Zscaler posted 25% revenue growth, record Q3 operating margin, and expanding traction in data security, branch, and AI products. The stock earns a Buy, but decelerating growth and higher capex keep valuation discipline important.
Zscaler (ZS) remains one of the cleaner ways to own enterprise cybersecurity with a cloud-native architecture, strong recurring revenue, and unusually strong free cash flow for a company still growing this fast. The core bull case rests on three hard facts. First, fiscal Q3 2026 revenue rose 25% YoY to $850.5M, while ARR reached $3.525B, also up 25%. Second, non-GAAP operating margin hit an all-time high of 23% in Q3, showing that scale is translating into profitability. Third, product expansion is working: data security ARR crossed $500M, Zero Trust Branch ARR approximately tripled YoY, and AI Protect bookings crossed $100M over the last 12 months.
The stock is not a simple bargain. Zscaler still posts GAAP losses, trailing EPS is -$0.44, and management gave an early fiscal 2027 view for total ARR and revenue growth of 16% to 17%, which is a clear deceleration from the 24% to 25% pace in fiscal 2026. The company also cut full-year free cash flow margin guidance to 22.8% to 23.3% from 26.5% to 27% because higher memory, storage, and processor costs are pushing capex higher. That mix creates a classic high-quality growth-stock tension: the business is getting stronger, but the valuation still demands execution.
For a balanced, moderate-risk investor with a medium-term horizon, the setup supports a Buy rating rather than an aggressive chase. Zscaler has the ingredients of a durable compounder: 7/7 recent earnings beats, $1.78B of net cash, gross margin of 76.6%, operating cash flow of $972.5M in fiscal 2025, and a large installed base of more than 9,400 customers. But the stock also sits in a market that punishes even slight growth slowdowns, and management itself took a prudent tone around sales leadership turnover and new-logo momentum. The business looks stronger than the near-term narrative, but the shares still need disciplined entry points.
Zscaler is a cloud security company headquartered in San Jose, California, founded in 2007 and public since March 2018. It operates in Software - Infrastructure and sells a cloud-native security platform rather than a hardware appliance stack. The company had 7,923 employees and generated $2.673B in fiscal 2025 revenue, up from $2.168B in fiscal 2024 and $1.617B in fiscal 2023.
Get AI-powered research reports, daily market intelligence, and a personal analyst in your pocket.
Get Full Access →The company’s core idea is simple and still powerful: the internet becomes the network, the cloud becomes the data center, and users should connect directly to applications through policy rather than being dropped onto a corporate network. That architecture underpins the Zero Trust Exchange, which management says spans more than 160 public exchanges globally and processes more than 500B transactions per day. In the 2025 10-K, Zscaler said it blocks more than 225M threats each day and performs more than 250,000 unique security updates daily.
Scale matters here because Zscaler is not selling a single point tool. It is selling a control layer that sits between users, devices, workloads, branches, applications, and now AI systems. The company says it serves more than 9,400 customers across major geographies and counts about 40% of the Forbes Global 2000 and more than 45% of the Fortune 500 as customers. That customer base gives it both credibility in large enterprise deals and a broad cross-sell runway.
Financially, Zscaler is in the transition zone between high-growth disruptor and scaled platform company. Revenue has compounded quickly, gross margins remain above 76%, and free cash flow has expanded from $143.7M in fiscal 2021 to $726.7M in fiscal 2025. At the same time, GAAP operating income was still -$128.5M in fiscal 2025 and net income was -$41.5M. This is a business with real economic strength, but stock-based compensation and ongoing investment still keep GAAP profitability from fully catching up.
Zscaler reports one operating segment, so the best way to understand the business is by solution area and customer cohort rather than formal segment lines. The company’s platform now centers on four broad solution pillars described in the 10-K: Zero Trust Everywhere, Data Security Everywhere, Security for AI, and Agentic Operations. That matters because it shows Zscaler is no longer just a secure web gateway or VPN replacement story.
