ZS · Zscaler, Inc. · Stock research

Current Thesis

The leg being bought is still the post-reset re-rating: a zero-trust platform compounding ARR at 25% that was repriced as a decelerating asset on a single guidance line. On 2026-05-26 Zscaler reported Q3 FY26 revenue of $850.5M (+25% YoY) and ARR of $3,525M (+25% YoY) with non-GAAP operating margin at an all-time-high 23%, then framed FY27 revenue growth at 16–17% against a street modelling roughly 19–20%. Shares fell about 31.5% on 2026-05-27.

What has changed since this name was last written on 2026-08-08 is the price and the sell-side band, not the disclosed fundamentals. The last completed daily close is $181.75 (2026-08-21), against $168.68 on 2026-08-07, and the three-month price change is -0.3% — price now trades where it traded immediately before the guidance that broke it. The gap-down has been retraced in full. RSI(14) is 71.5, up from 67.8 two weeks earlier.

Six sell-side actions landed in five sessions: TD Cowen to $200 and Wells Fargo to $210 (2026-08-17), Stifel to $200 from $175, Mizuho to $210 from $185 and Cantor Fitzgerald reiterating $225 (2026-08-19), KeyBanc to $210 from $185 (2026-08-21). No company data was released between 2026-07-16 — when KeyBanc's own target was $185 — and 2026-08-21. The re-rating has been marked into the price ahead of the event that is supposed to justify it. The 2026-09-03 Q4 FY26 print, carrying the first formal FY27 guidance, remains the binary, and nothing before it resolves the question.

Bullish and bearish views on Zscaler, Inc.

The model's bull view on Zscaler, Inc. (ZS), in brief: The company's own Q4 bar is specific and checkable. The bear view: FY27 is the first sub-20% growth frame in the company's public life. Both cases follow in full.

Bull Case

• The company's own Q4 bar is specific and checkable. Guidance issued 2026-05-26: Q4 FY26 revenue $875–878M (+22% YoY), non-GAAP operating profit $206–208M, FY26 ARR $3.740–3.749B (+24% YoY), FY26 revenue $3.3295–3.3325B (+24.6–24.7%) and non-GAAP EPS $4.10–4.11. A Q4 ARR print above the $3.749B top end is the first hard number that would contradict the FY27 framing.
• ARR compounding held through the reset. ARR $3,525M, +25% YoY, with $166M net new ARR in Q3 FY26 (release 2026-05-26). The multiple, not the growth print, did the damage in May.
• Margin structure improved into the sell-off. Non-GAAP operating margin reached an all-time-high 23% in Q3 FY26.
• The bear premise was contradicted from outside the company. On 2026-07-14 IBM stated publicly that enterprise AI spending is not crowding out Cybersecurity budgets; Cybersecurity ETFs rallied that session while IBM had its worst day ever. That is the argument that broke ZS in May, addressed by a third party six weeks later.
• A statutory demand channel opened in Europe. The 2026-07-28 Schwarz Digits partnership targets European digital sovereignty and compliance under NIS2, DORA and the EU AI Act — demand driven by regulation rather than discretionary security budget.
• The sell-side band re-set upward before the print. Targets of $200–225 from six houses between 2026-08-17 and 2026-08-21 sit above the 2026-08-21 close of $181.75, and above the $193.05 45-analyst average recorded on 2026-08-08.

Bear Case

• FY27 is the first sub-20% growth frame in the company's public life. 16–17% against 19–20% expected (2026-05-26). Deceleration of that magnitude usually re-bases a multiple durably.
• Deceleration is already inside the guided quarter. Q4 FY26 revenue guided at +22% YoY versus the +25% delivered in Q3 FY26 — the slope is in the company's own numbers before FY27 is even formally set.
• Cash generation was cut alongside growth. The FY26 free-cash-flow margin outlook came down to 22.8–23.3% from 26.5–27%, with capex guided to high-single-digit percent of revenue (2026-05-27 coverage).
• Headline ARR growth is partly acquired. Excluding Red Canary, which contributed $127M of ARR, Q3 FY26 ARR grew 21% to $3,398M and net new ARR grew 14%, versus the 25% and $166M headline figures.
• Execution risk is named by management. Zscaler disclosed the loss of two sales leaders during the quarter; CFO Kevin Rubin described the guidance as a "prudent approach" amid the transitions (2026-05-26/27). Sales-force disruption typically shows in bookings one to two quarters later — which is the quarter being reported on 2026-09-03.
• A large growth holder is out. Tiger Global Management sold its Zscaler holding, per 13F coverage dated 2026-08-14.
• Price has consumed the recovery before the catalyst. With the 2026-05-27 gap fully retraced and RSI(14) at 71.5, an in-line print delivers no new information the tape has not already paid for.

