Report · Software & Internet

Zscaler: A Long-Term Owner's Perspective

Zscaler, Inc.
ZS · US
Current Price
$180
May 23, 2026 close
Baillie Growth Score
53/100
Medium
Intrinsic Value · Three-Tier Range Current price $180 · Within the optimistic intrinsic-value range · much expectation priced in

Composite valuation range · conservative $90–$115 / fair $120–$155 / optimistic $160–$195. At $180, Within the optimistic intrinsic-value range · much expectation priced in.

Lead

A high-quality, subscription-heavy cloud security platform: FY2026 Q2 subscription mix at 84%, steady ARR growth, and 3.5 billion in net cash. The catch is price: forward EV/S near 8.2x, P/FCF near 33x, GAAP still in the red, and heavy stock-based compensation that drags down true owner earnings, leaving today's roughly 180 dollars sitting at the low end of an optimistic scenario. Rating Watch: an excellent business at a price that offers conservative investors little margin of safety.

Conclusion First

As of this report's date (Tokyo time, May 23, 2026), Zscaler has not yet disclosed its formal FY2026 Q3 results for the period ended April 30, 2026. This report therefore treats the most recently disclosed FY2025 10-K, the FY2026 Q2 10-Q for the period ended January 31, 2026, and the official earnings release of February 26, 2026 as the basis for "the latest verifiable operating data." On price, ZS traded around just over 180 dollars near the U.S. market close on May 22, 2026, corresponding to a market capitalization of roughly 29 billion dollars.

Investment rating: Watch.

Core judgment: This is an enterprise software business I can understand and one of genuinely high quality, but it is not an obviously cheap trade. Zscaler's subscription revenue is high in quality, the demand is durable, the platform architecture is competitive in practice, and the balance sheet is solid. Yet its GAAP earnings quality is still distorted by large stock-based compensation, and the cash truly "distributable to shareholders" cannot simply be equated with headline free cash flow. The current price already reflects a substantial portion of long-term optimistic expectations. For a "balanced-but-conservative" investor, whether there is a margin of safety at the current price: not obviously.

Suitable investor profile: better suited to long-term growth investors or quality investors who can tolerate high-valuation volatility; less suited to conservative value investors who put "margin of safety" first.

Greatest uncertainty: persistent dilution from stock-based compensation; valuation-versus-growth mismatch as platform competition intensifies; and whether M&A integration will erode the strong organic operating quality the company already has.

My one-sentence judgment is this: viewed as "corporate ownership to hold for 10 years or more," Zscaler deserves a place on a watchlist of high-quality businesses; but at today's valuation it looks more like "a good company at an ordinary or even slightly expensive price" than "an obviously cheap business." That conclusion rests on three sets of facts. First, revenue is highly subscription-based and predictable, with ARR, deferred revenue, and large-customer counts all growing. Second, at FY2026 Q2 the company held 3.51 billion dollars in cash and short-term investments, above the 1.70 billion dollar net carrying value of its convertible notes, giving it strong financial survivability. Third, GAAP is still in the red, and share count rose from 138.7 million shares in July 2021 to 160.6 million shares in January 2026, showing that "headline free cash flow" cannot be treated directly as cash fully distributable to common shareholders.

The reasons not to buy must also be stated up front. First, at the current price the forward EV/S is roughly 8.2x and the P/FCF, estimated on a trailing-twelve-month basis, is roughly 33x, which is not cheap for a software company that is still not stably GAAP-profitable and carries a high proportion of stock-based compensation. Second, Zscaler's free cash flow benefits heavily from prepaid subscriptions, deferred revenue, and non-cash charges; if persistent dilution is counted as a real economic cost, owner earnings sit well below headline FCF. Third, SSE/SASE is not a natural monopoly: Palo Alto Networks, Netskope, Fortinet, and Cloudflare are all pressing harder, and market share and product-integration capability will keep getting redistributed.

Understanding the Business

How this company actually makes money

Fact: Zscaler's core business is selling enterprises access to a cloud-native security platform, with its key products built around the Zero Trust Exchange. This covers secure internet and SaaS access, private application access, cloud workload and branch/factory/IoT security, and extends into data security, threat management, and AI/agentic security capabilities. The company disclosed in fiscal 2025 that its platform is built on a multi-tenant, globally distributed cloud architecture spanning more than 160 public exchanges and thousands of edge private exchanges, processing over 500 billion requests per day.

