AI helps, but sales risk now matters
- Zscaler is a cloud security company built around Zero Trust, a model that checks each user and device before access is allowed.
- Revenue mainly comes from per-user subscriptions that usually run one to three years.
- Growth is still solid, with Q3 fiscal 2026 revenue up 25% from a year earlier.
- Expansion products are gaining proof, including Data Security ARR above $500 million and AI Protect bookings above $100 million over the past 12 months.
- The main worry is execution, since two sales leaders left and management gave a cautious early fiscal 2027 growth view of 16-17%.
Great market, messier setup
Zscaler has a real tailwind. More work apps live in the cloud, workers connect from many places, and AI can create new kinds of attacks. That makes the old castle-and-moat security model weaker. Zscaler sells a cloud platform that checks access every time, which fits this shift.
The better part of the story is that growth is spreading beyond the first products. Data Security ARR crossed $500 million and grew over 30% year over year. Zero Trust Branch ARR approximately tripled year over year. AI Protect bookings crossed $100 million over the past 12 months. These are signs that customers may buy more of the platform over time.
The harder part is the near-term guide. Management said two sales leaders left after Q3 fiscal 2026 and took a prudent view during the transition. It also called out weaker new logo acquisition, which means adding brand-new customers has not been strong enough. Early fiscal 2027 growth guidance of 16-17% would be a clear slowdown from the mid-20s growth seen in recent quarters.
The stock needs proof that AI demand becomes real bookings, not only a good story. It also needs proof that the sales change does not hurt customer wins. Until then, this is a strong company with a more balanced risk-reward.
Subscriptions and expansion
Zscaler makes most of its money by selling subscriptions to the Zscaler Zero Trust Exchange. Pricing is mainly per user. Contracts usually last one to three years, and revenue is counted over the life of the contract instead of all at once.
The model depends on land and expand. Zscaler first sells one product or group of users, then tries to add more users, higher service levels, or more products. In Q3 fiscal 2026, revenue rose 25% year over year, and the company said most of the increase came from selling more subscriptions to existing customers.
This can be a powerful model because security software can become hard to replace once it is built into a company's network. But it also creates pressure. If customers stop expanding, delay deals, or choose a larger security bundle from a rival, growth can slow quickly.
Another pressure point is cash flow. Free cash flow margin was 16% in Q3 fiscal 2026, and management said rising component costs could lift capital spending as a share of revenue by up to 200 basis points in fiscal 2027. That could lower cash generation even if revenue keeps growing.
One platform, several bets
Zscaler Internet Access
ZIA helps companies secure employee traffic to the internet and cloud apps. It is one of the core user products inside the Zero Trust Users group.
Zscaler Private Access
ZPA controls access to private apps without putting users directly on the company network. It is often cross-sold to customers that already use ZIA.
Data Security Everywhere
This product family helps find and protect sensitive data. Management said Data Security ARR crossed $500 million and grew over 30% year over year.
Zero Trust Branch
Zero Trust Branch brings Zscaler's security model to offices and branches. Management said ARR approximately tripled year over year.
AI Protect
AI Protect helps customers manage security risks tied to AI use. Bookings crossed $100 million over the past 12 months, but it is still early.
Agentic Operations
This newer area uses automation and AI-style workflows to help security teams operate faster. It expands the platform story, but investors still need clearer revenue proof.
One segment, global revenue
Zscaler reports as one operating segment. For fiscal 2025, customers outside the United States made up about 49% of revenue, so the mix below uses geography rather than product lines.
What could break the thesis
Sales transition stalls deals
High impact · Medium oddsTwo sales leaders left after Q3 fiscal 2026. Management already replaced one role and was late in hiring for the other, but it still guided carefully because sales changes can hurt close rates and productivity. If the disruption lasts, fiscal 2027 growth could reset lower.
New customer growth stays weak
High impact · Medium oddsZscaler's model needs both new customers and more spend from current customers. Management admitted that new logo acquisition has underperformed. If new customer wins do not improve, the company becomes more dependent on upsells to keep growing.
Expansion becomes harder to measure
Medium impact · High oddsZscaler used to report dollar-based net retention, which shows whether existing customers spend more over time. The metric was 115% for the trailing 12 months ended October 31, 2025, but the company stopped reporting it after that quarter. Less disclosure makes it harder to judge the health of the land-and-expand motion.
AI hype outruns bookings
Medium impact · Medium oddsAI is now a major part of the bull case. AI Protect bookings crossed $100 million over the past 12 months, which is a good start, but investors still need to see this become a larger and repeatable growth driver. If AI demand slows or customers test but do not renew, the premium story weakens.
Cloud platform costs pressure cash flow
Medium impact · Medium oddsZscaler runs a large cloud security platform, so infrastructure spending matters. Management said component costs could lift capital spending as a share of revenue by up to 200 basis points in fiscal 2027. That would pressure free cash flow margins.
In one breath
What does Zscaler actually do?
Zscaler sells cloud security software. Its platform checks users, devices, apps, and data before access is allowed, which is known as Zero Trust security.
How does Zscaler make money?
Most revenue comes from per-user subscriptions to its cloud platform. Contracts usually last one to three years, and Zscaler tries to grow each account by adding users and products.
Why are investors worried about Zscaler?
The company still has good growth, but management gave a cautious early fiscal 2027 growth view after two sales leaders left. It also stopped reporting net retention, which makes customer expansion harder to track.
Is AI good or bad for Zscaler?
AI can help Zscaler because it creates new security problems that companies need to solve. The key question is whether products like AI Protect keep turning that demand into bookings and revenue.