ZS

Analyst Note: Zscaler, Inc. (ZS)

Date: 2026-06-20 Event Date: 2026-06-20

1. Structural Readiness

• State: Context-Only (No active technical structure defined in the provided data).
• Conservative Entry: —
• Current Price: $124.85
• Extension: —
• Breakout Level: —
• ATR Context: Current ATR is 7.3% (Very High). This indicates elevated volatility, which typically requires wider position sizing buffers if a technical entry were to be constructed.

2. The Thesis Layer

• Primary Secular Theme: Cybersecurity → Network / Zero-Trust.
• Directness: Tier Direct.
• Thesis Weighting: ZS is a primary beneficiary of the secular shift from perimeter-based security to Zero Trust Everywhere. The company's role is central to this transition, acting as the infrastructure layer for cloud-native security.
• Additional Tailwinds: The evidence highlights a secondary, reinforcing theme: AI-Driven Security. Management explicitly links the rise of frontier AI models to a 10x multiplication of unremediated vulnerabilities, positioning ZS's AI-enhanced threat detection as a critical necessity rather than a discretionary upgrade. The convergence of cloud adoption, workforce mobility, and AI creates a structural "perfect storm" for Zero Trust adoption, reinforcing the primary thesis.

3. The Business

Zscaler operates in the Technology sector, specifically within Cybersecurity, providing a cloud-native platform for secure access service edge (SASE) and Zero Trust architecture. The business model is subscription-based, driven by Annual Recurring Revenue (ARR) and Remaining Performance Obligations (RPO).

Key Financial & Operational Metrics (as of May 26, 2026):

• Revenue Growth: ARR grew 25% year-over-year to $3.5 billion (up from $2.817 billion in FY2025).
• New Bookings: Q3 '26 net new ARR was $166 million, a 24% increase year-over-year.
• Visibility: RPO stands at approximately $6.5 billion, growing 30% year-over-year. Of this, 46% is classified as current RPO, with 91% expected to be recognized over the next three years.
• Profitability: Non-GAAP operating margin reached an all-time high of 23%.
• Customer Base: The company serves over 9,400 customers across 185 countries. Notably, ZS counts approximately 40% of the Forbes Global 2000 and over 45% of Fortune 500 companies as customers.
• Operational Scale: The platform blocks over 225 million threats daily and performs 250,000 unique security updates daily, leveraging AI/ML to propagate threat intelligence across the ecosystem within minutes.
• Geographic Mix: Approximately 49% of revenue is derived from customers outside the United States.

Management Expectations (Recorded May 26, 2026):

• For the full fiscal year 2026, management expects ARR to be between $3.740 billion and $3.749 billion, representing approximately 24% year-over-year growth.
• Management expects to continue incurring net losses for the foreseeable future, though the path to profitability is supported by the record operating margin of 23%.

4. Archetype and Conviction

• Archetype: Growth Leader.
• Fit Analysis: ZS fits the Growth Leader archetype due to its double-digit ARR growth (25% actual, 24% guided), expanding operating margins (23%), and high RPO visibility. The company is not a deep value recovery or a cyclical play; it is a structural compounder in a high-growth secular environment.
• Conviction Stack:
• Thesis Strength: High. The shift to Zero Trust is structural, and the AI narrative provides a new catalyst for expansion.
• Evidence Quality: Strong. The evidence set is comprehensive, covering earnings transcripts, SEC filings, and specific financial metrics from the most recent reporting period (May 2026).
• Structural Quality: High. The company demonstrates strong unit economics (high margin, high RPO growth) and deep enterprise penetration (Fortune 500/Global 2000).
• Setup Readiness: Low/Unknown. While the business fundamentals are excellent, the technical setup (Coil) is missing. The "Context-Only" state means we cannot currently assess the risk/reward ratio of a trade entry.
• Rerating Potential: Moderate to High. The combination of margin expansion (23%) and sustained high growth (24%) typically supports multiple expansion, provided the market remains receptive to growth stocks.
• Volatility Context: The current ATR of 7.3% (Very High) suggests that while the fundamental case is strong, the stock price is subject to significant daily swings. This volatility increases the risk of stop-outs in a technical setup but also offers larger potential moves if a breakout occurs.

5. Invalidations, Strengths, and Gaps

• What Would Strengthen the Case:
• Confirmation of the 24% ARR guidance for FY2026.
• Further expansion of the non-GAAP operating margin beyond 23%.
• Acceleration in the number of "Zero Trust Everywhere" enterprises (currently >700).
• What Would Invalidate the Case:
• A significant miss on the FY2026 ARR guidance (e.g., growth dropping below 20%).
• A contraction in the RPO growth rate, indicating slowing new bookings.
• A material reduction in the number of Fortune 500/Global 2000 customers.
• Gaps in the Evidence Base:
• Cash Flow Details: While net losses are mentioned, specific details on free cash flow conversion or cash burn rates for the current quarter are not explicitly detailed in the provided snippets, though the high margin suggests improving cash dynamics.
• Competitive Landscape: No specific data on competitive win rates or pricing pressure from competitors is provided in the evidence set.

PRIVATE ANALYST CALL

Judgment: Hold Confidence: medium Key evidence: ARR grew 25% to $3.5 billion with 24% net new ARR; Non-GAAP operating margin hit record 23%; RPO of $6.5 billion provides high visibility; 40% of Forbes Global 2000 are customers. Key risks: Technical setup is undefined (Context-Only state); Current ATR of 7.3% indicates very high volatility; Company continues to report net losses; Guidance for FY2026 ARR growth is 24%, which is strong but requires execution. Expected path: Management expects ARR to reach $3.740-$3.749 billion for FY2026; RPO recognition will drive revenue over the next 3 years; AI adoption will likely accelerate threat detection demand. Expected horizon: 12 to 24 months for the thesis to fully play out as RPO is recognized and margins expand.