Fact: Its customers are enterprises and government agencies of various kinds, skewed toward large organizations. As of July 31, 2025, Zscaler had 9,400+ customers, of which roughly 40% of the Forbes Global 2000 and more than 45% of the Fortune 500 are customers; about 49% of revenue comes from markets outside the United States. The company also discloses that no single end customer accounts for more than 10% of revenue.

Fact: The revenue model is primarily subscription. In fiscal 2025 Zscaler disclosed that subscription and related support accounted for about 98% of revenue; typical contract terms run one to three years, generally prepaid annually, with a minority prepaid quarterly, monthly, or over multiple years. The company explicitly states that revenue comes mainly from selling access rights to the cloud platform, and customers do not acquire ownership of the underlying software.

Inference: This means it is not fundamentally a one-time software sale but the sale of "always-on, continuously upgraded, continuously protective" platform usage rights. The advantages of this model are recurring revenue, high visibility, and renewals and expansions that are critical to long-term value; the drawback is that reported revenue typically lags changes in orders or renewals, and the market tends to overamplify short-term swings in new ARR or RPO. The company itself notes that because subscription revenue is amortized over the term, changes in new bookings and renewals in any given period are not immediately reflected in revenue.

Is this business simple, transparent, and suitable for long-term holding

From the standpoint of "can it be understood," I think it can be understood, but is not especially simple. It is not a consumer product you grasp at a glance, yet it is not a black box either: you can think of it as "enterprises moving part of the security and access control that once lived across scattered data centers, branches, VPNs, gateways, and firewalls onto a unified, cloud-native zero-trust platform." The value proposition is higher security, lower operational complexity, and better fit for cloud/mobile/AI scenarios. The platform advantages the company emphasizes among its competitive factors also center on cloud delivery, reliability, scalability, integration capability, total cost of ownership, and brand reputation.

The "comprehensibility barrier" of this business lies mainly in two things. First, the product boundary keeps expanding, from the original ZIA/ZPA to branch, data, cloud, digital experience, AI security, and MDR, making it more complex in substance than a few years ago. Second, competition is no longer just about replacing traditional firewalls but about competing head-on with the "integrated security stacks" of larger platforms. For a long-term investor, this remains understandable, but one must acknowledge that it depends more on technology roadmap and product execution than a "Buffett-style classic good business" like Coca-Cola, Moody's, or Visa.

If the stock market closed for 5 years, would I be willing to own this business? My answer is: willing to own the business itself, but not willing to bet heavily at the current price. Business quality and price are two different things. Zscaler's business model can withstand a 5-year market closure; whether the current valuation justifies buying today is a separate and stricter question.

Business comprehensibility score: 4/5.

Industry and Moat

Industry stage and long-term demand

Fact: Demand for zero trust and SSE/SASE is still in a growth phase, not a mature decline. CISA still uses the Zero Trust Maturity Model as a roadmap for organizations implementing zero-trust strategies; Forrester published its first SSE Wave in 2024, evaluating 11 major vendors; and Reuters in 2025 cited Gartner data indicating that the SASE market is expected to grow from roughly 7 billion dollars in 2022 to roughly 25 billion dollars in 2027. This shows that long-term demand for the space is real and still expanding.

Inference: This is not a traditional high-volatility cyclical industry; it is closer to "high growth, strong technology iteration, relatively rigid customer budgets" enterprise software. Cybersecurity budgets get scrutinized under macro pressure, but they are not cut casually the way discretionary consumption is; the real risk is not that demand disappears, but whether the competitive order gets reshuffled as demand migrates toward more integrated, more platform-oriented, more AI-automated solutions.

Competitive landscape and industry attractiveness

Fact: In its 10-K, Zscaler explicitly acknowledges that its competitors include both traditional on-premises appliance vendors and independent security vendors, large networking vendors, and various point-product providers; the dimensions of competition include cloud delivery capability, platform features, reliability, scalability, integration capability, price/total cost of ownership, and brand and channel relationships.

Fact: Third-party research and industry news likewise confirm this is a space crowded with strong rivals: Forrester's 2024 SSE evaluation simultaneously covered Palo Alto Networks, Netskope, Cloudflare, Fortinet, Zscaler, and other major players; Palo Alto Networks continued to strengthen its platform through large acquisitions in 2026; and Netskope pursued an IPO in 2025, showing that the space has not formed a single dominant profit pool.

My judgment is: this is a good industry, but not one where you can win lying down. Industry attractiveness is high, because demand growth, customer stickiness, and the non-negotiable nature of security are all present; but the industry profit pool will not necessarily be highly concentrated, because platform integration, sales channels, government compliance, AI features, and cross-product bundling capability are all reshaping share allocation. Zscaler looks more like "a good company in a good industry" than "an excellent company in a bad industry."

