ZS · Zscaler --- Zero Trust Pure-Play at a Valuation Crossroads
Research Date: May 12, 2026 Market Cap: ~$24.5B Research Type: Phase 2 Formal --- Fact-based draft with cross-verified public sources
Data Credibility & Verification Layer
| Data Type | Source | Tier |
|---|---|---|
| Quarterly financials | Zscaler IR press release / SEC EDGAR | L1-L2 |
| Q2 FY2026 earnings | Zscaler IR (2026-02-26) | L1 |
| FY26 full-year guidance (revised up) | Zscaler IR, published same day as Q2 | L2 |
| Competitive comparisons | Seeking Alpha / Motley Fool / StockTwits (multiple sources) | L3 |
| Analyst targets | MarketBeat / TipRanks / StockAnalysis (35-58 analysts) | L3 |
| Balance sheet | Simply Wall St / Yahoo Finance | L2-L3 |
| ARR data | Zscaler IR press release | L1 |
Limitations:
- No FactSet/Bloomberg consensus subscription
- Q3/Q4 FY2026 not yet reported (fiscal year ends July)
- GAAP remains in loss territory; profitability analysis relies primarily on non-GAAP
- Zero trust market share data is from third-party estimates
- Stock price has been volatile recently (YTD -42%); quoted price may have shifted
Key Takeaways
Thesis: Zscaler is the pure-play leader in zero trust network security, with a unique inline proxy architecture that sits at the structural inflection point of the enterprise migration from VPN/firewall to zero trust models. FY26 ARR guidance was raised to $3.73-3.75B (+24% YoY), and Q2 revenue growth of 26% exceeded expectations. AI-driven cyber threats (deepfakes, AI-generated phishing, automated attacks) are expanding security budgets, creating a long-term tailwind for Zscaler. However, the stock has declined 42% YTD (from $230+ to ~$135), reflecting SaaS sector valuation compression and growth deceleration concerns. At PS 7.5x, the valuation has returned to a relatively reasonable range, though GAAP losses and platform competition from Palo Alto Networks and CrowdStrike remain structural risks.
Scenario Analysis (educational illustration only):
- Bear: $95 --- PS 5x; growth drops to 15% + continued sector compression
- Base: $175 --- PS 10x; FY27 ARR reaches $4.5B + growth sustained above 20%
- Bull: $250 --- PS 13x; AI security supercycle + large enterprise adoption accelerates
Key Risks:
- Growth deceleration: ARR growth declined from 34% in FY24 to 24% in FY26; falling below 20% would trigger further valuation compression
- Palo Alto platformization competition: PANW's bundling strategy (SASE+XDR+SOC) could erode Zscaler's large enterprise base
- Persistent GAAP losses: FY25 full-year loss of -$0.27/share; GAAP profitability likely 2-3 years away
- SaaS sector valuation compression: High interest rate environment continues to pressure high-growth unprofitable SaaS
Note: No position recommendations. See Disclaimer.
1. Business Overview
| Dimension | Data | Source |
|---|---|---|
| Company | Zscaler, Inc. | NASDAQ: ZS |
| SIC | 7372 - Prepackaged Software | SEC |
| Employees | ~8,000 | Zscaler IR |
| Fiscal Year | July end (FY26 = 2026-07-31) | Zscaler IR |
| CEO / Founder | Jay Chaudhry (founded 2007) | -- |
| Headquarters | San Jose, California | -- |
| Founder Ownership | Jay Chaudhry + family ~16% | SEC 13F |
| IPO | March 2018 | -- |
Product Portfolio
| Product | Positioning | TAM Share | Description |
|---|---|---|---|
| ZIA (Zscaler Internet Access) | Secure Web Gateway replacement | ~40% | Core product, replaces traditional firewalls |
| ZPA (Zscaler Private Access) | Zero Trust Network Access (VPN replacement) | ~30% | Core for remote work |
| ZDX (Digital Experience) | Digital experience monitoring | ~10% | End-to-end visibility |
| Zscaler for Workloads | Cloud workload protection | ~10% | Multi-cloud security |
| AI/ML Threat Protection | AI-driven threat detection | ~10% | Newest module, fastest growing |
| Data Protection (CASB/DLP) | Cloud data protection | Included in ZIA | Cross-sell incremental |
Core Architecture --- Zero Trust Exchange
Zscaler's key differentiation lies in its inline architecture. All user traffic passes through Zscaler's cloud for inspection, rather than being routed around it (out-of-band). This eliminates the need for VPNs and firewalls entirely. The platform processes 400B+ daily transactions, creating a data flywheel effect for AI-based threat detection. With 150+ global Points of Presence (PoPs), the platform provides low-latency coverage worldwide. FedRAMP certification grants qualification for US federal government procurement.
