Zscaler delivered 25% FY26 revenue growth, 25% ARR growth, and 24.3% non-GAAP operating margin, but the stock still trades at a premium multiple. The Buy case hinges on expanding Zero Trust, data security, and AI security adoption against valuation risk.
Zscaler (ZS) is a high-quality, cloud-native cybersecurity business with strong growth, expanding non-GAAP profitability, and a credible position in Zero Trust and AI security. FY26 revenue reached $3.4B, up 25%, while ARR grew 25% to $3.8B and non-GAAP operating margin reached 24.3% in the fourth quarter. The investment case rests on Zscaler converting its large installed base into a broader platform spanning users, branches, workloads, data, and AI agents.
The main restraint is valuation. ZS trades at 43.9x forward earnings, 9.9x enterprise value to revenue, and a PEG ratio of 2.2. GAAP profitability remains negative, FY27 revenue guidance slows to 16.6% to 17.5%, and annual free cash flow fell to $852M from $727M despite higher revenue. This is a strong business, but the stock requires continued execution rather than merely competent execution.
For a moderate-risk investor with a medium-term horizon, ZS earns a Buy recommendation. The company has enough recurring revenue, cash generation, customer expansion, and AI-related product momentum to justify a premium multiple, but the current valuation leaves less room for sales execution problems, higher infrastructure costs, or slower adoption of newer products.
Zscaler is a San Jose-based cloud security company founded in 2007 and listed on Nasdaq in 2018. It had approximately 8,700 employees and about 11,000 customers in FY26. The company sells a cloud-native Zero Trust Exchange that connects users, devices, workloads, branches, and AI agents to authorized applications and data based on identity and policy rather than network location.
The model is highly recurring. Subscription and support revenue represented about 98% of revenue in FY24, FY25, and FY26. Revenue increased from $1.1B in FY22 to $1.6B in FY23, $2.2B in FY24, $2.7B in FY25, and $3.4B in FY26. That record gives Zscaler the financial profile of a platform company, even though GAAP earnings remain negative.
Zscaler serves automotive, financial services, healthcare, manufacturing, telecommunications, technology, government, education, and other industries. Its customer base includes more than 40% of the Forbes Global 2000 and more than 50% of the Fortune 500, giving the company credibility in large, security-sensitive accounts.
Zscaler reports one reportable segment, with total FY26 revenue of $3.4B. Internally, the platform is organized around four solution areas: Zero Trust SASE, Security for AI, Data Security, and Agentic Security Operations. This structure matters because growth increasingly comes from expansion beyond traditional user access.
The commercial logic is straightforward: a customer that begins with secure internet access can add private application access, data controls, branch protection, cloud workload security, and AI governance without adopting a separate policy system for each product.
Get AI research on any stock
Instant reports, daily intelligence, and an AI analyst in your pocket.
The Zero Trust Exchange is Zscaler's flagship product and its central competitive asset. It verifies identity and device posture, applies policy, inspects traffic inline, and connects an authorized user or agent directly to an authorized application. The architecture avoids placing the user on the corporate network and reduces the opportunity for lateral movement after a breach.
Zscaler Internet Access protects connections to external services, SaaS applications, and AI applications. Zscaler Private Access provides identity-based access to private applications through temporary micro tunnels. Zero Trust Branch extends the same policy model to factories, branches, campuses, and operational technology environments, while Zero Trust Cloud applies it to hybrid and public cloud workloads.
That product design is more than branding. Applications are not exposed through public IP addresses, and customers can replace parts of a legacy architecture that depend on firewalls, VPNs, MPLS, and broad network access. Zscaler's platform therefore sells both security and operational simplification.
Zscaler's strongest advantage is the combination of architecture, scale, and telemetry. Its platform operates across more than 200 public data centers and thousands of private edge sites in more than 185 countries. It processes over 750B transactions per day, blocks more than 9B policy violations and threats, and performs over 250,000 security updates per day.
That transaction volume creates a data advantage in threat detection. A threat identified in one transaction can inform policies across the platform. Zscaler also reports more than 950 issued and pending patents, adding protection around its technology and platform design.
The most important innovation vector is Security for AI. Zscaler's AI Gateway inspects prompts, responses, file uploads, tool calls, API requests, agent actions, and agent-to-agent communication. The company also introduced Zero Trust Exchange for agents and Endpoint AI Security, both scheduled to scale in the second half of FY27, and launched Agentic Security Operations to automate security response.