Industry attractiveness score: 4/5.

Moat breakdown

The table below is my breakdown of Zscaler's moat:

Moat type Assessment Basis
Brand advantage Moderately strong Already has high recognition among large enterprise and government customers, with high Forbes Global 2000 penetration; but the brand is not a consumer-style exclusive.
Cost advantage Moderate Multi-tenant cloud architecture and a scaled platform can spread costs, but this is not impossible to replicate.
Scale advantage Fairly strong A globally distributed platform, 160+ public exchanges, and the compliance and certification system require years of investment.
Network effects Weak to moderate Not a classic two-sided network effect where more users always mean more strength; more like a "scale learning effect" formed by data and intelligence feedback.
Switching costs Fairly strong Once the platform is embedded in a customer's traffic, identity, policy, and application-access paths, migration is not easy.
Channel advantage Moderately strong Coordinated with global telecom carriers, systems integrators, VARs, and cloud marketplaces.
Licensing/regulatory barriers Moderate FedRAMP, DoD IL5, CMMC Level 2, and various national compliance credentials raise the barrier to entry.
Data advantage Moderately strong The platform processes 500 billion requests and 130TB of raw logs per day, aiding threat research and product optimization.
Corporate culture/operating capability Fairly strong A long-term focus on zero-trust architecture, with strong execution and product-expansion capability.
Capital allocation capability Moderate Reinvestment in the core business is effective, but M&A integration and dilution management still need watching.

The core factual basis for these assessments is that Zscaler runs a multi-tenant cloud platform serving the world, with large-scale traffic-handling and logging capability; holds government and international compliance credentials; uses a co-selling channel model; and is already embedded in the traffic paths of large enterprise customers.

Just how durable is the moat

My conclusion is: Zscaler's moat is real, but it is mainly a composite moat of "architecture + scale + switching costs + compliance + sales system," not a crushing moat along any single dimension. This moat currently looks stable to slightly widening: the product surface is expanding, ARR is rising, the count of million-dollar ARR customers keeps growing, and the company is bringing AI security and browser security into the platform. At FY2026 Q2, ARR reached 3.359 billion dollars, the number of customers with over a million dollars in ARR rose to 728, and the number with over a hundred thousand dollars in ARR rose to 3,886.

But I would not describe it as "unassailable," because competitors are platformizing in parallel: Palo Alto is shoring up identity and observability through acquisitions, Fortinet continues to expand with its in-house ASICs and integrated network-security architecture, and other cloud-security vendors are grabbing SSE/SASE share. In other words, what rivals are copying is not just a single product feature but the whole "platform narrative"; this makes Zscaler's moat look more like an ongoing operating-capability race than the collection of monopoly rent.

On the time and capital required to replicate it, my inference is: replicating an SSE/zero-trust platform that meets the requirements of large enterprise and government customers, covers global nodes, holds compliance credentials, and integrates deeply with a multi-party ecosystem typically takes years of time and large capital investment, not something achievable within a few quarters. That is the fundamental reason the moat exists, and why, despite many participants in the space, the vendors that truly make it onto the core procurement lists of large enterprises do not proliferate without limit.

On pricing power, I believe Zscaler has moderate pricing power, but it shows up more in bundling, expansion, suite upgrades, and total-cost-of-ownership savings than in simply raising unit prices sharply year after year. The company itself lists "platform integration capability" and "total cost of ownership / network cost savings" as competitive factors; at the same time, it acknowledges that the macro environment lengthens sales cycles and makes large customers more cautious in approvals.

Moat strength score: 4/5.

Management and Capital Allocation

Is management trustworthy

Fact: Founder Jay Chaudhry has served as CEO and chairman since 2007; as of the 2025 proxy statement, he held about 16.8% of the shares. The company also maintains executive stock-ownership guidelines, requiring the CEO to hold shares worth no less than 5 times annual salary. For the CEO, the fiscal 2025 base salary was only 23,660 dollars, and he does not participate in the annual cash bonus plan. These all indicate that management's interests are economically and clearly aligned with shareholders'.

Opinion: On "honest, rational, long-term-oriented," I give management an above-average rating. The strengths: the founder is still in place, equity alignment is deep, the product direction has been consistent over the long term, the framing of the growth-versus-profitability balance is not entirely out of control, and recent quarters have emphasized disciplined execution. The weaknesses: this governance structure is not exactly shareholder-friendly. The company keeps the roles of chairman and CEO combined, has no lead independent director, maintains a classified board, and has publicly opposed proposals to declassify the board. For more conservative investors, this is a genuine governance discount.