FY26 H1 Results (Q1+Q2)
| Metric | Q2 FY26 | Q1 FY26 | YoY (Q2) | Notes |
|---|---|---|---|---|
| Revenue | $815.8M | $788.1M | +26% | Beat expectations |
| ARR | $3,359M | $3,150M (est.) | +25% | Including Red Canary acquisition |
| Organic ARR Growth | -- | -- | +21% | Excluding acquisitions |
| Billings | $743M | -- | +18% | Growth lagging revenue |
| Non-GAAP OI | $181M | -- | -- | Operating margin 22%+ |
| Non-GAAP EPS | $1.01 | -- | -- | -- |
| OCF | $204M | -- | +14% | -- |
| FCF | $169M | -- | -- | FCF Margin ~20.7% |
FY26 Full-Year Guidance (Raised with Q2)
| Metric | FY26 Guidance (Revised Up) | Growth | Notes |
|---|---|---|---|
| ARR | $3,730M-$3,745M | +24% | Raised from $3,698-$3,718M |
| Revenue | $3,309M-$3,322M | +24% | Raised from $3,282-$3,301M |
| Non-GAAP OI Margin | ~22% | -- | -- |
| FCF Margin | 26.5%-27% | -- | Full-year FCF ~$880M |
Growth Flywheel
| Flywheel | Description |
|---|---|
| Land & Expand | Customers enter with ZIA, expand to ZPA, ZDX, Workloads, Data Protection |
| Platform ARPU Uplift | Average customer grows from 2 modules to 4+ modules |
| $1M+ ACV Customers | Represent 50%+ of total ARR; renewal rate >120% |
| Data Flywheel | 400B+ daily transactions train better AI models, detecting more threats, attracting more customers |
2. Financial Deep Dive
8-Quarter Trend
| FQ | Period End | Revenue ($M) | YoY | ARR ($M) | Billings ($M) | Non-GAAP EPS | Notes |
|---|---|---|---|---|---|---|---|
| Q3 FY24 | 2024-04 | $553 | +32% | -- | -- | $0.88 | High-growth period |
| Q4 FY24 | 2024-07 | $593 | +30% | $2,680 | $912 | $0.88 | FY24 close |
| Q1 FY25 | 2024-10 | $628 | +26% | $2,758 | $517 | $0.77 | Growth decelerating |
| Q2 FY25 | 2025-01 | $647 | +24% | $2,841 | $643 | $0.78 | -- |
| Q3 FY25 | 2025-04 | $673 | +22% | $2,918 | $628 | $0.82 | Further deceleration |
| Q4 FY25 | 2025-07 | $719 | +21% | $3,015 | $835 | $0.88 | FY25 close; ARR crosses $3B |
| Q1 FY26 | 2025-10 | $788 | +26% | $3,150 (est.) | -- | -- | Growth re-accelerating |
| Q2 FY26 | 2026-01 | $816 | +26% | $3,359 | $743 | $1.01 | Beat; guidance raised |
Key observations: Revenue growth shows a clear V-shaped recovery, bottoming at +21% in Q4 FY25 and rebounding to +26% in Q1-Q2 FY26. ARR crossed $3B in Q4 FY25 (including ~$100M from the Red Canary MDR acquisition). Billings growth of +18% in Q2 FY26 lags revenue growth of +26% --- this requires monitoring as billings are a leading indicator. Non-GAAP operating margin has stabilized above 20% for the first time, demonstrating scale economies. GAAP remains in loss (FY25 full-year -$0.27/share), with SBC of ~$600-800M/year as the primary drag.