The risk is that major platform vendors can add similar features to broader networking, endpoint, identity, or cloud offerings. Zscaler's advantage is strongest when customers value a unified inline policy engine over a collection of bundled tools.
Zscaler's operations combine software development with a global cloud infrastructure footprint. The company relies on data center capacity, memory, storage, processors, and equipment for its security cloud and Zero Trust Branch appliances. Management reported higher prices and tighter availability for these components in FY26.
FY26 capital expenditures were $277M, or 8% of revenue. Management expects FY27 capital expenditures to remain elevated, with component pricing, especially memory, as a key pressure. The company also accelerated selected equipment purchases in Q4 when capacity was available.
Zscaler is also adjusting its workforce. The FY27 restructuring affects approximately 3% of employees and carries expected charges of $30M to $33M. Management described the action as a reallocation of resources toward AI and growth initiatives. The financial benefit depends on whether the restructuring improves capacity in higher-return product and sales areas without weakening execution.
The operating model remains attractive because subscription revenue carries a high gross margin and scales across the installed base. FY26 non-GAAP gross margin was 80.3%, although infrastructure spending and branch hardware can create periodic pressure.
Zscaler operates at the intersection of cloud infrastructure, cybersecurity, SASE, data protection, and AI governance. Gartner measured the worldwide enterprise software market at $899.9B in 2024, up 11.9%, while the software-defined anything market is projected to grow from $44.5B in 2024 to $130.9B by 2029.
AI governance is a smaller but faster-growing adjacent market. MarketsandMarkets projects that market to increase from $890M in 2024 to $5.8B by 2029. Zscaler's own materials identify a serviceable opportunity above $120B across users, workloads, IoT and OT devices, managed detection and response, and AI security.
Customer demand is moving toward cloud-delivered security, hybrid work support, multicloud controls, and protection for nonhuman identities. Zscaler's FY27 guidance calls for revenue of $3.9B to $3.9B, ARR of $4.4B, and free cash flow margin of 23.0% to 23.5%. The guidance confirms continued growth while also showing a measured deceleration from FY26's 25% revenue growth.
Like what you're reading?
Get full access to AI-powered research reports, market analysis, and portfolio tools.
Zscaler's customer base is weighted toward large enterprises with complex networks, valuable data, and multiple cloud environments. At the end of FY26, 785 customers generated more than $1M in ARR, up 18% year over year, while 4,182 generated more than $100,000 in ARR, up 20%.
The platform is gaining depth within existing accounts. Net revenue retention was 115% in each quarter of FY26, according to management. Non-seat-based metered solutions generated approximately 30% of new and upsell ACV, and ARR tied to those offerings grew more than 100% year over year.
Geographic growth was broad. The Americas represented 57% of FY26 revenue and grew approximately 31%, EMEA represented 28% and grew approximately 16%, and APJ represented 15% and grew approximately 23%. Customer examples included transportation, semiconductor, financial services, healthcare equipment, aerospace, and life sciences companies.
Z-Flex strengthens the expansion model by allowing customers to shift commitments across modules without restarting procurement. Z-Flex generated more than $1.7B in total contract value in FY26, and customers using the program saw average ARR uplift of nearly 30%.
Zscaler competes with Palo Alto Networks, Cisco, Fortinet, Broadcom, Check Point, Cloudflare, Netskope, Cato Networks, Versa, and other SASE and security vendors. The competitive field includes legacy firewall providers, broad cybersecurity platforms, cloud networking companies, and specialized point products for data security, browser security, identity, and managed detection.
Zscaler's strongest distinction is a cloud-native architecture designed around Zero Trust from inception. It connects users and applications without placing users on the network, while competitors with appliance roots must migrate installed architectures toward cloud delivery. The company also combines inline inspection, application segmentation, data security, and AI policy in one platform.
The weakness is distribution and bundling. Palo Alto Networks, Cisco, Fortinet, Broadcom, and Check Point have broader product portfolios, established channel relationships, and substantial installed bases. Netskope and Cloudflare create more direct competition in cloud-delivered security. Zscaler's platform breadth reduces point-product risk, but it also places the company in more product categories with more competitors.