Zero Trust Everywhere is the core engine. It spans Zero Trust Users, Zero Trust Cloud, and Zero Trust Branch. Management highlighted that customers increasingly buy across all three domains, and the number of Zero Trust Everywhere enterprises rose to more than 700 in Q3 FY2026 from over 550 in Q2. That is a sharp sequential jump and a useful sign that platform adoption is broadening, not narrowing.
Data Security is becoming a meaningful second leg. In Q3 FY2026, data security ARR crossed $500M and grew more than 30% YoY. Management also cited a federal agency expansion using 6 of Zscaler’s 8 data security modules across data classification, email DLP, endpoint DLP, inline DLP, and GenAI Security. That kind of module density matters because it raises switching costs and turns the platform into infrastructure rather than a line item.
Zero Trust Branch is smaller but moving fast. Management said branch ARR approximately tripled YoY and highlighted the largest branch deal in company history, an 8-figure upsell with a healthcare system deploying the unified Zero Trust Branch solution across 2,000 sites. When a product line triples ARR and lands a record deal, that is not a science project. It is a real growth vector.
AI security is the newest layer, but the early traction is notable. AI Protect bookings crossed $100M over the past 12 months, and management said inbound requests are broad across the installed base. In Q3, non-seat-based metered usage solutions accounted for just over 30% of new ACV, and ARR tied to those offerings grew more than 100% YoY. That shift is important because it gives Zscaler more exposure to usage-based growth rather than only seat-based expansion.
Get AI research on any stock
Instant reports, daily intelligence, and an AI analyst in your pocket.
The flagship product is the Zscaler Zero Trust Exchange, which acts as the traffic control system for users, workloads, branches, and applications. The architecture is designed to connect authorized entities only to the specific applications they are allowed to use, without exposing those applications to the internet or placing users on the corporate network. In plain English, it tries to remove the hallway rather than just adding more locks to the doors.
Within that platform, Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) remain foundational. ZIA secures access to internet and SaaS destinations with inline inspection, while ZPA secures access to private applications without legacy VPNs. The 10-K describes ZPA’s model as connecting users only to authorized applications through microtunnels, which is meant to prevent lateral movement. That is one of Zscaler’s clearest architectural selling points versus firewall-centric approaches.
The product story has become stronger because Zscaler is now layering adjacent modules onto the same control plane. ZDX adds digital experience monitoring. Zero Trust Cloud extends policy enforcement to workloads. Zero Trust Branch rethinks branch connectivity around policy-based access. Data Security Everywhere adds DLP, CASB, DSPM, and email security. Security for AI adds AI-SPM, AI Guard, and AI Protect. The more of these modules a customer adopts, the more the platform behaves like an operating system for enterprise access and security.
Q3 customer examples support the product-market fit. A Fortune 500 financial technology company bought AI Protect in a 7-figure upsell. A federal agency expanded into data security. A healthcare technology company turned an initial user-security discussion into a platform-wide win including Zero Trust Cloud, Zero Trust Branch, and four data security modules. A large automotive manufacturer expanded Zero Trust Cloud, with management saying the solution was configured in under 10 minutes during proof of concept. Those are not theoretical use cases. They are evidence that the flagship platform can land, expand, and widen.
That line from CEO Jay Chaudhry is concise, but it captures the product thesis better than most vendor decks manage in 40 slides.
Zscaler’s main competitive advantage is architectural, not cosmetic. Management argues that firewall-based SASE products still connect users to the corporate network, which preserves lateral movement risk. Zscaler’s Zero Trust model instead hides applications behind the exchange and grants identity-based access only to specific applications. Whether one agrees with every marketing flourish or not, the distinction is real and central to why Zscaler has won enterprise mindshare in zero trust and SSE.
The second advantage is scale. Management said the platform spans more than 160 public exchanges and processes more than 500B transactions per day. The 10-K adds that Zscaler blocks over 225M threats daily and performs more than 250,000 unique security updates each day. In security, telemetry scale is not just a bragging right. It improves detection, policy tuning, and response speed. More traffic produces more signal, and more signal can improve the product. That is a useful flywheel.