Setup & Price Structure

The narrative is accelerating, dated by the 2026-08-17 → 2026-08-21 cluster of six price-target actions and the completed round trip of the gap-down. The qualifier matters: what is accelerating is sell-side repositioning and momentum, on a disclosure set that has not changed since 2026-05-26. The only company communications since are the 2026-07-28 Schwarz Digits partnership and the 2026-08-06 announcement of the earnings date.

Measured levels and observables:

• Last completed daily close $181.75 (2026-08-21); 52-week high $336.27; the close sits 46.0% below that high.
• Three-month price change of -0.3% — flat over the window that contains a 31.5% single-day drop, so the entire 2026-05-27 decline has been recovered.
• RSI(14) 71.5 (2026-08-21) versus 67.8 at the $168.68 close on 2026-08-07. Momentum has pushed into overbought while the fundamental record stood still.
• The August base is anchored by the early-August trade around the $168.68 area (2026-08-07); the move above it is the leg that would be given back first.

Crowding and positioning observables (stated as observables, not as a verdict):

• Six analyst actions in five sessions, all raises or reiterations, all above spot: $200, $210, $200, $210, $225, $210 (2026-08-17 to 2026-08-21).
• KeyBanc's target moved from $185 (2026-07-16) to $210 (2026-08-21), a raise of roughly 13.5% with no interim company disclosure.
• Earnings 13 calendar days after the 2026-08-21 reference close, with the fiscal-year-end quarter and a full-year guide attached.
• Tiger Global's exit reported 2026-08-14 — institutional distribution during the same window in which sell-side targets rose.
• Retail-facing coverage has widened beyond the name itself: the 2026-08-05 Coldcard hack piece framed Cybersecurity ETFs as a trade, and a 2026-08-18 listicle framed agentic AI as a new Cybersecurity boom with named stocks to watch. Thematic listicles are a coverage datapoint, not a demand datapoint.

Catalyst Calendar (next 30 days)

• 2026-09-03 — Q4 FY26 results after the close, conference call 1:30 p.m. Pacific (announced 2026-08-06). Carries the first formal FY27 revenue and billings guidance.
• 2026-09-03 — FY27 free-cash-flow margin and capex framing on the same call, against the FY26 range cut to 22.8–23.3% from 26.5–27%.
• 2026-09-03 — Fiscal-Q4 net new ARR, reported and ex-Red Canary, against $166M in Q3 FY26 and the FY26 ARR guide of $3.740–3.749B.
• 2026-09-03 — Any update on the two vacated sales-leadership roles disclosed in Q3 FY26.
• ~2026-09-04 (est.) — Post-print revisions from the six houses that marked $200–225 into the tape between 2026-08-17 and 2026-08-21; the direction of those revisions puts a number on whether the August re-rating was anticipatory or premature.
• 2026-09-18 — September standard monthly option expiry, the first after the print, when event-related hedges roll off.

What Would Change Our Mind

The structure that would break first is the August advance itself. Price retraced the whole 2026-05-27 gap before the guide that is meant to validate it, so the leg has no fundamental support underneath it other than the expectation of a beat-and-raise on 2026-09-03. A weekly close below $165 unwinds that advance and returns the name to the July–August range it broke out of. A close through that level before the print would say the anticipatory bid faded without the event; after the print it would say the guide failed to clear the bar the sell-side set at $200–225.

The fundamental break is separately gradeable on one line. If FY27 revenue growth is formally guided at or below the 16–17% framed on 2026-05-26, the May framing was the run-rate rather than a conservative reset, and the deceleration is structural. Two supporting numbers decide the same question: Q4 net new ARR below the $166M of Q3 FY26 in what is seasonally the strongest bookings quarter, and organic ex-Red Canary ARR growth below the 21% recorded in Q3 FY26.

The reverse case is equally specific. FY27 revenue growth guided above 17%, with Q4 ARR clearing the $3.749B top end of the FY26 guide and FCF margin framed back above the 23.3% ceiling, would restore the compounder frame and reopen the 46.0% distance to the $336.27 high as a mechanical target. Absent that, the setup into the print is a poor entry — the odds are already paid for, and 2026-09-03 is a two-sided event in a name that moved 31.5% in one session on guidance alone.

Correlation Notes

• SSE/cyber cohort beta is real but subordinate to event risk. On 2026-05-27 ZS fell about 31.5% while the cohort did not; the name's dispersion around its own guidance dominates any read from PANW, CRWD, FTNT, NET or OKTA.
• Cohort-level headlines move the group together in the absence of company news. On 2026-07-14 Cybersecurity ETFs rallied on IBM's statement that AI spend is not displacing security budgets, on IBM's worst-ever session. On 2026-08-05, coverage of the $130M Coldcard hack was framed as putting Cybersecurity ETFs on investors' radar.
• The competing-budget question is a sector variable, not a ZS variable. It was the premise of the May de-rating and it resolves across the cohort's prints, not solely on 2026-09-03.
• High-multiple software rate sensitivity applies. ZS carries no dividend and its valuation rests on out-year growth, so the name inherits the duration exposure of the growth-software complex independent of the zero-trust story.