Zscaler is a cloud software company that secures how employees connect to apps and data without using traditional, vulnerable corporate networks. It generated $2.67 billion in revenue in fiscal 2025, a 23% increase over the prior year, while producing $730 million in free cash flow. The company is now a central piece of the "Zero Trust" movement, where security is tied to the user identity rather than a physical office location.
The investment thesis on Zscaler is that its proprietary "One True Cloud" architecture creates massive switching costs because it processes all of a company's traffic through its own global data centers, making it nearly impossible for customers to leave once their security is fully integrated. While rivals like Palo Alto Networks are bundling security tools to compete, Zscaler's asset is its massive lead in cloud-native traffic processing. If it successfully adds AI-driven threat detection to this data stream, it can keep growing margins while competitors struggle to rebuild their old hardware-based systems for a cloud world.
We think Zscaler is a rare business that has already achieved massive scale while still growing fast enough to justify a premium valuation, and its high cash generation provides a floor for the stock. The risk is that if growth falls below 20% while integration costs for new acquisitions rise, the stock's high multiple would likely compress.
Zscaler’s stock price has crashed recently after a period of poor performance. The shares have dropped significantly over the past year as the company faces serious legal investigations regarding its business practices. While the company still helps big businesses keep their computer networks secure, investor confidence has faded, causing the stock to lose much of its value.
What does it do?
Zscaler is a growth-stage business that earns money by selling annual subscriptions to its global cloud security platform. Customers pay for access to a massive network of data centers that sit between their employees and the internet. Instead of using old-fashioned hardware boxes in an office, every time an employee clicks a link or opens an app, Zscaler's cloud inspects the traffic for threats and verifies the user's identity. This "Zero Trust" approach means no user is ever trusted by default, which is far more secure for companies with remote workers or branch offices.
Where does revenue come from?
Almost all revenue comes from multi-year subscriptions to its two primary cloud products. Zscaler Internet Access (ZIA) secures outgoing traffic to the public internet, while Zscaler Private Access (ZPA) gives employees secure access to internal corporate apps without a slow and clunky VPN. Revenue is mostly generated in the United States, but the company has a large and growing international presence across Europe and Asia.
Revenue by Geography
Who are its customers?
Zscaler serves over 7,700 customers, including approximately 40% of the Fortune 500 and 30% of the Global 2,000. The company focuses on the largest organizations in the world, with its average annual recurring revenue per customer climbing as they add more security modules. In the most recent quarter, it reported annual recurring revenue of $3.525 billion, a 25% increase compared to the prior year. The customer base is highly loyal, evidenced by a high net expansion rate that indicates existing clients spend more each year.
What gives it staying power?
Zscaler has high switching costs because once a global company routes all its employee traffic through Zscaler's data centers, ripping it out would cause massive network disruption. The company has spent a decade building over 150 data centers globally, a "moat" of physical infrastructure that is very difficult for competitors to replicate.
Where is it headed?
Zscaler is making a massive strategic bet on AI-powered security by acquiring companies like Red Canary and SPLX to automate how it detects and stops hacks. Management believes that by using the massive amount of data already flowing through its cloud, it can build AI models that spot attacks faster than any human team. If this works, Zscaler becomes an essential "AI brain" for corporate security, not just a traffic filter.
The most important trend is that Zscaler is sustaining 25% revenue growth even as it reaches a massive $3.5 billion annual revenue run rate. Revenue reached $850.5 million in Q3 FY2026, proving that large enterprises are still shifting their security budgets to the cloud. This growth is predictable because it is driven by long-term subscriptions rather than one-time sales.
Cash quality is exceptional because free cash flow is consistently positive and growing, reaching $136 million in the most recent quarter. Free cash flow grew 14% year-over-year in Q3 FY2026 despite heavy investments in data centers and acquisitions. This gap between accounting losses and real cash shows that the business is much healthier than its net income line suggests.
The balance sheet is very strong with $3.32 billion in cash and short-term investments as of late 2025. Even after spending $692 million on acquisitions like Red Canary, the company has more than enough cash to fund its growth without needing to borrow money. This net cash position gives management the flexibility to keep buying smaller technology companies to stay ahead of rivals.
Zscaler is a financially elite software business that has successfully paired 25% growth with high cash generation and a massive $3.3 billion cash cushion. Zscaler is a financially elite software business that has successfully paired 25% growth with high cash generation and a massive $3.3 billion cash cushion.
