ZS · Analyze — Financebot

Verdict up front: [6.5] — WATCH, do not chase the pop. A genuine category-leading zero-trust franchise, de-rated ~55% from its highs to a reasonable multiple — but growth is decelerating hard (FY2027 ARR guided to 16–17% vs ~24% in FY2026), stock-based comp still eats ~80% of reported free cash flow, and Microsoft's bundled SSE is a live moat threat. Good company, now fair price, real deceleration risk. Today's +10% is a sector sentiment pop, not a fundamental change.

0. What Happened Today (and Why the Stock Is Where It Is)

Today (+10.1% to $153.45): A joint CISA/NSA/FBI advisory warning of Russian state-sponsored actors exploiting networking devices/routers across communications, energy, government, and healthcare. This is a sector-wide sentiment catalyst — it lifted the whole cyber complex, not a ZS-specific fundamental event. Do not confuse a headline pop with a re-rating.

The bigger picture — ZS fell ~55% from its 52-week high ($336.99 → $114.62 low, now $153): The collapse came on May 27–28, 2026, after Q3 FY2026 earnings. The quarter beat (revenue +25%, record 23% non-GAAP operating margin, $1.08 non-GAAP EPS), but two things spooked the market: 1. Preliminary FY2027 guidance of 16–17% ARR/revenue growth — a sharp deceleration from FY2026's ~24%, and below the ~18–20% the Street expected. 2. Departure of two senior sales executives, which management cited as the reason for a "prudent" guide.

The central debate for this analysis: is 16–17% a conservative sandbag from new sales leadership, or the real, structural growth rate of a maturing category leader?

1. Fundamentals (Health)

Revenue trajectory — the deceleration is the story

FY (Jul 31)	Revenue	YoY	FY	Revenue	YoY
2018	$190.2M	—	2023	$1,617.0M	+48.2%
2019	$302.8M	+59.2%	2024	$2,167.8M	+34.1%
2020	$431.3M	+42.4%	2025	$2,673.1M	+23.3%
2021	$673.1M	+56.1%	2026E (guide)	~$3,330M	+24.6%
2022	$1,090.9M	+62.1%	2027E (guide)	—	+16–17% ARR

Revenue CAGR: 5yr (FY20→25) ~44%; 3yr (FY22→25) ~35%. A textbook growth-decay curve: from 50–62% peak growth to ~24% now, guided to 16–17% next year.
ARR: $3.53B at Q3 FY2026 (+25% YoY; +21% ex-Red Canary). Net-new ARR $166M in the quarter (+14% ex-Red Canary). FY2026 ARR guided $3.74–3.75B.
The tension: Red Canary (acquired) is propping the headline. Organic net-new ARR growth (+14%) already sits close to the FY2027 guide — suggesting the deceleration is at least partly real, not purely conservatism.

Free cash flow — strong on paper, thin after stock comp

FY	Op. Cash Flow	FCF (reported)	FCF margin	SBC	SBC/rev	SBC-adj FCF	Adj margin
2021	$202M	~$144M	21%	$259M	38.4%	negative	—
2022	$322M	~$231M	21%	$410M	37.5%	negative	—
2023	$462M	~$334M	21%	$445M	27.5%	negative	—
2024	$780M	$635M	29.3%	$528M	24.3%	$108M	5.0%
2025	$973M	$808M	30.2%	$661M	24.7%	$147M	5.5%
TTM Q3'26	$1,101M	$963M	30.4%	$783M	24.7%	$181M	5.7%

Headline FCF is excellent: ~$960M TTM at a 30% margin, compounding ~50% over the last four years. This is the bull's anchor.
The honest read: stock-based comp consumes ~80% of reported FCF. True, SBC-adjusted FCF is only ~$181M (5.7% margin). The trend is improving (SBC fell from 38% → 25% of revenue, adj-FCF crossed positive in FY2024 and is rising), but this is the same pattern flagged on SNOW, TEAM, and FSLY — reported FCF flatters the picture.
FCF yield: ~3.9% reported / ~0.7% SBC-adjusted at $153.

Balance sheet — fortress

Metric	FY2025
Cash + ST investments	$3.57B
Total financial debt (0%-coupon converts)	~$1.80B
Net cash	~+$1.77B
Financial debt / assets	~28% (very manageable)
Deferred revenue (ST)	$2.05B (customers prepaying — a good liability, strong billings visibility)
Current ratio	2.01x (up from 1.09x)

Debt is 0%-coupon convertible notes — essentially free capital with dilution risk only at high conversion strikes. This is a clean, low-risk balance sheet.

Shares outstanding — persistent ~4%/yr dilution

152.5M (FY24) → 158.3M (FY25) → 161.7M (now). No buybacks. SBC steadily dilutes owners ~4%/yr. Founder-CEO Jay Chaudhry owns ~35% (strong alignment — but also the source of the SBC engine).

