Zscaler

Zscaler enters 2026 in a position most cybersecurity companies would envy and also fear. CEO and founder Jay Chaudhry built the original cloud Zero Trust Exchange before Palo Alto Networks, Cloudflare, Cisco and Netskope decided every enterprise SASE seat was worth fighting for. The lead is genuine — Zscaler processes over 500 billion daily transactions, blocks roughly 9 billion threats per day, and remains the only pure-cloud SASE vendor with a single-tenant proxy architecture that none of the firewall vendors can fully replicate.

The flip side is that growth has visibly decelerated. Annual recurring revenue closed FY2025 around $2.8 billion, up from $2.2 billion a year earlier — roughly 27% growth, versus 35% the prior year and over 50% in FY2022. Management has guided FY2026 to roughly 23-25% top-line growth and 27% free-cash-flow margins. That is excellent for a $3 billion ARR company, but it is the lowest growth print in Zscaler's public-company history. The narrative split is now binary: either AI Workload Protection and Zero Trust Branch reaccelerate the curve, or Zscaler becomes a high-quality 20% compounder priced more like CrowdStrike than its old self.

The Q1 FY2026 hire of Mike Rich as Chief Revenue Officer (replacing Dali Rajic, who left for Snowflake) is the operational pivot the bull case rests on. Rich came from Salesforce and previously ServiceNow — large-deal enterprise motion. If federal and global 2000 large-deal velocity reaccelerates by Q3 FY2026, the company can credibly hold 25% growth through 2027. If not, the multiple compresses further.

Institutional positioning on Zscaler is now split between long-tenure secular bulls and growth-deceleration skeptics. Coatue Management and Lone Pine Capital have held core positions for multiple years; ARK Investment Management added meaningfully through the 2024 drawdown. On the other side, Tiger Global has steadily trimmed since 2023 and TCV exited in 2024. The most informative signal is the absence of activist interest — Zero Trust is a multi-year secular tailwind, founder-led, with industry-leading FCF margins, leaving little classic activist lever. Hedge fund short interest sits around 4-5% of float, elevated for a profitable software name. Several large mutual funds have rotated from CrowdStrike (post-July 2024 outage) into Zscaler as the lower-volatility cyber large-cap, supporting the 2025 rebound. Long/short generalists running a Palo Alto Networks / Zscaler pair trade have been a persistent overhang in the options market.

Zscaler trades at approximately 12x forward EV/ARR, 13x forward EV/sales and roughly 45x forward FCF — premium to legacy security vendors but a discount to its own 2021 peak of 35x ARR. The premium is justified by the cleanest pure-SASE positioning and best-in-class FCF margin, but the multiple is no longer a screaming bargain. Bull case (FY2027 ARR $4.2B, FCF margin to 30%, AI Workload Protection adds 5pts growth): fair value $280-320. Base case (FY2027 ARR $3.6B, 25% growth holds, FCF 28%): $200-240 — close to current price. Bear case (growth decelerates to 18% by FY2027 on Palo Alto pressure, FCF stalls at 26%): $140-160. Risk-reward is balanced rather than asymmetric.

1. March 4, 2026: Q2 FY2026 earnings — first full quarter under new CRO Mike Rich. Watch large-deal count (deals >$1M ARR), net new logo count, and AI Workload Protection seat metrics.
2. June 2026 (Zenith Live conference): Zscaler's annual customer conference. Historical pattern is to announce new product lines and strategic partnerships. Expect AI Workload Protection roadmap, ZT Branch ecosystem expansion, and likely a federal/government wins panel.
3. September 2026 (FY2026 full-year results): Full FY2026 results and FY2027 initial guidance. The key signal is whether management guides to 23%+ growth for FY2027 — anything below 22% would compress the multiple to bear-case territory.

Zscaler is a high-quality compounder going through the awkward growth transition every great software company faces between $3 billion and $10 billion ARR. The product architecture is genuinely differentiated, the cash flow is real, and the secular Zero Trust mandate is not a marketing meme. What I am genuinely uncertain about is whether AI Workload Protection plus Zero Trust Branch can deliver the 5-7 percentage points of growth reacceleration consensus implicitly requires.

For me, the cleanest expression is to own Zscaler as part of a Zero Trust basket alongside Palo Alto Networks rather than picking a winner. The two companies will likely both compound for the next five years; the relative outperformance hinges on consolidation versus best-of-breed cycles, which is hard to time. At current valuation the base case is fully priced — I would add aggressively only on a 15-20% post-earnings dip.