Revenue growth and ARR both reached 25% YoY in the most recent quarter, showing no signs of the "growth cliff" many investors feared at this scale. The company is successfully cross-selling newer products like ZDX and ZPA, which allows it to grow revenue from existing customers without spending as much on new marketing.
The integration of Red Canary and SPLX carries the risk of cultural clashes or product delays that could slow down the AI roadmap. While management has a history of small acquisitions, these larger deals are more complex and could distract the team if they do not lead to immediate new revenue.
The cloud security and Zero Trust market is roughly $30 billion today and is growing at nearly 20% annually as companies move away from hardware firewalls. The industry is on track to exceed $70 billion by 2030 as every large company globally must secure remote employees and cloud apps. Pricing power is structural because security is a "must-have" budget item where customers prioritize reliability over the lowest price. Zscaler is the clear leader in the cloud-native segment, giving it a massive growth runway as the remaining 80% of legacy traffic moves to the cloud.
This market is highly competitive but structured around a few large platforms because enterprise customers prefer to buy from one or two vendors they trust. While barriers to entry for basic security are low, the cost and complexity of building a global data center network to process massive traffic creates a massive moat for incumbents. Pricing remains relatively rational because the cost of a security breach is so much higher than the subscription fee.
Palo Alto Networks is the most dangerous threat because it can bundle cloud security with its existing hardware contracts. CrowdStrike is another major rival that uses its "agent" on every laptop to control security, potentially bypassing the need for some of Zscaler's network tools. Microsoft is also aggressive, offering basic security for "free" to Office 365 customers to win over smaller businesses.
Zscaler is holding its ground as the premium choice for the largest, most complex global companies.
The primary source of protection is switching costs created by Zscaler's proprietary "One True Cloud" architecture. Because Zscaler routes all of a company's global traffic through its data centers to inspect it, a customer would have to re-engineer their entire global network to leave. This creates a "sticky" relationship where customers rarely churn once they are fully onboarded.
The combination of an 80% gross margin and 25% ARR growth proves that the moat is very real and durable. These numbers show that Zscaler can maintain high prices even when competing against giants like Microsoft and Palo Alto Networks. This is not a cycle-dependent business; it is a structural winner in how the internet is being rebuilt.
The moat is strengthening as Zscaler adds more data and AI capabilities to its platform, making it even harder for rivals to catch up.
Consistently met or beat guidance for 10+ consecutive quarters while scaling ARR to $3.5B.
Spent $692 million on strategic AI acquisitions while maintaining a $3.3B cash balance.
Founder CEO Jay Chaudhry owns a significant double-digit percentage of the company's stock.
Capital Allocation Track Record
Jay Chaudhry is a visionary founder who has successfully navigated Zscaler from a small startup to a multi-billion dollar global leader by correctly predicting the shift to cloud security. His leadership caliber is evident in the company's ability to maintain 25% growth at a multi-billion dollar scale while transitioning to high cash flow generation. The management team has shown disciplined strategic judgment by choosing to build their own global network rather than just renting space from Amazon or Microsoft, which now gives them a cost and performance advantage.
The primary governance risk is the heavy dependence on Jay Chaudhry, whose vision and technical background are the driving forces behind the company's strategy. While there is a strong bench of experienced executives in roles like CFO and sales, the "founder's DNA" is central to the thesis, and his departure would be a major event. However, his significant personal ownership stake provides high alignment with shareholders, as he has more to lose from a strategic error than almost anyone else.
We expect revenue to grow from $3.3B in FY2026 to $6.8B in FY2031 (~15% CAGR), with EPS growing from $4.12 to $8.04 (~14% CAGR). Growth is sustained by large enterprises moving their entire security stack to the cloud to protect remote workers and branch offices. As the company scales, the cost of maintaining its global security cloud is shared across more customers, allowing more revenue to become profit. EPS grows steadily as the company transitions from heavy initial sales spending to collecting recurring subscription fees from established customers. Operating margin expected to reach ~25% by FY2031.
AI-powered threat detection drives higher pricing and new revenue streams. By integrating Red Canary's technology, Zscaler can automate security responses and charge higher fees for "intelligent" protection.
Expansion into IoT and OT security for industrial companies. Securing factory floors and medical devices opens a massive new market beyond just protecting laptops and smartphones.
Large enterprises consolidate their entire security stack onto Zscaler. As companies look to save money by cutting vendors, Zscaler can capture more of the total security budget.