Is capital allocation rational

The main thread of Zscaler's historical capital allocation is clear: prioritize reinvestment in R&D, sales, and global platform expansion, which is what a growth-stage security software company should do. In fiscal 2025 the company's R&D expense was 672 million dollars and sales and marketing expense was 1.259 billion dollars, still clearly outpacing the release of GAAP operating profit; but this spending appears alongside revenue growth, ARR growth, and large-customer expansion, rather than blind scale-piling.

What truly warrants caution is M&A and dilution. In the first two quarters of fiscal 2026, the company completed the acquisitions of Red Canary and SPLXAI for a combined purchase price of about 692 million dollars, then announced the acquisition of SquareX. Correspondingly, goodwill at January 31, 2026 rose from 418 million dollars in July 2025 to 1.001 billion dollars, and the net carrying value of acquired intangible assets also rose from 47.32 million dollars to 193 million dollars. This shows management is shifting part of its capital allocation from "purely organic expansion" toward "platform-reinforcing M&A." That is not necessarily bad, but it means future M&A will have to face stricter scrutiny.

More importantly, the company has not systematically repurchased stock to offset persistent dilution the way mature software companies do. Share count grew from 138.66 million shares at the end of July 2021 to 158.30 million shares at the end of July 2025, and on to 160.57 million shares at January 31, 2026; when the convertible notes were settled at maturity in July 2025, the company also issued 3.8 million new shares for the option premium portion. This means that even if the company's "headline free cash flow" is strong, the "per-share owner earnings" that common shareholders actually receive will still have part of it eaten away by persistent dilution.

My overall assessment of management is: operationally credible, governance ordinary; strong reinvestment capability, weak dilution control; M&A direction has logic, but value creation still needs more time to prove out.

Management and capital allocation score: 3/5.

Financial Quality and Owner Earnings

Key financial metrics

The table below is compiled from Zscaler's 2021/2022/2024/2025 10-Ks, the FY2026 Q2 10-Q, and official earnings releases; TTM is my calculation on a FY2025 + FY2026 H1 - FY2025 H1 basis.

Metric 2021 2022 2023 2024 2025 TTM to 2026-01-31
Revenue (billion dollars) 0.673 1.091 1.617 2.168 2.673 3.001
Gross margin 77.7% 77.8% 77.6% 78.0% 76.9% ~76.5%
GAAP operating margin -30.9% -30.0% -14.5% -5.6% -4.8% ~-4.9%
GAAP net margin -38.9% -35.8% -12.5% -2.7% -1.6% ~-2.3%
Operating cash flow (billion dollars) 0.202 0.322 0.462 0.780 0.972 1.114
Free cash flow (billion dollars) 0.144 0.231 0.334 0.585 0.727 0.874
FCF margin 21.4% 21.2% 20.6% 27.0% 27.2% 29.1%
Shares outstanding at period end (millions) 138.7 ~143.0 147.2 152.5 158.3 160.6
Cash + short-term investments (billion dollars) 1.503 ~1.731 2.100 2.410 3.572 3.513
Debt/convertible notes (billion dollars) 0.914 data to be supplemented 1.134 1.142 1.701 1.703

How to read this table: Zscaler's most impressive feature is not GAAP profit but its strong and steadily improving operating cash flow and free cash flow; what most warrants caution is not debt-service pressure but the fact that GAAP profitability has long lagged cash flow and the share count keeps expanding. Revenue grew nearly fourfold from 2021 to 2025, and FCF rose from 144 million dollars to 727 million dollars, showing that this business does release cash after scaling; but the GAAP operating margin was still negative in 2025, showing that "accounting-profit quality" has not truly matured.

Profit, cash flow, capital intensity, and financial soundness

Fact: At FY2026 Q2, the company had 3.513 billion dollars in cash and short-term investments on its books, above the 1.703 billion dollar carrying value of its convertible notes, putting it in a net cash position; there is no sign of a survival crisis arising purely from debt structure. The company also stated explicitly in both FY2025 and FY2026 Q2 that it had no off-balance-sheet arrangements.

