Zscaler, Inc.

Zscaler (ticker: ZS, currency: USD) has a strong business model: recurring security subscriptions built on a multitenant cloud platform. The economic engine is still strengthening, but it is no longer accelerating.

As of the latest official data I am using, FY2025 ended July 31, 2025.

Zscaler’s DNA is straightforward: it sells cloud-delivered network security and zero-trust access to large enterprises and governments. Customers pay recurring subscriptions to route user, app, and data traffic through Zscaler’s cloud instead of legacy firewalls, VPNs, and on-prem appliances. That creates a good model economically: high switching pain, centralized updates, low marginal cost per extra user, and a strong incentive for customers to standardize more security spend on the same platform.

The core business is still growing. Revenue rose from 1617000000 in FY2023 to 2167800000 in FY2024 to 2673100000 in FY2025. That is healthy. But the slope is moderating: growth slowed from 34% to 23%. That is not deterioration yet; it is what maturing scale looks like. The key question is whether upsell into broader platform modules keeps offsetting slower new-logo growth.

This is mostly a win-win model. Customers get simpler architecture, better security, and often lower total cost than maintaining boxes and MPLS-style legacy networks. Zscaler benefits when customers consolidate more workflows onto its platform. That is better than a model that depends on nickel-and-diming usage or locking customers into degraded service.

What I would watch for deterioration:

• sustained deceleration in subscription revenue growth,
• weaker large-customer adds and expansion,
• rising churn or lower net retention,
• slowing billings/RPO growth ahead of revenue,
• evidence that SSE/zero-trust becomes commoditized.

If I could track only a few numbers, I would watch subscription revenue growth, remaining performance obligations or billings growth, large-customer count, gross margin, and free cash flow margin. Those together tell you whether Zscaler is still winning the platform land-and-expand game.

Conclusion: Zscaler operates in a strong long-term tailwind market: enterprise security is shifting from on-prem boxes and VPNs to cloud-delivered zero trust, SSE, and SASE. The market is attractive; the battlefield is not.

Most recent company filing used: FY2025 10-K, year ended July 31, 2025.

This market has evolved from fragmented point products toward platform consolidation. That helps Zscaler because its architecture is native to the cloud transition, but it also raises competitive pressure as large vendors bundle broader suites. TAM is large and still expanding; the real question is not demand, but whether Zscaler can keep winning platform share without margin dilution.

Conclusion: Zscaler has a real but not impregnable moat; it is strongest in switching costs plus scaled cloud-security operations, and it looks broadly stable rather than clearly widening as of April 30, 2026.

Its edge is not brand or patents. The real moat is architectural: a multi-tenant security cloud distributed across 160+ public exchanges and thousands of private exchanges, serving 9,400+ customers in 185+ countries. That scale improves latency, policy consistency, and threat response; management says the platform blocks 225 million+ threats daily and pushes 250,000+ unique security updates a day, creating a modest data/process flywheel. Large-enterprise adoption matters more: roughly 40% of Forbes Global 2000 and 45% of Fortune 500 are customers, which suggests trust and embedding, not just marketing.

Still, this is not a toll bridge. Customers can switch, even if painfully, and the field is crowded with Microsoft, Palo Alto Networks, Netskope, and Cisco. That limits pricing power and keeps the moat narrower than the best software franchises.

Conclusion: Zscaler’s balance sheet is strong, but its accounting returns are still mediocre because stock-based compensation remains very heavy. Using data through April 30, 2026, this is a net-cash, not balance-sheet-risk, story.

No obvious receivables red flag: accounts receivable actually fell from 992181000 to 730461000 despite continued growth. The key judgment is simple: debt is prudent and manageable, but earnings quality is only decent because cash conversion benefits from upfront billings and substantial SBC. FCF conversion versus GAAP earnings is not very meaningful while GAAP earnings remain negative.

Runway for Reinvestment

Conclusion: Zscaler still has a real but no longer exceptional reinvestment runway: the market opportunity is broad enough for years of compounding, but future returns will come more from product breadth and enterprise wallet-share than from the easy early land-grab.