The company's Q4 customer wins support its positioning. A Fortune 500 life sciences company selected Zscaler while replacing a legacy firewall-based SASE platform, and a healthcare equipment manufacturer selected Zero Trust Branch while replacing a long-term legacy vendor.
The central macro driver is the migration of enterprise activity toward cloud services and AI. Gartner expects 90% of enterprise software engineers to use AI code assistants by 2028 and at least 55% of software engineering teams to build LLM-based features by 2027. Zscaler's ThreatLabz research also reported a 91% year-over-year increase in enterprise AI usage.
This creates a two-sided effect. More AI usage expands demand for prompt inspection, data loss prevention, agent governance, and AI application security. It also raises the technical burden on Zscaler's infrastructure. Management specifically cited higher memory, storage, and processor prices, while FY27 capital expenditures are expected to remain elevated.
Regulatory and geographic complexity also favors policy-based security. Zscaler serves customers in more than 185 countries and is targeting sovereign cloud offerings and expansion in Asia Pacific, Latin America, and the Middle East. Those initiatives broaden the opportunity but increase requirements around data location, government procurement, privacy, and local operating capability.
Enterprise buying conditions remain an execution variable. Prior company filings described greater customer scrutiny and elongated approval processes for larger deals. Z-Flex and the platform's recurring model reduce procurement friction, but large account expansion still depends on security budgets and executive approval.
Cash and investments of $3.0B against $2.0B of debt leave Zscaler with a solid net cash position, even after $852M of annual free cash flow.
Unlock the full analysis
Premium members get the complete breakdown — pick rationale, financial metrics, and recent earnings detail.
Get Full Access →Revenue climbed from $1.1B in FY22 to $3.4B in FY26 while subscription and support stayed near 98% of sales, underscoring a highly recurring model.
Unlock the full analysis
Premium members get the complete breakdown — pick rationale, financial metrics, and recent earnings detail.
Get Full Access →Management's FY27 revenue outlook of 16.6% to 17.5% growth signals a step down from FY26's 25% pace, but AI-related bookings and pipeline are still accelerating.
Unlock the full analysis
Premium members get the complete breakdown — pick rationale, financial metrics, and recent earnings detail.
Get Full Access →At 43.9x forward earnings, 9.9x EV/revenue, and a 2.2 PEG ratio, Zscaler already prices in a lot of future success.
Unlock the full analysis
Premium members get the complete breakdown — pick rationale, financial metrics, and recent earnings detail.
Get Full Access →The report's Buy call sits between a $180 buy level and a $230 fair value estimate, leaving upside only if execution stays strong.
Unlock the full analysis
Premium members get the complete breakdown — pick rationale, financial metrics, and recent earnings detail.
Get Full Access →Zscaler has built one of the clearest pure-play positions in cloud-delivered Zero Trust security. FY26 provided evidence across revenue, ARR, customer expansion, large deals, non-GAAP margins, and free cash flow. The move from user security toward branches, workloads, data, and AI agents expands the platform's revenue opportunity and increases the value of its inline telemetry.
The investment is not risk-free. GAAP losses remain, cash declined sharply from FY25, capital spending is rising, insiders recorded 20 sales totaling 66,208 shares in the reported insider activity period, and large competitors can bundle security products. Those factors explain the valuation grade of C+ despite strong operating performance.
The balanced conclusion is a Buy with a fair value estimate of $230.00. ZS offers a credible medium-term path through recurring revenue, 115% net revenue retention, AI security demand, and operating leverage. Investors receive the best risk-adjusted setup at or below the $180.00 Buy target, while prices above $280.00 would require a more aggressive view of growth and margin expansion.
Get AI-powered research reports, daily market intelligence, and a personal analyst in your pocket.
Get Full Access →Not ready to subscribe? ·
Cancel anytime
Zscaler, Inc. (ZS) drops after a chief revenue officer change sparked investor concern about sales execution and future growth. The stock fell sharply despite recent earnings beats, as traders focused on leadership continuity, net-new ARR guidance, and what the transition could mean for bookings.
Zscaler posted 25% revenue growth, 25% ARR growth and a record 23% non-GAAP operating margin, but the stock still trades at a premium valuation. The report lands on a Hold with fair value set at $180.
Zscaler’s selloff looks like a market tantrum over guidance quality and cash-flow expectations, not evidence that the business suddenly cracked. A company still growing revenue and ARR at 25% with a more tangible AI-security platform story does not deserve to be treated like a broken software name.