Profitability

Gross margin ~77% (78.0% → 76.9% → 76.7%) — slight compression as lower-margin Red Canary MDR services mix in. Still elite.
GAAP: still net-loss (–$41M FY25, –$77M TTM) entirely because of SBC.
Non-GAAP operating margin: record 23% in Q3 — the profitability story is genuinely improving even as growth slows (the classic mature-SaaS pivot from growth to margin).

2. Moat & Competitive Advantage

Moat rating: Real but under pressure (narrowing).

Quantitative base: GAAP ROIC is negative (operating losses from SBC), which understates the moat. The underlying economics — 77% gross margin, 30% reported FCF margin, capex only ~5–6% of revenue (asset-light cloud edge) — indicate a business that throws off real cash on modest invested capital. On a non-GAAP/cash basis, returns on capital are strongly positive.

Sources of moat: - Switching costs (primary): Zscaler sits inline on enterprise traffic — every user, every packet routed through the Zero Trust Exchange. Ripping it out means re-architecting corporate networking. Deeply embedded; sticky. - Efficient scale / cost advantage: 150+ global data centers, purpose-built cloud-native proxy architecture. A new entrant can't cheaply replicate the global edge. - Network effect (data): Massive daily traffic volume → superior threat intelligence → better detection → more customers. Weak-to-moderate but real. - Distribution: 40%+ of the Global 2000 already deployed.

Adversarial stress-test ("well-funded rival, how do you attack?"): - Microsoft (the real threat): Entra Internet Access / Global Secure Access is bundled into E5. Microsoft doesn't need to win on product — it needs "good enough SSE for free." This is the CTSH/DOCU-style bundling attack, and it is the single most credible cap on ZS's long-term growth and pricing. - Palo Alto Networks: Prisma SASE + aggressive platformization ("free for 12 months" consolidation deals). Direct overlap. - CrowdStrike: Falcon expanding from endpoint into network/SASE; the two increasingly collide. - Cloudflare, Netskope, Cisco: All contesting the SSE/SASE layer.

The stress test says: entering is hard (inline architecture + scale), but sustaining pricing power against a free Microsoft bundle is the vulnerability. The FY2027 deceleration is consistent with a market maturing and competition biting — not with a widening moat.

Disruption forecast (5–10 yr): AI is dual-edged. Bullish: AI expands the attack surface and agent-to-agent traffic needs zero-trust inspection (ZS's June 2026 agentic-AI security launch with AWS/Google Cloud/OpenAI targets exactly this). Bearish: agentic AI could commoditize commodity security layers, and platform consolidation compresses standalone point-product economics.

Evergreen assessment: Zero-trust as a category is evergreen — perimeter security is structurally dead, and inline cloud security is the successor. ZS as the independent leader is more contestable: the risk isn't the category disappearing, it's ZS's share/pricing eroding to bundlers. Durable business, contestable leadership.

3. Valuation

Applicable models: This is a non-dividend, (GAAP) unprofitable, negative-book-value growth SaaS name. Graham is N/A (√(22.5×EPS×BVPS) requires positive EPS and book value — ZS has neither; BVPS is −$7.70). DDM / DYT are N/A (no dividend). Valuation rests on EV/Sales vs. peers, FCF multiples (reported and SBC-adjusted), and a reverse-DCF / Bogle frame.

Multiple compression has already done a lot of work

Metric	At 52wk high (~$337)	Now ($153.45)
EV / Sales (TTM)	~15x	~7.2x
Price / Sales (TTM)	~16x	~7.8x
Forward P/E (non-GAAP)	~65x	~30x
P / FCF (reported)	~55x	~26x

The multiple has roughly halved. ZS is no longer priced for perfection — it's priced closer to its (now lower) growth rate.

Fair-value triangulation

EV/Sales peer frame: A 16–24% grower with 30% reported FCF margin and a real moat supports ~6–8x EV/S. On FY2026E revenue (~$3.33B): EV $20–27B → equity (+$1.8B net cash) $22–28B → $134–175/share.
Reported-FCF multiple: 25–30x on ~$1.0B FY2026E FCF → $25–30B → $155–186/share (generous — ignores SBC).
SBC-adjusted FCF (the bear anchor): ~$180–250M adj-FCF at even 40x → $7–10B → $45–62/share. The truth sits between the reported and adjusted frames; the market pays for the reported FCF trajectory but caps the multiple precisely because of dilution.
Bogle expected return: ~16–20% growth + modest margin expansion − ~4% dilution ± multiple change. If the multiple holds, ~12–16%/yr; if it compresses toward 5x EV/S, returns go negative.
Reverse-DCF: Today's ~$23B EV requires roughly sustained mid-teens FCF growth for a decade with terminal margins expanding — achievable if ARR holds ≥16%, but there is no margin of safety if growth breaks below 15%.

Fair-value range

Case	Range	Basis
Bear	$95–115	FY2027 growth breaks below 15%, Microsoft bundling accelerates, re-rates to ~5x EV/S on SBC-adj economics. (52wk low $114.62 sits here.)
Base	$130–175 (mid ~$150)	16–24% growth holds, 6–8x EV/S, margin expansion continues.
Bull	$200–230	16–17% proves a sandbag, ARR reaccelerates ≥18%, op margin → 27%+, multiple re-expands.