The third advantage is platform breadth that still feels coherent. Many security vendors expand by stapling together products that share a logo more than a design philosophy. Zscaler’s expansion from users to workloads, branches, data, and AI still maps back to the same Zero Trust Exchange. That coherence matters because buyers increasingly want fewer consoles, fewer agents, and fewer integration headaches. Corporate buyers call that consolidation. Engineers call it fewer things breaking at 2 a.m.
AI is now the next moat test. Management said AI Protect bookings crossed $100M over the past 12 months, announced an intent to acquire Symmetry Systems on May 21, 2026 to add access graph technology for agentic security, and disclosed partnerships with Anthropic on Project Glasswing and OpenAI through the Daybreak program. Those moves show Zscaler is trying to secure not just users of AI, but the AI systems, agents, and data paths themselves. If that strategy works, it expands the company’s relevance at the exact moment enterprise architectures are getting more complex.
That quote is clearly promotional, but the hard numbers behind it are improving: AI Protect bookings above $100M, data security ARR above $500M, and metered ARR growing more than 100% YoY. The rhetoric has some receipts.
Zscaler is a software company, but it is not asset-light in the purest sense. The platform depends on global data center infrastructure and branch appliances, which means hardware availability and component pricing still matter. CFO Kevin Rubin said the company is seeing higher memory, storage, and processor prices, and that it purchases equipment for both its data centers and Zero Trust Branch appliances.
That pressure is already showing up in capex guidance. In Q3, capex was $42M, or 5% of revenue, but management said Q4 capex would rise enough to push fiscal 2026 capex into the high single digits as a percentage of revenue, above the prior expectation of mid-single digits. Management also said fiscal 2027 capex as a percentage of revenue could increase by up to 200 bps versus fiscal 2026 levels. For a company prized for free cash flow, that is not trivial.
There is a partial offset. Zscaler already implemented a price increase on its branch appliance earlier in the calendar year, which management expects to flow through over the next several months. The company is also pulling forward some equipment purchases to lock in current prices. That is prudent operationally, though it compresses near-term free cash flow margins. In other words, management is choosing to protect service capacity and pricing discipline rather than pretend silicon costs do not exist.
Operationally, the go-to-market engine is also part of execution risk. Management disclosed that two sales leaders departed at the end of Q3 and said it was taking a prudent approach to guidance during the transition. One replacement has already been appointed internally, and the second role was in the late stages of hiring at the time of the call. This does not break the thesis, but it does explain why management’s fiscal 2027 tone was more measured than the Q3 headline numbers alone would imply.
Zscaler sits in one of the better software markets: large, growing, and strategically necessary. Gartner estimates the SASE market will grow at a 26.0% CAGR and reach $28.5B by 2028. Zscaler’s own investor materials frame its serviceable market opportunity at more than $100B across users, workloads, IoT/OT devices, and MDR. Even if one discounts company TAM slides as naturally optimistic, the direction is clear: the addressable market is expanding beyond secure web gateways into a much broader control layer for cloud, identity, data, and AI.
The demand drivers are also durable. Enterprises are still moving applications to cloud environments, hybrid work remains normal, zero trust remains a board-level security theme, and AI adoption is creating new data governance and access control problems. Gartner’s 2025 cybersecurity trends specifically highlight GenAI-driven data security needs and changing SASE requirements due to AI, geopolitical risks, and evolving threats. That backdrop is favorable for a vendor whose platform sits directly in the path of traffic and policy enforcement.
Zscaler’s own penetration numbers suggest room to grow. Management said the company serves about 4,500 enterprises out of a potential 20,000 enterprises in its primary target market. That does not guarantee easy wins, but it does mean the runway is not exhausted. The installed base of more than 9,400 customers also gives Zscaler a large cross-sell pool, which is already visible in the rise of >$1M ARR customers to 748 and >$100K ARR customers to 4,003 in Q3 FY2026.