Fact: The stability of cash flow comes from three things. First, subscription contracts are typically one to three years and mostly prepaid annually. Second, deferred revenue is large in scale: total deferred revenue at the end of July 2025 was 2.468 billion dollars, still at 2.355 billion dollars at the end of January 2026. Third, the company's ARR at the end of January 2026 reached 3.359 billion dollars, with RPO shown as 6.051 billion dollars on the investor relations page. Together these metrics raise the visibility of future revenue.

Inference: But this does not mean its free cash flow can be treated 1:1 as "real cash in shareholders' pockets." The reason is that operating cash flow is strong partly because of the collect-first, amortize-later subscription model, and partly because of large non-cash charges; the most important and least ignorable of these is stock-based compensation. The share count keeps growing, and the company has not repurchased on a large scale to offset it, so headline FCF is clearly higher than "post-dilution owner earnings truly distributable to common shareholders."

On capital intensity: This is not heavy-asset manufacturing, but it is not "zero capex" either. In fiscal 2025 the company's free cash flow definition deducted 164 million dollars of capex on property and equipment and 81.51 million dollars of capitalized internal-use software; in the first half of 2026 it deducted 35.07 million dollars and 34.86 million dollars respectively. This shows that platform expansion, R&D capitalization, and infrastructure investment are all real. The good news is that growth has not made the company "increasingly short of cash as it grows"; instead, it has strengthened cash generation after scaling.

Receivables, payables, inventory, and accounting quality

Zscaler is a SaaS model, so inventory is essentially not a core line item; more important than inventory are accounts receivable, deferred revenue, and deferred sales commissions. Accounts receivable grew from 257 million dollars at the end of July 2021 to 992 million dollars at the end of July 2025, but fell back to 552 million dollars at the end of January 2026, which the company explains in its 10-Q is mainly related to billing and collection timing; accounts payable rose from 12.55 million dollars in 2021 to 46.91 million dollars in 2025, and was 29.03 million dollars at the end of January 2026. This is consistent with the seasonality and prepayment cadence of subscription SaaS.

I do not see obvious signals of financial fabrication, but two things must be watched continuously. First, deferred contract acquisition costs remain fairly high, with current and non-current totaling about 510 million dollars at the end of July 2025 and about 519 million dollars at the end of January 2026; if renewal quality deteriorates in the future, this portion could face impairment pressure. Second, capitalized internal-use software and high SBC both create a sizable gap between "accounting profit and true shareholder return." They are not necessarily unhealthy, but must be understood on a conservative basis.

Owner earnings estimate

Below I break down Zscaler's "owner earnings," clearly distinguishing fact from assumption.

Factual starting point: On a trailing-twelve-month basis (to January 31, 2026), Zscaler's operating cash flow was about 1.114 billion dollars, and after deducting capex and capitalized internal-use software, headline FCF was about 874 million dollars.

Conservative assumptions: I treat headline FCF as a "broad-definition owner-earnings ceiling," but then apply two further layers of discount. First, for maintenance capex I do not make a "cosmetic split"; I essentially treat the disclosed capex and capitalized internal-use software as a real maintenance/expansion blended cost that must be paid. Second, given that the share count rose persistently from 138.66 million shares in July 2021 to 160.57 million shares in January 2026 with no sustained repurchase offset, I treat persistent dilution as a real economic cost and apply a sizable further discount to headline FCF.

My conservative conclusion: I would put Zscaler's conservative owner earnings at 450 million to 550 million dollars per year. This range is below the 874 million dollar headline FCF but above GAAP net income, because: on one hand, the business genuinely generates real cash; on the other hand, not all of that cash can be "distributed to shareholders" without cost, since the persistent dilution caused by stock-based compensation must be treated as an economic cost.

Estimated against the current market capitalization of roughly 29 billion dollars, the current price corresponds roughly to:

  • about 33x headline FCF;

  • about 53 to 64x conservative owner earnings.

This is one of the core pieces of evidence for "a good company, but not cheap enough."

Valuation and Margin of Safety

Method one: owner-earnings discounting

The valuation set below is on a "conservative value investor" basis, not the optimistic SaaS model common on the sell side. The shared premises I use are:

  • Discount rate: 10%;

  • Net cash adjustment: cash and short-term investments minus convertible notes as of January 31, 2026, about 1.8 billion dollars in net cash;

  • For the per-share basis, I use roughly 169 million shares, the approximate fully diluted share count in the FY2026 guidance, as the denominator, rather than the lower historical share count.