Current price $153.45 sits right at the base-case midpoint = fairly valued, not cheap. The +10% pop pushed it out of the more attractive zone.

4. Sentiment & Intelligence

Analyst consensus: Strong Buy — ~38 Buy / 9 Hold / 0 Sell. Median PT ~$195 (range $145–250), ~27% above spot. Post-crash, analysts cut targets but stayed constructive, citing still-strong net retention. Morgan Stanley upgraded to Overweight (PT $320); Needham reiterated Buy.
Insiders: Routine 10b5-1 program selling through June–July 2026 (CLO, CFO Kevin Rubin, CPO Adam Geller — small pre-planned lots). No insider buying to signal conviction at the lows — a mild negative, though founder Chaudhry's ~35% stake dwarfs the trims.
Management actions: $692M of M&A (Red Canary MDR + SPLX AI-security) pushing into security operations and AI. Aggressive AI-security roadmap (agentic-AI launch with hyperscaler + OpenAI partners). The credibility gap the market flagged: management touts an "AI tailwind" while guiding to a sharp deceleration — the two narratives are in tension.
The overhang: Two senior sales-leadership departures. Whether new leadership sandbagged the FY2027 guide (bullish setup) or is confronting real pipeline softness (bearish) is unresolved and is the swing factor.

5. Synthesis — Weighted Verdict

Is it a good business? Yes. Category-leading zero-trust franchise, deep switching-cost moat, ~$3.5B ARR, 30% reported FCF margin, fortress balance sheet, founder-aligned, improving non-GAAP margins. Quality is not in question.

Has the market priced it in? Largely. The ~55% drawdown and halving of the EV/S multiple removed the "priced for perfection" problem. At ~7x EV/S / 30x forward earnings, ZS is fair for a 16–24% grower — but not a bargain, and not cheap on SBC-adjusted economics (~0.7% adjusted FCF yield).

Named tensions (the debate round): - Fundamentals vs. Valuation: Reported FCF says "26x P/FCF, cheap-ish"; SBC-adjusted FCF says "~138x, expensive." Weight (high-growth SaaS lens): reported FCF earns the benefit of the doubt on trajectory, but the 4%/yr dilution is a permanent tax that correctly caps the multiple. Net: fairly valued. - Moat vs. Sentiment: Analysts remain Strong Buy on retention/moat; the FY2027 guide + Microsoft bundling say the moat's pricing power is eroding at the margin. Weight: the guide is the harder data point. Real deceleration, partially structural. - Bull sandbag vs. Bear structural: Genuinely unresolved. Organic net-new ARR (+14%) already near the FY2027 guide argues the deceleration is at least half real.

Conviction: [6.5] — WATCH. A quality compounder that has de-rated to a reasonable price, held back from higher conviction by decelerating growth, heavy SBC/dilution, the Microsoft-bundling threat, and no margin of safety on true economics. Not an avoid; not a chase.

Action

Do NOT chase today's +10% sentiment pop. At $153 it's mid-base-case fair value.
Entry zone: $120–140 (EV/S ~5.5–6.5x, where the risk/reward tilts favorable). Strong buy: <$120 (near the $114.62 52wk low — bear-case territory where you're paid for the deceleration risk).
Position sizing / portfolio fit: The cyber sleeve is already deep — held PANW, CRWD, QLYS, RBRK; watching CHKP, FFIV. ZS overlaps PANW thematically (platform/SASE) and correlates with the AI-software-disruption basket (CTSH, ACN, IT). This is concentration, not diversification — size modestly (≤2%) if initiating, and only in the entry zone.
Upgrade trigger (→7.5): FY2027 ARR reaccelerates ≥18% (16–17% proves a sandbag) and sales leadership stabilizes and net-new ARR growth resumes.
Thesis break / avoid: FY2027 ARR guides or prints below 15%, OR organic net-new ARR declines for 2 consecutive quarters (Microsoft bundling winning), OR non-GAAP operating-margin expansion stalls.
Watch next: Q4/FY2026 earnings (~early Sept 2026) — the first hard read on whether the FY2027 guide was conservative, and organic net-new ARR ex-Red Canary.

Data & Sources

Fundamentals/statements: roic.ai MCP (FY2024–25 + TTM/quarterly), Alpha Vantage income & cash-flow statements (FY2016–2025 history). Yahoo Finance MCP was not connected this session; roic.ai + Alpha Vantage + Public.com covered all data needs.
Valuation multiples: roic.ai, Alpha Vantage COMPANY_OVERVIEW (Beta 0.96, fwd P/E 30.3, 52wk $114.62–$336.99, insiders 35.0%, institutions 55.9%).
Qualitative/sentiment: Why ZS soared today (CISA advisory); Q3 FY2026 results; collapse over FY2027 outlook; sales shakeup / weak guidance; analyst targets / Red Canary.

Note: GAAP ROIC/EPS/book value are negative due to stock-based comp; standard Graham/DDM/DYT models are N/A and valuation leans on EV/S, FCF, and reverse-DCF, as flagged.