FY25 Full-Year Summary
| Metric | FY25 | FY24 | YoY |
|---|---|---|---|
| Revenue | $2,667M | $2,168M | +23% |
| ARR | $3,015M | $2,680M | +12.5% (Q4-to-Q4) |
| GAAP EPS | -$0.27 | -$1.11 | Improving |
| Non-GAAP OI Margin | ~20% | ~18% | +2pp |
| FCF | ~$700M | ~$550M | +27% |
Balance Sheet
| Metric | Q2 FY26 (2026-01-31) | Notes |
|---|---|---|
| Stockholders' Equity | $1.8B | Growing steadily |
| Total Debt | $1.7B | Primarily convertible notes |
| Cash + Short-Term Investments | $3.5B | Ample |
| Net Cash | +$1.8B | Cash exceeds debt |
| Debt/Equity | 94.5% | Moderate (convertible note nature) |
The balance sheet is extremely healthy with $1.8B in net cash. The $1.7B in debt consists of convertible notes, which convert to equity if the stock price is above the conversion price at maturity. FY26 full-year FCF guidance of ~$880M (26.5-27% margin) demonstrates strong cash generation. Even at zero growth, cash plus FCF could sustain operations for 5+ years. The GAAP loss is entirely driven by non-cash SBC.
3. Growth Drivers & Catalysts
Catalyst 1: AI-Driven Cyber Threats Expand Security Budgets AI-generated phishing has surged 300%+, deepfake social engineering attacks are emerging, and automated attack tools are proliferating. Enterprise security budgets are shifting from ~6% to ~8%+ of IT spending.
Catalyst 2: Zero Trust Penetration Remains Low (~30%) Large enterprise zero trust penetration is approximately 30%, with SMBs below 10%. The TAM is expanding from ~$40B currently to an estimated $100B+ by 2030.
Catalyst 3: V-Shaped Growth Recovery (Verified in FY26 Q1/Q2) Growth bottomed at +21% in FY25 Q4 and rebounded to +26% in Q2 FY26. If this trajectory sustains above 22%, a PS recovery to 10x+ is reasonable.
Catalyst 4: FCF Margin Improvement FCF margin has improved from ~25% in FY24 to a FY26 guidance of 26.5-27%. Rising FCF Yield attracts value-oriented investors.
Catalyst 5: Valuation Recovery from Historical Lows PS at 7.5x is the lowest since IPO in 2018 (never previously below 10x). With a 50-63% discount to CrowdStrike and Palo Alto, any interest rate relief or cybersecurity sector rotation could trigger multiple expansion.
4. Risk Analysis
Risk 1: Growth Deceleration Trend (Largest Structural Risk) ARR growth: FY24 34% to FY25 23% to FY26 24% (V-shaped but at a lower plateau). If FY27 growth drops below 18%, PS could compress to 5x. Billings growth at +18% is a leading indicator that warrants close monitoring.
Risk 2: Palo Alto Platformization Competition (Largest Competitive Risk) Palo Alto's platformization strategy bundles SASE, XDR, and SOC functionality, effectively offering zero trust capabilities as part of a broader platform at bundled pricing. Large customers choosing PANW's one-stop solution over Zscaler's point product would erode market share. Monitor: DBNRR (currently ~120%); any drop below 115% is a warning signal.
Risk 3: Persistent GAAP Losses FY25 GAAP EPS of -$0.27 with SBC at $600-800M/year. Some institutional investors require GAAP profitability as an investment prerequisite. However, non-GAAP profitability is firmly established and FCF is strong.
Risk 4: Billings-Revenue Divergence (Leading Indicator Risk) Q2 FY26 billings grew +18% vs revenue +26%. Billings are a leading indicator for future revenue; sustained divergence could signal FY27 revenue deceleration. Note that billings can be lumpy due to large deal seasonality (typically concentrated in Q4).
Risk 5: SaaS Sector Systemic Risk High interest rate environment continues to suppress high-growth, unprofitable SaaS valuations. If the 10Y Treasury breaks above 5.0% and the Fed pauses rate cuts, the sector faces further headwinds.