The market is attractive, but not frictionless. Security budgets are still scrutinized, platform vendors bundle aggressively, and new-logo growth has been softer than management wants. CFO Kevin Rubin said upsells remain strong, with net retention at 115% in Q1 and fairly stable over several quarters, but he also said the company has not been performing as well as it would like in new logos. That distinction matters. Existing customers are buying more, but fresh customer acquisition is not firing on all cylinders.
Like what you're reading?
Get full access to AI-powered research reports, market analysis, and portfolio tools.
Zscaler’s customer base skews heavily toward large enterprises and government organizations. The company says it serves more than 9,400 customers, including about 40% of the Forbes Global 2000 and more than 45% of the Fortune 500. Industries listed in the 10-K include financial services, healthcare, insurance, manufacturing, automotive, airlines and transportation, public sector and education, energy, technology, and telecommunications services.
The size distribution is improving in the right direction. In Q3 FY2026, Zscaler had 748 customers generating more than $1M of ARR, up 18% YoY, and 4,003 customers exceeding $100K of ARR, up 19% YoY. Those cohorts matter more than raw logo counts because they show the platform is landing in larger, stickier accounts where cross-sell economics are better and churn is usually lower.
Geographically, revenue in Q3 FY2026 came 56% from the Americas, 28% from EMEA, and 16% from APJ. Growth was strongest in the Americas at about 31% YoY, followed by APJ at about 23% and EMEA at about 16%. That mix gives Zscaler broad exposure without being overly dependent on one region, though the Americas remain the main growth engine.
The customer examples management highlighted also reveal a useful pattern: Zscaler often starts with one pain point and expands into a broader platform relationship. A healthcare technology company came in through a user-security request and expanded into Zero Trust Cloud, Zero Trust Branch, and four data security modules. A long-time automotive customer has grown ARR 10-fold over seven years. Z-Flex deals are also reinforcing stickiness, with more than $1B in Z-Flex TCV over the last 12 months at an average four-year term.
Zscaler competes against both direct SSE specialists and broader security platforms. The most relevant names in the provided context are Palo Alto Networks, Netskope, Microsoft, Cloudflare, Cisco, and Fortinet. The competitive pressure is real because many of those vendors can bundle networking, firewall, endpoint, and identity products into larger contracts. In enterprise software, the best product does not always win. Sometimes the vendor with the fattest bundle and the least procurement friction does.
Zscaler’s edge is strongest when buyers want a best-of-breed cloud-native zero-trust architecture rather than a retrofit of legacy network security. Management repeatedly contrasted its model with firewall-based SASE, arguing that traditional approaches still expose the network and allow lateral movement. That message has resonated enough to support strong growth at scale, with Q3 FY2026 revenue up 25%, ARR up 25%, and record $1M+ new ACV deals for a fiscal Q3.
The company also has a credible platform expansion story. Data security ARR above $500M, branch ARR approximately tripling YoY, and AI Protect bookings above $100M all show that Zscaler is not boxed into one category. That matters competitively because a broader product set can defend against suite vendors and increase share of wallet. A narrow specialist can be displaced. A platform embedded across access, data, cloud, branch, and AI is harder to rip out.
The weak spot is that Zscaler does not have the same breadth outside its core security domains as the largest incumbents. Palo Alto, Cisco, and Fortinet can lean on broader installed bases and procurement relationships. Cloudflare has a powerful edge network narrative. Netskope remains a direct specialist alternative. Microsoft can use identity and productivity gravity. Zscaler can still win, but it has to keep proving that architecture and execution justify a premium multiple.
The macro backdrop for Zscaler is mixed but manageable. On the positive side, cybersecurity remains a non-discretionary category for large enterprises and government agencies, especially as AI adoption expands the attack surface. Gartner’s 2025 research highlights AI, geopolitical risks, and evolving threats as forces reshaping SASE requirements. That supports sustained demand for policy-based access, data protection, and cloud-delivered inspection.