As of July 31, 2025, the business still looks asset-light and internally fundable. Revenue rose from 1671774000 in FY2023 to 2167807000 in FY2024 to 2673082000 in FY2025, so reinvestment has clearly worked. The best opportunities remain organic: deeper penetration of Zero Trust, data protection, workload security, and newer AI-security modules into large enterprises already on the platform. That supports a plausible mid-teens to low-twenties organic growth path for some time, but not the prior hypergrowth phase.

The catch is that Zscaler’s true reinvestment engine is mostly opex, not capex. That can produce high incremental returns, but those returns are less pristine once you treat stock-based compensation as a real cost. Incremental ROIC is still good, just likely past peak.

Zscaler is a strong specialist, but not the category king: it leads in pure-play zero-trust web access and SSE, while Palo Alto wins on platform breadth and CrowdStrike on endpoint-led consolidation.

Its real peers are mostly global, not domestic: Palo Alto, Netskope, Cloudflare, Cisco, and increasingly CrowdStrike. Zscaler competes with a cleaner cloud-native architecture and strong large-enterprise credibility; it loses where buyers prefer broader bundled platforms, especially when firewall, endpoint, SOC, and identity budgets are being consolidated.

Share is likely still inching up in SSE/zero-trust, but not in overall cyber spend. The driver is product fit: internet security, private app access, and data protection all benefit from traffic moving off the corporate network. The headwind is consolidation: Palo Alto and CrowdStrike increasingly sell a “fewer vendors” story that CFOs like.

At the current price, Zscaler usually deserves a quality premium, but not an unlimited one: it is a leader in a valuable slice of security, not the inevitable winner of the whole stack.

Conclusion: Zscaler looks founder-aligned but not especially shareholder-friendly: governance is broadly clean, but heavy stock-based compensation and routine insider selling keep this from scoring as a top-tier owner-operator setup.

Founder-CEO Jay Chaudhry still has real skin in the game and remains the key cultural and strategic anchor; this is not a fully financialized, hired-manager story. That said, he is not a controlling shareholder, and minority holders are still exposed to a familiar SaaS issue: equity dilution doing part of the compensation work. There is no real capital-return story here.

Bottom line: aligned enough to own, not aligned enough to ignore dilution.

Conclusion: strong operators, but not especially shareholder-friendly owners. Using the latest official data through July 31, 2025, Zscaler’s management has executed well on strategy: revenue rose from $673.1 million in FY2021 to $2673.1 million in FY2025, and customers increased from 5600 to 9400, which supports the claim that they did what they said on enterprise expansion and platform breadth. Capital allocation is more mixed. The business has been built mainly through organic investment rather than reckless dealmaking, and there is no obvious value-destructive acquisition on record here, but stock-based compensation remains a real transfer from owners to employees: shares outstanding climbed from 138735981 in August 2021 to 158300823 in August 2025. Governance looks acceptable: the FY2025 10-K shows auditor attestation on controls, no flagged restatement/error correction, and no accountant disagreement. I do not see a disclosed litigation issue here that looks thesis-breaking, but adjusted-profit messaging still flatters economics versus GAAP.

Conclusion: Zscaler is not obviously absurdly priced, but it is still expensive relative to its likely 5-year cash-flow outcome. At USD 26.83B market cap, the stock already assumes durable high-teens growth and continued strong cash conversion.

Using FY2026 TTM revenue of USD 3.35B and free cash flow of USD 1.07B, Zscaler trades at roughly 8.0x sales and 25x FCF. For a high-quality security platform, that is defensible; for a company with still-negative GAAP earnings, rising capex, and ongoing dilution, it is not cheap. My base-case intrinsic value today is about USD 20B, which is below the current quote after discounting future value back to present.

Management’s long-term aspiration is clear even if it does not frame it as a hard multiyear target in the 10-K: sustain strong subscription growth and widen margins with scale. That ambition is credible in direction - Zscaler has executed well for years - but the harder question now is not whether it grows, but whether it can grow fast enough to justify a premium multiple from this base. If it roughly meets a decelerating version of its historic cadence, upside is limited.