Scenario Core assumptions Corresponding per-share intrinsic value
Conservative Starting owner earnings of about 450–500 million dollars; 8%–10% annual growth over the next 10 years; 3% terminal growth 90–115 dollars
Reasonable Starting owner earnings of about 500–600 million dollars; 10%–12% annual growth over the next 10 years; 3%–3.5% terminal growth 120–155 dollars
Optimistic Starting owner earnings of about 600–700 million dollars; 13%–15% annual growth over the next 10 years; dilution eases significantly; 3.5% terminal growth 160–195 dollars

Opinion: Within this framework, the current price of just over 180 dollars sits roughly near the low end of the optimistic scenario, and clearly above the "midpoint of the reasonable scenario." That is why I am unwilling to give it a "buy" rating: not because the company is poor, but because the price already requires you to be quite confident about a decade of execution and competitive outcomes.

Method two: relative valuation

On relative valuation, Zscaler is not the most expensive name in the sector, but it is by no means "cheap." To avoid mistakenly judging it cheap just because peers are all expensive, I focus more on "the combined price the market assigns to growth, cash flow, and governance."

Company Latest operating anchor Current market cap Estimated sales multiple Cash-flow profile My conclusion
Zscaler FY26 revenue guidance of about 3.309–3.322 billion dollars, ARR 3.359 billion dollars About 29 billion dollars About 8.8x FY26 revenue Strong TTM FCF, but heavy dilution Not extremely expensive, but lacks an obvious margin of safety
Palo Alto Networks FY26 revenue guidance of about 11.28–11.31 billion dollars, Q2'26 non-GAAP operating margin 30.3% 185.27 billion dollars About 16.4x FY26 revenue Strong adjusted-FCF guidance, but M&A is complex More expensive, but a broader platform and more mature GAAP quality
CrowdStrike FY26 revenue 4.81 billion dollars, FY26 FCF 1.24 billion dollars 166.74 billion dollars About 34.7x FY26 revenue High growth, high cash flow, high valuation The high-valuation representative of the sector
Fortinet Q1'26 revenue 1.850 billion dollars, Q1 FCF 1.007 billion dollars 99.48 billion dollars Roughly 13x annualized revenue Extremely strong FCF More mature, more profitable, but a different business structure

The most important conclusion of this table is not "ZS is cheaper than the others," but rather: ZS is indeed far cheaper than high-heat growth names like CRWD and NET, and below PANW's revenue multiple; but its per-share owner-earnings quality is not as solid as FTNT's. So the current price is closer to "moderately high valuation within the sector" than to "significantly undervalued."

Method three: asset and liquidation value

For a SaaS company like Zscaler, the liquidation-value method is not appropriate as the primary valuation method. The reason is simple: the real value lies in the platform, customer relationships, product capability, engineering team, and channel system, not in book net assets. By January 31, 2026, goodwill had reached 1.001 billion dollars and the net value of acquired intangible assets was 193 million dollars; these line items matter for "going-concern value" but offer limited help for liquidation value.

Taking an extremely conservative view, Zscaler's asset protection comes mainly from its net cash position, not from realizable hard assets. In other words, its downside protection is not "high liquidation value" but "plenty of cash, non-dangerous liabilities, and a business that will not die easily." That helps a great deal in preventing a wipeout, but offers little help in proving the current price is cheap.

Margin-of-safety judgment

My final valuation ranges are:

  • Conservative intrinsic value range: 90–115 dollars

  • Reasonable intrinsic value range: 120–155 dollars

  • Optimistic intrinsic value range: 160–195 dollars

Correspondingly, the operating ranges I give are:

  • Ideal buy price: 95–125 dollars

  • Acceptable holding price: 125–155 dollars

  • Clearly overvalued price: above 175 dollars

This means that at the current price of just over 180 dollars, Zscaler looks more like an "excellent company at a tight price." For a "balanced-but-conservative" investor, the margin of safety is insufficient.

Risks, Checklist, and Final Judgment

The most important risks and the bear case

Competitive risk. The strongest counterargument is that the SSE/SASE endgame may not be a sole win for Zscaler but rather one in which broader platform vendors, with stronger sales organizations, bundling capability, and M&A integration capability, capture more budget. Palo Alto is expanding its platform aggressively through acquisitions, Fortinet continues to strengthen its integrated network-security architecture, and Netskope is still pursuing the capital markets. If customers favor "a broader security platform" over "the purest zero-trust access architecture," both Zscaler's growth and its valuation could come under pressure.

Technology substitution and product-evolution risk. Zscaler's strength lies in architectural leadership, but that also means it must keep proving it can stay ahead in new areas like browser security, AI-agent security, data security, and MDR. The company is acquiring and expanding these capabilities, but the more it expands, the easier it becomes to go from "a beautiful core-architecture company" to "a complex platform-integration company." If integration fails, gross margins, sales efficiency, and product reputation could all be damaged.

