{
  "@context": "https://frontierpicks.com/schemas/dossier.v1.json",
  "ticker": "ZS",
  "name": "Zscaler, Inc.",
  "url": "https://frontierpicks.com/dossiers/ZS/",
  "json_url": "https://frontierpicks.com/dossiers/ZS.json",
  "status": "DORMANT",
  "current_conviction": "LOW",
  "graded_conviction": null,
  "archetype": {
    "code": "a5",
    "n": 5
  },
  "current_thesis": "Post-crash recovery leg is complete: the 2026-05-27 gap-down (~31.5% on a 16–17% FY27 growth frame) has been fully retraced to $181.75 (2026-08-21) with RSI 71.5, and six houses marked targets to $200–225 between 08-17 and 08-21 on no new disclosure. The 2026-09-03 Q4 print, carrying the first formal FY27 guide, is the binary and it is now being front-run.",
  "invalidation_trigger": "A weekly close below $165 unwinds the August advance that retraced the 2026-05-27 gap-down; secondarily, FY27 revenue growth formally guided at or below the 16–17% framed in May when the 2026-09-03 Q4 print lands.",
  "catalyst_date": "2026-09-03",
  "outcome": "OPEN",
  "outcome_date": null,
  "invalidation_fired": null,
  "themes": [
    "cybersecurity",
    "ai-datacenter-infrastructure"
  ],
  "tags": [],
  "sources": [],
  "notes": [
    "Fiscal year ends 31 July; the September print is the FY-end quarter and carries the first formal FY27 revenue and billings guidance.",
    "ARR reported from Q3 FY26 onward includes Red Canary, which contributed $127M of ARR — reported and organic growth rates diverge materially.",
    "Zscaler guides ARR as well as revenue; the FY26 ARR guide of $3.740-3.749B set on 2026-05-26 is the comparison for the Q4 ARR print.",
    "Event-day moves in this name have been outsized relative to the fundamental delta: 2026-05-27 fell about 31.5% after a quarter that beat on revenue."
  ],
  "body_markdown": "## Current Thesis\n\nThe leg being bought is still the **post-reset re-rating**: a zero-trust platform compounding ARR at 25% that was repriced as a decelerating asset on a single guidance line. On 2026-05-26 Zscaler reported Q3 FY26 revenue of $850.5M (+25% YoY) and ARR of $3,525M (+25% YoY) with non-GAAP operating margin at an all-time-high 23%, then framed FY27 revenue growth at 16–17% against a street modelling roughly 19–20%. Shares fell about 31.5% on 2026-05-27.\n\nWhat has changed since this name was last written on 2026-08-08 is the price and the sell-side band, not the disclosed fundamentals. The last completed daily close is $181.75 (2026-08-21), against $168.68 on 2026-08-07, and the three-month price change is -0.3% — price now trades where it traded immediately before the guidance that broke it. The gap-down has been retraced in full. RSI(14) is 71.5, up from 67.8 two weeks earlier.\n\nSix sell-side actions landed in five sessions: TD Cowen to $200 and Wells Fargo to $210 (2026-08-17), Stifel to $200 from $175, Mizuho to $210 from $185 and Cantor Fitzgerald reiterating $225 (2026-08-19), KeyBanc to $210 from $185 (2026-08-21). No company data was released between 2026-07-16 — when KeyBanc's own target was $185 — and 2026-08-21. The re-rating has been marked into the price ahead of the event that is supposed to justify it. The 2026-09-03 Q4 FY26 print, carrying the first formal FY27 guidance, remains the binary, and nothing before it resolves the question.\n\n## Bull Case\n\n- **The company's own Q4 bar is specific and checkable.** Guidance issued 2026-05-26: Q4 FY26 revenue $875–878M (+22% YoY), non-GAAP operating profit $206–208M, FY26 ARR $3.740–3.749B (+24% YoY), FY26 revenue $3.3295–3.3325B (+24.6–24.7%) and non-GAAP EPS $4.10–4.11. A Q4 ARR print above the $3.749B top end is the first hard number that would contradict the FY27 framing.\n- **ARR compounding held through the reset.** ARR $3,525M, +25% YoY, with $166M net new ARR in Q3 FY26 (release 2026-05-26). The multiple, not the growth print, did the damage in May.\n- **Margin structure improved into the sell-off.** Non-GAAP operating margin reached an all-time-high 23% in Q3 FY26.