Target
$229.92 → $229.16
Current stock research snapshot · 7/22/26 35 days old
ZSZscaler, Inc.
Investment conviction●●○○○2 of 5 · current snapshot
Research target$229.16Current stock price target
Investment thesis statusSTRENGTHENEDLast reviewed 7/22/26
Market cap$24.05BSnapshot value · 7/22/26
Research history
See all ZS changes ↗What changed
Zscaler invented the zero-trust SASE category and remains the pure-play leader with ZIA (Internet Access) and ZPA (Private Access). As enterprises eliminate legacy VPNs and adopt zero-trust network access, Zscaler's cloud-native architecture is the default replacement. The shift from appliance-based security to cloud-delivered security is secular.
Zscaler for Users + Zscaler for Workloads ~3x ARPU expansion opportunity in existing accounts Federal zero-trust mandates pushing government agencies to SASE Q4 FY26 earnings — billings and guidance inflection
Thesis breaks if TLS 1.4+ makes inline decryption impossible/restricted, PANW+Netskope converge on unified SSE with bundling discounts, Microsoft ships full inline SSE in E5 free, or GAAP profitability misses FY2027. (vault 2026-08)
Bullish — Double bottom near 190 neckline/200W EMA; first breakout attempt at 190 rejected but +60% from lows without major correction; long-term target +400; buy zone 170-182. [X search Aug 2026]
Snapshot · 7/22/26🟢 Lean-Bull · ins-$4.6M · 13F 21+/3-×0.5 · short↑0.22
Snapshot · 7/22/26Timestamped research update
Deep research update
476 words · Updated Aug 2, 2026 · 1 source
Research in development: this latest 476-word update is published for context while it is expanded toward the 1,000-word editorial standard.
Zscaler operates the world's largest cloud-native Zero Trust security platform (Zscaler Zero Trust Exchange). Core products: Zscaler Internet Access (ZIA) for secure web/SaaS access, and Zscaler Private Access (ZPA) for secure application access without VPN. Delivered via 150+ global data centers processing 400B+ daily transactions. 100% subscription SaaS model.
TTM revenue ~$2.45B (+24% YoY), 9,400+ enterprise customers, 77% GAAP gross margin, $2.48B deferred revenue providing 12-18 month visibility. Strong cash generation ($1.95B operating cash flow in 9 months) despite GAAP losses from SBC. Source: Q3 FY2026 10-Q filed 2026-05-26, CIK 0001713683.
Zscaler is the "operating system for enterprise security" — every user, device, and application connection flows through Zscaler's cloud. As enterprises retire VPNs and on-premise firewalls in favor of Zero Trust architectures, Zscaler's inline proxy becomes the single chokepoint for all enterprise traffic inspection. This is an architectural transition with 10+ years of runway (only ~25% of enterprises have fully adopted Zero Trust).
- $2.48B deferred revenue = ~1x annual revenue visibility into future periods (Q3 FY2026 10-Q)
- 150+ global data centers create a latency/performance moat that a smaller competitor needs $1B+ capex to match
- FedRAMP High + DoD IL5 certifications = 12-18 month regulatory barrier protecting government segment
- 200+ patents covering cloud SSL decryption, AI threat detection, multi-tenant proxy architecture
- Operating cash flow $1.95B in 9 months despite GAAP loss — cash collection precedes revenue recognition
- 9,400+ customers with dollar-based net retention historically 115%+ — expanding within existing base
Platform switching cost of $1.05M-$2.5M per large enterprise (1.0x-2.5x annual spend, 12-24 months). Network-effect data moat: 400B+ daily transactions train the AI — no competitor can replicate without equivalent deployment footprint. Architectural lock-in: inline proxy requires complete traffic re-routing, not just API integration.
- Architecture obsolescence: if TLS protocol changes make inline decryption infeasible, Zscaler's core advantage disappears
- Competitive convergence: PANW Prisma Access + Netskope may offer a combined SSE that matches Zscaler's capabilities with bundling discounts
- Hyperscaler bundling: Microsoft Entra SSE bundled into E5 at zero incremental cost
- GAAP profitability timeline: if SBC-adjusted profits don't convert to GAAP by FY2027, multiple compression risk
- Net retention compression: if dollar-based net retention falls below 110%, the expansion flywheel is stalling
- Current dollar-based net retention rate (historically 115%+) — Q3 FY2026 figure not confirmed from earnings call
- What is Netskope's ARR growth rate vs Zscaler's — market share dynamics?
- GAAP profitability crossover timeline (likely FY2027-FY2028)
- Convertible note refinancing plan for $1.7B maturing 2027
- Platform adoption rate (% of customers using both ZIA + ZPA vs single product)
INTACT — The Zero Trust architecture transition has 10+ years of runway. Zscaler's inline proxy architecture, 400B+ transaction/day data moat, and $2.48B deferred revenue base create durable switching costs. The primary risk is competitive convergence, not demand destruction.
Primary and supporting material
Sources
1 source preserved from the latest qualified research update.