Microsoft or Palo Alto bundle similar tools for free or low cost. If competitors successfully commoditize cloud security, Zscaler would be forced to lower prices to keep its customers.
Integration failure or cultural clashes from the Red Canary acquisition. If the $692 million acquisition fails to produce new products, it would be a major waste of capital and executive time.
A major security breach on Zscaler's own cloud infrastructure. As the world's most critical security filter, a successful attack on Zscaler itself would destroy its brand and customer trust.
Below is our estimate of current and future fair value, with detailed reasoning and assumptions. Fair value is a judgment, not a fact, and other analysts will likely land on different numbers. Use it as one data point in your research, and apply your own discretion in any investing decision.
We use a Forward P/E approach (price-to-earnings applied to the next fiscal year's estimates). This framework fits Zscaler because the company has reached a critical scale where non-GAAP earnings and free cash flow have become the most reliable signals of value, moving past the revenue-only multiples used for earlier-stage cybersecurity startups.
Next year's EPS of $4.12 multiplied by a 41x multiple gives a per-share fair value of $169. Our 41x multiple sits between high-growth leader CrowdStrike (72x) and mature incumbent Fortinet (28x); Zscaler deserves this upper-middle positioning because its 24% growth rate and wide-moat cloud architecture outperform legacy hardware providers. We use the FY2026 EPS of $4.12 provided by the deterministic engine to ensure consistency with the report’s fundamental projections.
Cross-checked with an EV/Revenue approach (FY2026 revenue of $3.31B × 8.3x peer-weighted multiple), we get $170 — within 1% of our $169 P/E-based answer. An 8.3x revenue multiple is conservative relative to Zscaler's 5-year average but reflects current market caution regarding "SaaS commoditization" from Microsoft. The near-perfect alignment between the earnings-based and revenue-based methods gives us higher confidence in the $169 valuation target.
We're assuming Zscaler maintains a non-GAAP gross margin of at least 78% through FY2028. While competitors are using aggressive pricing to win market share, Zscaler’s cloud-native architecture allows it to process traffic more efficiently than hardware-reliant peers, supporting a premium margin profile even in a competitive environment.
We're assuming the company achieves its raised FY2026 revenue guidance of approximately $3.31 billion. This represents 24% annual growth, which is supported by the "Z-Flex" booking momentum and the increasing urgency for enterprises to secure AI-driven traffic through Zero Trust architectures.
We're assuming a long-term non-GAAP tax rate of 21% as guided by management. This is a significant factor in our earnings-per-share calculation and reflects the global tax environment adjustments following recent legislation; a higher rate would directly dilute the per-share value.
The biggest risk is aggressive price competition from platform giants like Microsoft and Palo Alto Networks. A sustained "price war" in the SASE (Secure Access Service Edge) market would compress Zscaler's valuation multiple from 41x to 28x, knocking roughly $53 off the per-share fair value. Watch the "non-GAAP gross margin" metric for any dip below 78.5% as the early signal of pricing fatigue.
Bear case ($115): Microsoft Entra pricing pressure forces Zscaler's gross margins below 75% for two consecutive quarters; or Total Contract Value (TCV) growth slows below 18%, signaling that platform consolidation is favoring legacy vendors.
Bull case ($215): The Symmetry Systems acquisition drives a 20% re-acceleration in cross-sell activity among enterprise accounts over $1M; or Free cash flow margins expand toward 30% as AI-driven automation reduces the cost of scaling 150+ data centers.
Clearthesis wrote this report from 39 sources, including SEC filings, industry research, and recent news.
How did you like this thesis?
Your feedback helps us make reports better for you
© 2026 Clearthesis.ai · Report generated on June 23, 2026
This is an AI-generated analysis for informational purposes only and does not constitute financial advice. Data and analysis may not reflect recent developments if viewed significantly after the generation date. Always conduct your own due diligence before making any investment decisions.
The market is leaning bullish because Zscaler has established a dominant, sticky position as the essential security gatekeeper for corporate cloud traffic. Its architecture processes massive data volumes through global centers, which creates deep switching costs that make it incredibly difficult for large companies to migrate to a different security provider.
Skeptics think that recent legal investigations into the company reflect deeper cracks in the business model that go beyond simple technical growth. These ongoing fraud investigations create significant uncertainty regarding the integrity of the company's internal reporting and long-term financial stability at a time when the stock price has already struggled.