\n- **The bear premise was contradicted from outside the company.** On 2026-07-14 IBM stated publicly that enterprise AI spending is not crowding out Cybersecurity budgets; Cybersecurity ETFs rallied that session while IBM had its worst day ever. That is the argument that broke ZS in May, addressed by a third party six weeks later.\n- **A statutory demand channel opened in Europe.** The 2026-07-28 Schwarz Digits partnership targets European digital sovereignty and compliance under NIS2, DORA and the EU AI Act — demand driven by regulation rather than discretionary security budget.\n- **The sell-side band re-set upward before the print.** Targets of $200–225 from six houses between 2026-08-17 and 2026-08-21 sit above the 2026-08-21 close of $181.75, and above the $193.05 45-analyst average recorded on 2026-08-08.\n\n## Bear Case\n\n- **FY27 is the first sub-20% growth frame in the company's public life.** 16–17% against 19–20% expected (2026-05-26). Deceleration of that magnitude usually re-bases a multiple durably.\n- **Deceleration is already inside the guided quarter.** Q4 FY26 revenue guided at +22% YoY versus the +25% delivered in Q3 FY26 — the slope is in the company's own numbers before FY27 is even formally set.\n- **Cash generation was cut alongside growth.** The FY26 free-cash-flow margin outlook came down to 22.8–23.3% from 26.5–27%, with capex guided to high-single-digit percent of revenue (2026-05-27 coverage).\n- **Headline ARR growth is partly acquired.** Excluding Red Canary, which contributed $127M of ARR, Q3 FY26 ARR grew 21% to $3,398M and net new ARR grew 14%, versus the 25% and $166M headline figures.\n- **Execution risk is named by management.** Zscaler disclosed the loss of two sales leaders during the quarter; CFO Kevin Rubin described the guidance as a \"prudent approach\" amid the transitions (2026-05-26/27). Sales-force disruption typically shows in bookings one to two quarters later — which is the quarter being reported on 2026-09-03.\n- **A large growth holder is out.** Tiger Global Management sold its Zscaler holding, per 13F coverage dated 2026-08-14.\n- **Price has consumed the recovery before the catalyst.** With the 2026-05-27 gap fully retraced and RSI(14) at 71.5, an in-line print delivers no new information the tape has not already paid for.\n\n## Setup & Price Structure\n\n**The narrative is accelerating**, dated by the 2026-08-17 → 2026-08-21 cluster of six price-target actions and the completed round trip of the gap-down. The qualifier matters: what is accelerating is sell-side repositioning and momentum, on a disclosure set that has not changed since 2026-05-26. The only company communications since are the 2026-07-28 Schwarz Digits partnership and the 2026-08-06 announcement of the earnings date.\n\nMeasured levels and observables:\n\n- Last completed daily close $181.75 (2026-08-21); 52-week high $336.27; the close sits 46.0% below that high.\n- Three-month price change of -0.3% — flat over the window that contains a 31.5% single-day drop, so the entire 2026-05-27 decline has been recovered.\n- RSI(14) 71.5 (2026-08-21) versus 67.8 at the $168.68 close on 2026-08-07. Momentum has pushed into overbought while the fundamental record stood still.\n- The August base is anchored by the early-August trade around the $168.68 area (2026-08-07); the move above it is the leg that would be given back first.\n\n**Crowding and positioning observables** (stated as observables, not as a verdict):\n\n- Six analyst actions in five sessions, all raises or reiterations, all above spot: $200, $210, $200, $210, $225, $210 (2026-08-17 to 2026-08-21).\n- KeyBanc's target moved from $185 (2026-07-16) to $210 (2026-08-21), a raise of roughly 13.5% with no interim company disclosure.\n- Earnings 13 calendar days after the 2026-08-21 reference close, with the fiscal-year-end quarter and a full-year guide attached.\n- Tiger Global's exit reported 2026-08-14 — institutional distribution during the same window in which sell-side targets rose.