great story or from a trust-breaking outage/security failure.

The inversion case against a TRACK verdict is straightforward: if Zscaler sustains 20%+ growth for longer than expected, expands margins cleanly, and becomes one of a handful of dominant AI-era security control planes, today’s price will look reasonable in hindsight. That can happen. I just do not think the odds-weighted payoff is favorable enough today.

For a current holder, this is a HOLD, not an aggressive add. For a new buyer, wait for either a materially better entry or fresh evidence that durable earnings power is catching up to the valuation.

What to research further

• Net revenue retention, large-customer cohort behavior, and whether upsell is slowing structurally.
• SBC dilution versus true per-share free cash flow compounding.
• Whether platform expansion is improving win rates against Palo Alto/CrowdStrike, or just raising go-to-market costs.