Current price embeds something close to the base-to-bull boundary. Liquidation value is poor support: book equity is USD 2.6B, tangible book only USD 1.17B; even including cash/investments net of debt, shareholders likely recover only ~USD 2B-3B in a wind-down. Good business, thin margin of safety.

Zscaler still looks ownable, but no longer like an open-ended compounding machine. The moat is real: a cloud-native control plane for secure access, strong gross margins, and meaningful switching friction once traffic, policy, and identity workflows are embedded. But the first thing that erodes is not demand for zero trust; it is Zscaler’s ability to remain the premium standalone winner as Microsoft, Palo Alto Networks, and broader platforms bundle overlapping capabilities.

The reinvestment flywheel is still working, just with diminishing sharpness. High gross margins and rising free cash flow show the model scales, yet persistent GAAP losses, stock-based dilution, and heavy go-to-market intensity suggest incremental returns on capital are drifting down as the category matures. That points to a good business, not an inevitable multi-bagger.

In adverse conditions, Zscaler should still be relevant in 10-20 years because secure traffic inspection and policy enforcement are enduring needs. The weaker question is whether it keeps outsized bargaining power. My base case is roughly 1.5-2.5x in 10 years if the moat holds, not a classic 5x compounder from here.

Broken-thesis signal: dollar-based net retention settling near 100 percent and growth in large customers stalling; that would mean the platform has lost expansion power.

Conclusion: Zscaler’s risk profile is manageable for a 5-10 year investor; the real danger is not balance-sheet stress but losing architectural relevance if secure access and zero-trust functions get bundled into broader platforms faster than Zscaler can keep its edge. Using the most recent financial data available, fiscal year ended July 31, 2026, permanent-impairment risk looks moderate, not high.

The single risk that could permanently impair the business is competitive displacement/commoditization. If Microsoft, Palo Alto Networks, Cisco, Netskope, or Cloudflare deliver “good enough” zero-trust access and data protection inside broader suites, Zscaler could lose pricing power, see weaker win rates, and watch its premium multiple compress into an ordinary security-software profile. Probability: moderate; impact: high.

Everything else matters less. A major platform outage or security failure would hurt trust, but the business is diversified and mission-critical enough to recover unless failures become repeated. Financial risk is low: recurring revenue, healthy scale, and manageable converts mean this is not a solvency story. Governance risk is also low; the main watchpoint is founder influence, not fraud. Macro budget cycles, federal timing, and AI spending swings are mostly uncertainty, not permanent risk.

Final Verdict: TRACK

Zscaler is a good business, not a great stock at this price. It has a real product edge, sticky enterprise subscriptions, strong gross margins, and low balance-sheet risk. But this is no longer an underappreciated hypergrowth story: growth is decelerating, competition from broader platforms is intensifying, and stock-based compensation still weakens the quality of reported economics. For a 5-10 year investor, the key issue is simple: the business likely compounds, but the stock does not offer enough upside versus execution risk today.

This is not a permanent-impairment-heavy business. The product is relevant, the balance sheet is sound, and zero-trust remains a durable need. The risk is more subtle: category success attracts platform bundling, and platform competition can compress both growth and pricing power before Zscaler fully matures into high-quality GAAP earnings.

The strongest argument against a TRACK verdict, using inversion, is that I may be underestimating how far Zscaler can extend from a best-of-breed SSE vendor into a broader enterprise security control plane. If that happens, sustained 20%+ growth plus stronger margin expansion could make today’s valuation reasonable. I do not think that outcome is impossible; I think it is already too well priced in.

So: do not buy now. Track it for either a materially lower price or clearer evidence that moat expansion is outrunning competitive bundling. Existing holders should trim, especially if position size is large; I would not add fresh capital here.

Is the analysis accurate and complete? Mostly, yes — but to tighten conviction, research further:

• Net revenue retention and large-customer cohort durability
• SBC dilution versus true per-share FCF growth
• Win rates versus Palo Alto and CrowdStrike in large platform deals
• Whether GAAP operating leverage can scale without slowing innovation