\n- Retail-facing coverage has widened beyond the name itself: the 2026-08-05 Coldcard hack piece framed Cybersecurity ETFs as a trade, and a 2026-08-18 listicle framed agentic AI as a new Cybersecurity boom with named stocks to watch. Thematic listicles are a coverage datapoint, not a demand datapoint.\n\n## Catalyst Calendar (next 30 days)\n\n- **2026-09-03** — Q4 FY26 results after the close, conference call 1:30 p.m. Pacific (announced 2026-08-06). Carries the first formal FY27 revenue and billings guidance.\n- **2026-09-03** — FY27 free-cash-flow margin and capex framing on the same call, against the FY26 range cut to 22.8–23.3% from 26.5–27%.\n- **2026-09-03** — Fiscal-Q4 net new ARR, reported and ex-Red Canary, against $166M in Q3 FY26 and the FY26 ARR guide of $3.740–3.749B.\n- **2026-09-03** — Any update on the two vacated sales-leadership roles disclosed in Q3 FY26.\n- **~2026-09-04 (est.)** — Post-print revisions from the six houses that marked $200–225 into the tape between 2026-08-17 and 2026-08-21; the direction of those revisions puts a number on whether the August re-rating was anticipatory or premature.\n- **2026-09-18** — September standard monthly option expiry, the first after the print, when event-related hedges roll off.\n\n## What Would Change Our Mind\n\nThe structure that would break first is the August advance itself. Price retraced the whole 2026-05-27 gap before the guide that is meant to validate it, so the leg has no fundamental support underneath it other than the expectation of a beat-and-raise on 2026-09-03. **A weekly close below $165 unwinds that advance and returns the name to the July–August range it broke out of.** A close through that level before the print would say the anticipatory bid faded without the event; after the print it would say the guide failed to clear the bar the sell-side set at $200–225.\n\nThe fundamental break is separately gradeable on one line. If FY27 revenue growth is formally guided at or below the 16–17% framed on 2026-05-26, the May framing was the run-rate rather than a conservative reset, and the deceleration is structural. Two supporting numbers decide the same question: Q4 net new ARR below the $166M of Q3 FY26 in what is seasonally the strongest bookings quarter, and organic ex-Red Canary ARR growth below the 21% recorded in Q3 FY26.\n\nThe reverse case is equally specific. FY27 revenue growth guided above 17%, with Q4 ARR clearing the $3.749B top end of the FY26 guide and FCF margin framed back above the 23.3% ceiling, would restore the compounder frame and reopen the 46.0% distance to the $336.27 high as a mechanical target. Absent that, the setup into the print is a poor entry — the odds are already paid for, and 2026-09-03 is a two-sided event in a name that moved 31.5% in one session on guidance alone.\n\n## Correlation Notes\n\n- **SSE/cyber cohort beta is real but subordinate to event risk.** On 2026-05-27 ZS fell about 31.5% while the cohort did not; the name's dispersion around its own guidance dominates any read from PANW, CRWD, FTNT, NET or OKTA.\n- **Cohort-level headlines move the group together in the absence of company news.** On 2026-07-14 Cybersecurity ETFs rallied on IBM's statement that AI spend is not displacing security budgets, on IBM's worst-ever session. On 2026-08-05, coverage of the $130M Coldcard hack was framed as putting Cybersecurity ETFs on investors' radar.\n- **The competing-budget question is a sector variable, not a ZS variable.** It was the premise of the May de-rating and it resolves across the cohort's prints, not solely on 2026-09-03.\n- **High-multiple software rate sensitivity applies.** ZS carries no dividend and its valuation rests on out-year growth, so the name inherits the duration exposure of the growth-software complex independent of the zero-trust story.",
  "first_seen": "2026-07-28",
  "last_analyzed": "2026-08-22T10:19:42+00:00",
  "last_synthesized": "2026-08-22",
  "last_update_source": "watchlist_research",
  "license": "Content © FrontierPicks. Cite the canonical URL."
}