5. Valuation Framework
Current Valuation Snapshot
| Metric | Value |
|---|---|
| Shares Outstanding | ~152M |
| Current Price | ~$135 |
| Market Cap | ~$24.5B |
| TTM Revenue (est.) | ~$2,896M |
| FY26 Revenue Guidance | $3,309-$3,322M |
| ARR (Q2 FY26) | $3,359M |
| FCF TTM (est.) | ~$750M |
| Non-GAAP EPS TTM (est.) | ~$3.49 |
| Total Debt | $1.7B |
| Cash | $3.5B |
| Net Cash | +$1.8B |
| EV | ~$22.7B |
| PS (TTM) | 8.4x |
| PS (Forward, FY26) | 7.4x |
| EV/ARR | 6.8x |
| FCF Yield (TTM) | 3.1% |
| FCF Yield (FY26 guidance) | 3.6% |
Forward Valuation (FY27 Estimate, +20% Growth)
| Metric | Value |
|---|---|
| FY27 Revenue (est.) | ~$4.0B |
| FY27 ARR (est.) | ~$4.5B |
| FY27 FCF (est.) | ~$1.1B (27.5% margin) |
| FY27 Non-GAAP EPS (est.) | ~$4.5-$5.0 |
| Forward PS (FY27) | 6.1x |
| Forward EV/ARR | 5.0x |
| Forward FCF Yield | 4.5% |
| Forward Non-GAAP PE | ~28.4x |
Valuation Methods
| Method | Value | Assessment |
|---|---|---|
| PS Forward (7.4x) | Neutral | Simply Wall St fair PS estimate = 8.2x; currently slightly below |
| EV/ARR (6.8x) | Low | Historical median 12-15x; significantly compressed |
| FCF Yield (3.6%) | Attractive | Approaching 10Y Treasury of 4.4%, with growth premium |
| Forward Non-GAAP PE (28.4x) | Reasonable | vs CrowdStrike ~36x; 21% discount |
Zscaler's valuation is at historical lows. PS at 7.5x has never been below 10x since the 2018 IPO. EV/ARR at 6.8x is well below the typical 10-15x for Rule-of-40 SaaS companies. FCF Yield at 3.6% provides a margin of safety for a company growing at +26%. The stock has already declined 42% YTD; most of the valuation compression may be behind it.
The core upside case: growth sustained above 20% drives PS recovery to 10x, implying a stock price of ~$220 (+63%). The core downside case: growth drops below 15%, PS compresses to 5x, implying ~$100 (-26%).
Peer Comparison
| Dimension | Zscaler | CrowdStrike | Palo Alto | Fortinet | Cloudflare |
|---|---|---|---|---|---|
| Market Cap | $24.5B | ~$90B | ~$120B | ~$80B | ~$40B |
| TTM Revenue | ~$2.9B | ~$4.5B | ~$8.5B | ~$6.0B | ~$2.0B |
| Revenue Growth | +26% | ~+26% | ~+15% | ~+12% | ~+28% |
| Gross Margin | ~80% | ~75% | ~76% | ~80% | ~78% |
| Non-GAAP OM | 22% | ~25% | ~28% | ~30% | ~12% |
| FCF Margin | ~27% (guidance) | ~33% | ~38% | ~30% | ~15% |
| PS (TTM) | 7.5x | ~20x | ~14x | ~13x | ~20x |
| GAAP Profitable | No | Newly | Yes | Yes | No |
| Security Domain | Zero Trust / SASE | Endpoint / XDR | Full-stack / Platform | Network / Branch | WAF / Edge |
Zscaler trades at a 63% PS discount to CrowdStrike despite matching its revenue growth rate. This reflects concerns about growth quality, GAAP losses, and the pure-play zero trust positioning (which is both a strength for focus and a risk for single-market exposure). The competitive landscape is evolving: the 2026-2028 period will determine whether enterprises prefer one-stop platforms (favoring Palo Alto) or best-of-breed components (favoring Zscaler).
This report is for educational purposes only and does not constitute investment advice. All data sourced from SEC EDGAR filings and public company disclosures. See full Disclaimer.