On the less friendly side, enterprise software buying cycles remain disciplined. Management’s comments on new-logo performance and prudent fiscal 2027 guidance suggest that even strong vendors are not immune to elongated sales cycles or tighter approvals. Zscaler’s strength in upsells and multiyear commitments through Z-Flex helps offset that, but it does not erase it.
Public sector and healthcare were notable sources of Q3 strength. Management said net new ARR benefited from strength in the public sector vertical, including state, local, and federal government and healthcare, and cited an approximate 8-digit upsell at a federal agency. That can be a tailwind because regulated sectors often prioritize security modernization, but it also means procurement timing can be lumpy.
Geopolitically, cyber risk itself is a demand driver. The more fragmented and hostile the threat environment becomes, the more enterprises tend to favor architectures that reduce attack surface and lateral movement. Zscaler’s model is built around exactly that pitch. The company is not immune to macro slowdowns, but it operates in a category where fear is often a budget accelerant.
$1.78B of net cash gives Zscaler a strong cushion, even as the company continues to invest heavily in growth and product expansion.
Unlock the full analysis
Subscribers get the complete breakdown — pick rationale, financial metrics, and recent earnings detail.
Get Full Access →Fiscal Q3 2026 revenue rose 25% to $850.5M and non-GAAP operating margin reached an all-time high of 23%, showing strong operating leverage.
Unlock the full analysis
Subscribers get the complete breakdown — pick rationale, financial metrics, and recent earnings detail.
Get Full Access →Management’s early fiscal 2027 outlook calls for 16% to 17% ARR and revenue growth, a clear step down from the 24% to 25% pace in fiscal 2026.
Unlock the full analysis
Subscribers get the complete breakdown — pick rationale, financial metrics, and recent earnings detail.
Get Full Access →The stock is priced for quality, but trailing EPS of -$0.44 and a slower growth outlook make the current setup more sensitive to execution than to multiple expansion.
Unlock the full analysis
Subscribers get the complete breakdown — pick rationale, financial metrics, and recent earnings detail.
Get Full Access →With a Buy rating and fair value at $215, Zscaler sits between strong upside and the need for patience as growth normalizes.
Unlock the full analysis
Subscribers get the complete breakdown — pick rationale, financial metrics, and recent earnings detail.
Get Full Access →Zscaler is still one of the more compelling software businesses in cybersecurity. The company has built a real platform, not a one-feature wonder, and the numbers back that up: $850.5M of Q3 FY2026 revenue, $3.525B of ARR, more than 700 Zero Trust Everywhere enterprises, data security ARR above $500M, and AI Protect bookings above $100M over the last 12 months. The architecture is differentiated, the customer base is large and sticky, and free cash flow is real.
The debate now is less about whether Zscaler is good and more about how much investors should pay for it as growth normalizes. Management’s early fiscal 2027 outlook, higher capex expectations, and softer new-logo commentary mean this is no longer the kind of stock that deserves automatic multiple expansion. But the business quality is high enough that weakness should interest patient investors rather than scare them away.
That is why the conclusion lands at Buy with a fair value estimate of $215. Zscaler has enough growth, enough cash generation, and enough strategic relevance to keep compounding. It just needs to be bought with discipline, not admiration alone.
Zscaler’s selloff looks like a market tantrum over guidance quality and cash-flow expectations, not evidence that the business suddenly cracked. A company still growing revenue and ARR at 25% with a more tangible AI-security platform story does not deserve to be treated like a broken software name.
Zscaler, Inc. (ZS) tumbles after its latest earnings report as investors react to a sharply lower free cash flow margin outlook. The company still posted strong revenue, ARR, and EPS growth, but the guidance reset overshadowed the beat and triggered a steep after-hours selloff.
Zscaler, Inc. (ZS) slumps after earnings as investors focus on softer forward guidance rather than the quarter’s strong revenue and profit growth. The cloud security leader still posted solid fundamentals, but the market is repricing the stock on slower expected growth and rising competition.