Valuation and dilution risk. This may be the most realistic source of permanent capital loss. Even if the business keeps growing, as long as growth slows to the low-to-mid double digits while stock-based compensation continues to cause roughly 2%–4% annual dilution, the valuation multiple the market assigns it could compress significantly. The headline FCF yield implied by the current price is only about 3%, and the yield after a conservative owner-earnings adjustment is lower still; this means returns depend heavily on many years of excellent execution ahead, not on buying cheaply today.

Regulatory and contract-structure risk. In its risk factors, the company notes that in certain circumstances (including the new EU Data Act), customers may be able to cancel subscriptions without cause, typically accompanied by an early-termination penalty. This does not mean revenue will be broadly impacted immediately, but it reminds us that the legal environment for enterprise software contracts is not static, and data-sovereignty, compliance, and localization requirements will keep adding operational complexity.

Financial-framing risk. If investors rely too heavily on non-GAAP or headline FCF while ignoring the impact of stock-based compensation, deferred commissions, capitalized software, and convertible notes on per-share value, they will tend to overestimate true shareholder returns. The company certainly shows no signs of "fabrication," but the financial statements of such a SaaS company are naturally easier to dress up with "flattering framing" than those of traditional manufacturing or consumer companies.

Comparison with other opportunities

Compared with its strongest competitors, I prefer to see Zscaler as "a more focused, purer zero-trust/SSE architecture company" and Palo Alto as "a broader, more complex, but more mature platform-style security group." At the current moment, Zscaler's revenue multiple is below PANW's and CRWD's, showing the market is not giving it the most extreme premium; but FTNT, with stronger cash flow and more mature GAAP profitability, shows investors another, "more solid way of making money." So ZS is not unattractive, but its opportunity cost is not low.

Compared with broad-based indices, my judgment is more restrained: for a balanced-but-conservative investor, buying ZS today is not obviously better than buying the index. Buying the index gets you diversification and lower single-stock governance/technology-misstep risk; buying ZS means betting that it can keep capturing the dividends of zero-trust and AI-security upgrades over the next 10 years and ultimately convert high-quality growth into real per-share cash returns. That bet is not unplaceable, but the current price does not leave you a thick cushion for error.

Compared with risk-free yield assets, the problem with ZS is also direct: even looking only at headline FCF, its "shareholder cash yield" is only about 3%; if dilution is treated as a real cost, the owner-earnings yield is lower still. That is, its excess return must be realized through years of future growth, not delivered by today's buy price carrying its own protection. For a value investor, this naturally lowers its appeal.

If a portfolio could hold only 5 assets, I think Zscaler is not yet qualified for a conservative 5-asset long-term core portfolio; it is better suited to a "high-quality growth watch pool," waiting for a better price or clearer signs of improving per-share returns.

Investment checklist

Check item Conclusion
Can I understand this business Pass
Does it have long-term stable demand Pass
Does it have a durable moat Pass, but not overwhelming
Does it have pricing power Partial pass
Can it generate stable free cash flow Pass
Is its return on capital excellent Uncertain
Is management trustworthy Pass, but with a governance discount
Is capital allocation rational Partial pass
Is the balance sheet sound Pass
Is the valuation below intrinsic value Fail
Is the margin of safety sufficient Fail
Does long-term holding put me at ease Business at ease, price not at ease
Which key facts would make me sell Growth rate / net retention / large-customer expansion / runaway dilution / competitive dislocation
Am I just buying because of the stock price and emotion Requires self-vigilance

Final investment conclusion

【Final rating】 Watch

【One-sentence investment thesis】 Zscaler is a genuinely excellent cloud-security platform company with structural long-term value, but the current price looks more like buying years of future success in advance than buying an obvious bargain today.

【Core bull case】

  • Subscription revenue accounts for about 98%, contracts are typically one to three years and mostly prepaid annually, and ARR, deferred revenue, and large-customer counts together provide high revenue visibility.

  • The platform architecture, global nodes, compliance certifications, and large-customer penetration together form a composite moat, not a single-point product story.

  • Operating cash flow and free cash flow have risen steadily over the past five years, and the balance sheet is in a net cash position, giving strong downside resistance.

  • Zero Trust / SSE / AI security is still a growth space, and the company has already brought AI security, browser security, and MDR into the platform.

