Finvest
ZS Cybersecurity · Cloud security · Zero Trust · Subscription software · Thesis updated July 12, 2026

AI helps, but sales risk now matters

01 Running thesis

Great market, messier setup

Zscaler has a real tailwind. More work apps live in the cloud, workers connect from many places, and AI can create new kinds of attacks. That makes the old castle-and-moat security model weaker. Zscaler sells a cloud platform that checks access every time, which fits this shift.

The better part of the story is that growth is spreading beyond the first products. Data Security ARR crossed $500 million and grew over 30% year over year. Zero Trust Branch ARR approximately tripled year over year. AI Protect bookings crossed $100 million over the past 12 months. These are signs that customers may buy more of the platform over time.

The harder part is the near-term guide. Management said two sales leaders left after Q3 fiscal 2026 and took a prudent view during the transition. It also called out weaker new logo acquisition, which means adding brand-new customers has not been strong enough. Early fiscal 2027 growth guidance of 16-17% would be a clear slowdown from the mid-20s growth seen in recent quarters.

The stock needs proof that AI demand becomes real bookings, not only a good story. It also needs proof that the sales change does not hurt customer wins. Until then, this is a strong company with a more balanced risk-reward.

May 2026Q3 fiscal 2026 added stronger proof for expansion products, including Data Security, Zero Trust Branch, and AI Protect. The view still moved down because two sales leaders left, new logo growth is weak, and management gave a cautious early fiscal 2027 growth view.
02 Business model

Subscriptions and expansion

Zscaler makes most of its money by selling subscriptions to the Zscaler Zero Trust Exchange. Pricing is mainly per user. Contracts usually last one to three years, and revenue is counted over the life of the contract instead of all at once.

The model depends on land and expand. Zscaler first sells one product or group of users, then tries to add more users, higher service levels, or more products. In Q3 fiscal 2026, revenue rose 25% year over year, and the company said most of the increase came from selling more subscriptions to existing customers.

This can be a powerful model because security software can become hard to replace once it is built into a company's network. But it also creates pressure. If customers stop expanding, delay deals, or choose a larger security bundle from a rival, growth can slow quickly.

Another pressure point is cash flow. Free cash flow margin was 16% in Q3 fiscal 2026, and management said rising component costs could lift capital spending as a share of revenue by up to 200 basis points in fiscal 2027. That could lower cash generation even if revenue keeps growing.

03 Product portfolio

One platform, several bets

Cash cow

Zscaler Internet Access

ZIA helps companies secure employee traffic to the internet and cloud apps. It is one of the core user products inside the Zero Trust Users group.

Cash cow

Zscaler Private Access

ZPA controls access to private apps without putting users directly on the company network. It is often cross-sold to customers that already use ZIA.

Growth engine

Data Security Everywhere

This product family helps find and protect sensitive data. Management said Data Security ARR crossed $500 million and grew over 30% year over year.

Growth engine

Zero Trust Branch

Zero Trust Branch brings Zscaler's security model to offices and branches. Management said ARR approximately tripled year over year.

Option

AI Protect

AI Protect helps customers manage security risks tied to AI use. Bookings crossed $100 million over the past 12 months, but it is still early.

Option

Agentic Operations

This newer area uses automation and AI-style workflows to help security teams operate faster. It expands the platform story, but investors still need clearer revenue proof.

04 Business segments

One segment, global revenue

United States51%modest
International49%flat

Zscaler reports as one operating segment. For fiscal 2025, customers outside the United States made up about 49% of revenue, so the mix below uses geography rather than product lines.

05 Risk factors

What could break the thesis

Sales transition stalls deals

High impact · Medium odds

Two sales leaders left after Q3 fiscal 2026. Management already replaced one role and was late in hiring for the other, but it still guided carefully because sales changes can hurt close rates and productivity. If the disruption lasts, fiscal 2027 growth could reset lower.

We watchWatch billings growth, large deal activity, and any update on sales leadership hiring.

New customer growth stays weak

High impact · Medium odds

Zscaler's model needs both new customers and more spend from current customers. Management admitted that new logo acquisition has underperformed. If new customer wins do not improve, the company becomes more dependent on upsells to keep growing.

We watchWatch customer count, Global 2000 penetration, and management comments on new logo wins.

Expansion becomes harder to measure

Medium impact · High odds

Zscaler used to report dollar-based net retention, which shows whether existing customers spend more over time. The metric was 115% for the trailing 12 months ended October 31, 2025, but the company stopped reporting it after that quarter. Less disclosure makes it harder to judge the health of the land-and-expand motion.

We watchWatch whether management replaces net retention with ARR, bookings, cohort, or product adoption metrics.

AI hype outruns bookings

Medium impact · Medium odds

AI is now a major part of the bull case. AI Protect bookings crossed $100 million over the past 12 months, which is a good start, but investors still need to see this become a larger and repeatable growth driver. If AI demand slows or customers test but do not renew, the premium story weakens.

We watchWatch AI Protect bookings, attach rates, and whether AI products help re-accelerate ARR or billings.

Cloud platform costs pressure cash flow

Medium impact · Medium odds

Zscaler runs a large cloud security platform, so infrastructure spending matters. Management said component costs could lift capital spending as a share of revenue by up to 200 basis points in fiscal 2027. That would pressure free cash flow margins.

We watchWatch capital expenditures as a percentage of revenue and quarterly free cash flow margin.
06 Quick answers

In one breath

What does Zscaler actually do?

Zscaler sells cloud security software. Its platform checks users, devices, apps, and data before access is allowed, which is known as Zero Trust security.

How does Zscaler make money?

Most revenue comes from per-user subscriptions to its cloud platform. Contracts usually last one to three years, and Zscaler tries to grow each account by adding users and products.

Why are investors worried about Zscaler?

The company still has good growth, but management gave a cautious early fiscal 2027 growth view after two sales leaders left. It also stopped reporting net retention, which makes customer expansion harder to track.

Is AI good or bad for Zscaler?

AI can help Zscaler because it creates new security problems that companies need to solve. The key question is whether products like AI Protect keep turning that demand into bookings and revenue.