In partnership with
The Bottom Line Upfront 💡
Zscaler $ZS ( ▲ 1.38% ) dominates cloud-native cybersecurity with a brilliant Zero Trust platform that's growing 23% annually and generating 27% free cash flow margins. However, at current valuations near $147, much of the growth story is already priced in, making this a quality company that's fairly valued to slightly overvalued.
Sponsorship
Speak naturally. Send without fixing.
Wispr Flow turns your voice into clean, professional text you can send the moment you stop talking. Not rough transcription you have to clean up. Actual polished text - ready for email, Slack, or any app.
Reid Hoffman sends 89% of his messages with zero edits using Flow. Millions of people worldwide have made it part of how they work, including teams at OpenAI, Vercel, and Clay.
Speak the way you think. Go on tangents. Change your mind mid-sentence. Flow strips the filler, fixes the grammar, and gives you text that reads like you spent five minutes writing it.
Works on Mac, Windows, iPhone, and now Android - free and unlimited on Android during launch.
Strata Layers Chart
Layer 1: The Business Model 🏛️
Think of Zscaler as the bouncer for the internet age. Back in the day, companies built digital fortresses with firewalls and VPNs—basically saying "everyone inside the castle is trustworthy, everyone outside is suspicious." Zscaler looked at this approach in 2007 and said, "That's adorable, but what happens when the bad guys are already inside?"
What They Actually Do: Zscaler runs a massive cloud-based security platform that sits between users and the internet, inspecting every single digital interaction. Instead of trusting anyone by default (the old "castle and moat" approach), they assume everyone is potentially sketchy until proven otherwise. It's called "Zero Trust," and it's like having a really paranoid but effective security guard who checks everyone's ID, even the CEO.
The Money Machine: This is pure SaaS gold—98% of revenue comes from subscriptions where customers pay annually (or longer) for continuous access to their security platform. No hardware to ship, no software to install. Just pure, scalable, recurring revenue that makes CFOs weep tears of joy. ↗️
Who Buys This Stuff: Big companies that have finally realized their old security setup is about as effective as a screen door on a submarine. We're talking 40% of the Forbes Global 2000 and 45% of Fortune 500 companies. These aren't small fish—these are enterprises that process millions of transactions and can't afford to have their data stolen by some teenager in a hoodie.
The Platform: Their Zero Trust Exchange processes over 500 billion requests daily (that's roughly 67 requests for every person on Earth, every single day) and blocks 225 million threats. It's distributed across 160+ data centers globally, so whether you're in Tokyo or Toledo, your internet traffic gets the same level of protection.
Key Success Metrics:
Dollar-based Net Retention: 114% (customers spend more each year) ↘️
Customer Growth: 9,400+ customers (up from 8,650 last year) ↗️
Free Cash Flow Margin: 27% (they're printing money) ↗️
Key Takeaway: Zscaler built the security infrastructure for the cloud-first world, and they're getting paid handsomely for being early to the party.
Layer 2: Category Position 🏆
Zscaler is basically the cool kid who showed up to the cybersecurity party with a completely different approach while everyone else was still arguing about whose firewall was bigger.
The Competition Landscape: They're fighting on multiple fronts against legacy giants like Cisco, Palo Alto Networks, and Fortinet (the "old guard" with their hardware-heavy approaches), plus newer cloud-native players and point solution providers. The difference? Most competitors are trying to retrofit old security models for the cloud age, while Zscaler was born in the cloud.
Market Position: They're the clear leader in the "Secure Access Service Edge" (SASE) category—basically the fancy name for cloud-delivered network security. Think of them as the Tesla of cybersecurity: they didn't invent security, but they reimagined how it should work in a mobile, cloud-first world.
Recent Wins:
Snagged Red Canary for $675M in August 2025 to beef up their managed detection capabilities
Growing internationally (49% of revenue from outside the US) ↗️
Platform expansion beyond core security into AI protection and IT operations
The Moat: Network effects are real here. Every new customer makes the platform smarter because threats detected for one customer get blocked for everyone else within minutes. It's like having a security team that learns from every attack across 9,400+ companies simultaneously.
Challenges: The big boys aren't sitting still. Microsoft, Amazon, and Google are all muscling into this space with their own cloud security offerings, and they have deeper pockets and existing customer relationships.
Key Takeaway: Zscaler owns the high ground in cloud-native security, but the battle for market share is just heating up as tech giants wake up to the opportunity.