  • The founder still serves as CEO with a high ownership stake, giving strong long-term alignment with shareholders.

【Core bear case】

  • The current valuation lacks a margin of safety for more conservative investors, and the price is already near the low end of the optimistic range in my model.

  • The GAAP operating margin is still negative, and true shareholder-return quality is affected by persistent stock-based compensation and dilution.

  • The competitive landscape is crowded with strong players, and platform-integration capability and channel strength will not necessarily tilt only toward Zscaler.

  • The weight of M&A is rising, goodwill and intangible assets are climbing quickly, and future integration and return realization will take time to prove.

  • The governance structure is not exactly friendly to common shareholders; a classified board, a combined CEO and chairman, and the absence of a lead independent director are all negatives.

【Key assumptions】

  • ARR growth can hold at the mid-to-high double digits over the next several years, rather than sliding into the low-to-mid double digits.

  • The count of customers with over a million dollars in ARR can keep expanding steadily.

  • Gross margin broadly stays in the high-70% range.

  • The pace of dilution gradually declines, or the company begins to partly offset it with repurchases in the future.

  • Newly acquired assets can be integrated smoothly, rather than damaging the core platform's sales efficiency and culture.

【Fair buy price】 95–125 dollars. Basis: roughly a 20%–30% discount to my conservative-to-neutral intrinsic value, and more consistent with the margin of safety a "balanced-but-conservative" investor needs.

【Target holding period】 10 years or more. This is not a name for making quick money on one or two quarters of beats; the holding logic only holds if long-term platform value keeps being realized.

【Expected annualized return】

  • Conservative scenario: 0%–4%

  • Neutral scenario: 6%–9%

  • Optimistic scenario: 11%–14%

These returns are premised on "the business stays excellent and the valuation no longer expands significantly"; they are not higher because the current buy price is already not low.

【Maximum loss risk】 Absent a liquidity crisis, I think the worst case is not "a wipeout" but a medium-to-long-term 40%–60% price compression driven jointly by slowing growth + persistent dilution + a valuation-multiple decline; if competitive dislocation and M&A integration go wrong together, the extreme case could be worse. In essence, "permanent capital loss comes from a double hit to valuation and fundamentals after buying at a high price," not from bankruptcy.

【Tracking metrics】

  • ARR growth, especially organic ARR growth excluding M&A

  • Growth in the count of customers with over a million dollars in ARR

  • Growth in the count of customers with over a hundred thousand dollars in ARR

  • The quality of deferred-revenue and RPO growth

  • Gross margin and non-GAAP operating margin

  • Operating cash flow / FCF margin

  • Annual share-count growth and whether repurchase offsets begin

  • Post-M&A goodwill, intangible assets, and integration results

  • Share shifts by major competitors in SSE/SASE/AI security

  • Whether large-customer sales cycles keep lengthening

【Signals that trigger reassessment】

  • Organic ARR growth persistently falling below the mid double digits

  • A clear slowdown or stall in the count of million-dollar ARR customers

  • Gross margin dropping below the mid-70% range without recovery

  • FCF margin falling back below the low 20% range and continuing to deteriorate

  • Equity dilution staying high over the long term with no repurchase offset

  • Impairment, customer churn, or cultural-integration problems from important acquisitions

  • PANW/FTNT/Netskope and others clearly taking budget pool at key product layers

  • A marked deterioration in management's disclosure on risk, integration, or the path to profitability

【Final recommendation】 Put coolly, Zscaler is worth studying and worth tracking for the long term; but at the current price, the most rational action is not to "rush to own it" but to "patiently wait for better odds." If you are a long-term growth investor who can bear high valuation and high volatility, it can enter your high-quality watchlist; if you are a more conservative value investor, today is more about appreciating its business than rushing to place an order.

Open questions and limitations

This report did not separately pull real-time Treasury yields, so the "relative to the risk-free rate" comparison uses directional judgment rather than a precise spread comparison. Another limitation is that, as of May 23, 2026, the FY2026 Q3 results had not yet been formally disclosed, so this report cannot incorporate the latest operating data for the April 2026 quarter. On industry share, many detailed third-party market-share reports sit behind paywalls, so this report leans more on the company's original disclosures and authoritative public materials than on paid databases.

This report is based on public information and does not constitute investment advice. Markets carry risk; invest with caution.

SSE/SASECybersecuritySaaSSBCOwner Earnings
Ask about this report

Members can ask about this report; once answered it appears under "Reader Q&A" on this page. You can also highlight a passage in the text to ask about it directly.