Zscaler (ZS)

Executive Summary & Action Plan

Verdict

HOLD (Accumulate on weakness) — The first name in our 18-company sweep whose fair value sits above the tape. The −31% May reset repriced the model, not the quarter: the print beat, the inline chokepoint is intact, and the FCF-margin cut is half fixable execution, half honest disclosure of AI-era inspection costs peers haven't admitted yet. The 9/8 formal FY27 guide is the arbitration date; the price already carries most of the bad news.

Price $139.27 | Market cap $22.5B | Target $149 | Upside +7.0% IWANNAVY Fair Value · price as of 2026-07-11 close · Street consensus $192.58 (reference; n=44, +38.3% — the largest positive consensus gap in the security trio) — we sit below Street because we expense SBC (24.9% of revenue) and price the cut margin guide, not the recovery

Abstract

Zscaler is the cheapest name in our AI value-chain sweep for a documented reason: on May 27 it cut FY26 FCF-margin guidance to 22.8–23.3% (from 26.5–27%) to fund datacenter compute for inline AI-traffic inspection, disclosed two senior sales departures, and floated a preliminary FY27 of 16–17% growth against ~19.5% consensus — the market's worst-ever ZS day (−31%) followed. The quarter itself beat on every line, and the deceleration is smaller than the headline: reported ARR growth of 25% was 21% organic, so 16–17% is a ~4–5pt step, not a cliff. What remains is a genuinely positional moat — 500B+ daily transactions inline across 160+ edge datacenters, switching costs at network-infrastructure level, and a live option on agentic-traffic mediation — priced at 23.3x forward FCF, uniquely below our warranted multiple (25x) in this sweep. Our $149 fair value is the log-median of an SBC-expensed DCF ($96), 25x forward FCF ($149), and growth-adjusted sales ($188). Rating: HOLD with an accumulation bias — add at $125/$115; the 9/8 formal guide is the binary.

Action Plan

The bar was reset at −31%; the recovery print needs the guide, not the quarter. Hold core; accumulate $125 and $115 (52-week-low zone); trim into the Street-gap zone $185+; trader stop $105.

• Risk/Reward 0.9:1 at market, ~2.9:1 from $115 | Prob-weighted 12M return +2.3% (Bull 25% × +35.0% + Base 50% × +7.0% + Bear 25% × −39.7%) | Confidence: Medium

---

Last Four Quarters

Fiscal quarters (FYE July). Revenue compounding steadily ($719M → $850M) on rock-stable 76–77% gross margin; GAAP operating margin pinned at −3.5% to −6.4% while non-GAAP OM hit a record 23% — the bridge is SBC at ~24.9% of revenue, the highest ratio in our security trio. FCF is fiercely seasonal (fiscal Q1 collections spike to 52%), so the 34.9% TTM margin flatters run-rate; the honest forward number is the cut ~23% guide.

GAP verification (−5.34% on the 7/10 session): pure sector sympathy (CRWD −5.7%, PANW −3.7%) with no company news — ZS trades as the group's weakest hand; the move followed a +22% six-day short-covering rebound into 7/7.

---

Revenue & Profit Mix

One subscription model; the mix that matters is ARR by pillar: the maturing core exchange (~60–65% (E)) funds three growth vectors — Data Security (>$500M, +30%+), Zero Trust Everywhere/Branch (~tripled YoY), and SecOps/agentic-AI (Red Canary + AI Protect). FY26 Q3 per the 5/26 release.

---

Business Lines

• Core Zero Trust Exchange (~60–65% of ARR (E)): Inline proxy for users-to-apps across 160+ edge DCs. Must know — the maturing engine, and exactly the seat Microsoft's restructured $60 E5 bundle (live 7/1) attacks at renewal; core growth is likely mid-teens, so everything above 16–17% must come from the newer vectors.
• Data Security (>$500M ARR, +30%+): Inline DLP/CASB/DSPM. Must know — the largest and fastest emerging line, and the most bundle-resistant because inline DLP quality is hard to replicate.
• Zero Trust Everywhere / Branch (~10–12% (E)): >700 enterprises (from >550 QoQ); Branch ARR ~tripled. Must know — the direct collision with PANW/FTNT hardware refresh, and the pillar management leans on for FY27 re-acceleration; Z-Flex (>$480M TCV/qtr) is the contracting vehicle — watch the ARR-vs-TCV gap as the quality tell.
• SecOps & agentic-AI security (Red Canary + AI Protect/Risk360/AI Broker): Must know — this is where the disputed capex goes: AI-threat-monitoring compute built ahead of monetization. The swing factor on whether the margin cut was investment or permanent cost-curve reset — and Microsoft's Entra Agent ID (GA 5/1) is racing for the same agent-policy layer.

---

IWANNAVY Fair Value

Log-median lands at $149 — the only fresh workup in this sweep above spot. The honest caveats cut both ways: the 18.8x TTM screen flatters (forward is 23.3x on the cut guide), and SBC-adjusted owner earnings are ~breakeven today — the DCF's value sits in the margin recovery, not current cash. But uniquely here, spot sits below the warranted multiple rather than multiples above it.

• Thesis breaker (toward SELL): a 9/8 formal guide below 16% or FY27 FCF margin guided under ~22% — confirms the second leg down and retests $114.63; also if agent-policy defaults to Entra/Agent 365, the TAM-extension option dies. (toward BUY): guide ≥17% with a stated path back to mid-20s% FCF margin and named sales backfills — the prelim proves sandbagged and the +38% Street gap closes.

---

Catalysts & Risks

---

References

• Zscaler FQ3'26 results — beat + FY26 FCF-margin cut + prelim FY27 (IR/GlobeNewswire, 2026-05-26) · FQ3'26 10-Q (SEC) — SBC $610.3M 9M · CNBC — tanks 31%, worst day ever (2026-05-27)
• Ross Tackett named Head of Worldwide Sales (2026-06-24) · Trefis — +22% six-day short-covering streak (2026-07-07) · Zenith Live 2026 — agentic-AI security roadmap (2026-06-08)