Layer 3: Show Me The Money! 📈
Revenue Breakdown: This is a beautifully simple business model that would make a SaaS investor swoon:
98% subscription revenue (the good stuff that keeps coming back) ↗️
88% through channel partners vs 12% direct sales
Geographic split: 51% US, 30% EMEA, 16% Asia Pacific, 3% other
The Growth Story: Revenue has been on a tear, growing from $1.6B in fiscal 2023 to $2.7B in fiscal 2025—that's a 29% compound annual growth rate. ↗️ However, growth is decelerating (from 34% to 23%), which is normal for a company this size but something to watch.
Margin Magic: Here's where it gets interesting:
Gross margins: Steady at 77-78% (cloud economics are beautiful)
Operating margins: Still negative at -5% GAAP, but 22% on a non-GAAP basis ↗️
Free cash flow margins: A healthy 27%, showing they can convert revenue to actual cash
The Cost Structure:
Sales & Marketing: 47% of revenue (they're spending big to grow) ↗️
R&D: 25% of revenue (innovation isn't cheap) ↗️
Stock-based compensation: 25% of revenue (Silicon Valley math at work)
Customer Economics: The 114% net retention rate means existing customers are spending 14% more each year on average. ↘️ That's down from 116%, which isn't panic-worthy but worth monitoring.
Cash Position: They're sitting on $3.6B in cash and investments after issuing $1.7B in convertible notes. That's enough runway to fund growth and acquisitions for years.
Key Takeaway: Strong revenue growth with improving profitability metrics, though growth is naturally decelerating as the company scales—classic SaaS maturation pattern.
Layer 4: Long-Term Valuation (DCF Model) 💰
The Verdict: Fairly Valued to Slightly Overvalued
Scenario | Fair Value | vs Current Price (~$147) |
|---|---|---|
Conservative | $90 | -39% |
Optimistic | $156 | +6% |
Key Assumptions Driving the Valuation:
Revenue growth decelerating from 20% to 7% over 5 years (natural maturation)
Free cash flow margins improving from 27% to 32-36% as they scale
Terminal growth rate of 2.5-3.5% (cybersecurity isn't going anywhere)
Recommendation: HOLD - The stock is trading near the upper end of fair value. Unless you believe they can significantly exceed growth expectations or expand margins faster than expected, there's limited upside at current levels.
Layer 5: What Do We Have to Believe? 📚
Bull Case 🚀
Zero Trust becomes the standard: Every enterprise eventually abandons legacy firewalls for cloud-native security, and Zscaler maintains its leadership position
Platform expansion pays off: Their move into AI security, data protection, and IT operations creates new revenue streams and increases customer stickiness
International growth accelerates: The 49% international revenue mix has room to grow as global cloud adoption continues
Bear Case 🐻
Big Tech competition intensifies: Microsoft, Amazon, and Google bundle security into their cloud platforms, making standalone solutions less attractive
Growth deceleration accelerates: The cybersecurity market matures faster than expected, and customer acquisition becomes more expensive
Margin compression: Increased competition forces pricing pressure, or integration of recent acquisitions proves more costly than expected
The Bottom Line: Zscaler built the right product at the right time and executed brilliantly. They're the clear leader in a growing market with strong competitive moats. However, at current valuations, much of the good news is already priced in. This is a quality company that might be a better buy on any meaningful dip.
What to Watch 👀
Key Metrics to Monitor:
Net retention rate: If this drops below 110%, it signals customer expansion is slowing
New customer additions: Watch for deceleration in the 9,400+ customer base growth
International revenue mix: Should trend toward 55%+ over time for continued growth
Free cash flow margins: Need to see progression toward 30%+ to justify current valuation
Upcoming Catalysts:
Red Canary integration: Success here could unlock new market opportunities in managed detection and response
AI security adoption: Early mover advantage in protecting AI workloads could drive premium pricing
Quarterly earnings: Watch for commentary on deal sizes and sales cycle lengths as economic conditions evolve
Competitive Developments:
Microsoft's security bundling strategy: Could pressure standalone security vendors
Cloud provider security offerings: AWS, Google Cloud, and Azure security capabilities
New Zero Trust entrants: Watch for well-funded startups or acquisitions by tech giants
The cybersecurity space is hot, Zscaler is well-positioned, but at these prices, you're paying for perfection. Proceed accordingly! 🛡️
AI-written, human-approved
Disclaimer: This guide is for informational purposes only and does not constitute financial advice, investment recommendations, or an offer or solicitation to buy or sell any securities. The information contained in this report has been obtained from sources believed to be reliable, but StrataFinance does not guarantee its accuracy, completeness, or timeliness.