Zscaler Inc. (ZS)

Rating: HOLD

HOLD (5-tier) · quality defensive · conviction: low

EPS basis for the forward P/E and all scenario multiples: consensus forward EPS (broker-adjusted, non-GAAP).

Methodology: Valuation triangulated across five independent anchors — Monte Carlo (Student-t + regime switching), an independent DCF, peer re-rating, a sum-of-parts, and a scenario-weighted PWEV. Figures reconciled to Alpha Vantage 2026-04-20. Each chart below sits with the part of the thesis it evidences.

General research for a skeptical institutional reader. Not personalised investment advice; no position sizing or trade instructions. Figures as of the analysis date; verify before acting.

Investment Committee Summary

📎 Download the full model (Excel) — DCF line items, scenarios, sensitivity, assumptions, and extended fundamentals.

Rating Bridge

Rating = HOLD because:

• Probability-weighted scenario value implies +3% vs spot
• Monte Carlo median implies -21% vs spot
• DCF fair value implies -7% vs spot — but this is terminal-value sensitive (exit-multiple $139 vs Gordon $103, 26% apart), so it carries less weight
• Bear case (Structural Impairment) downside is -43% vs spot
• Net: reward/risk of 0.2× is not asymmetric enough for a Buy and not impaired enough for a Sell — hence Hold.

Investment Thesis

At roughly $141 (8 July 2026) Zscaler trades near 37x forward earnings and about 7.6x EV/revenue, a marked discount to the security-growth peer median (65x forward, 17x EV/revenue). The probability-weighted engine value of about $155 sits only 3% above spot, and the independent DCF anchor lands at $155 on a 9.5% WACC and 22x terminal, so the valuation is not stretched on its own metrics. The debate is durability of net-new ARR. Zscaler pioneered cloud-delivered secure internet and private access, holds genuine switching costs once traffic routes through its edge, and net cash of about $1.8 billion funds the build. The house sits modestly below consensus on both revenue and earnings, reflecting caution on the pace of SASE consolidation. Variance decomposition attributes roughly 95% of outcome dispersion to the multiple, which is the core risk: the fundamentals can hold while the multiple compresses if growth decelerates. This is a quality zero-trust franchise priced closer to fair value than to a bargain, with a wide two-sided distribution around the base case.

The dashboard below is the whole argument on one page: spot ($150) against each valuation anchor, the scenario tree, technicals and the options-implied move.

Anti-Thesis (The Real Bear Case)

The bear case is that Zscaler's early lead in cloud proxy and ZTNA is being absorbed into broader SASE platforms. Palo Alto bundles Prisma Access, Microsoft folds zero-trust access into E5, and Cato and others compress the point-product premium. If net-new ARR keeps decelerating and dollar-based net retention drifts below 110%, revenue growth settles in the high-single digits while stock-based compensation of roughly 22% of revenue keeps GAAP losses live and FCF-minus-SBC near zero. A de-rate toward 26x on that slower earnings base produces a price near $85, below the 52-week low of $115. The mechanism is bundling and saturation meeting a multiple that still assumes durable mid-teens growth.

Key Debate

P/E Multiple explains 93% of Monte Carlo outcome variance — i.e. value is set by the multiple the market will pay, a rate/sentiment regime bet as much as an earnings bet.

Scenario Analysis

The tree runs from a structural 'Structural Impairment' downside ($85) to a 'Bull — Platform Winner' bull case ($260); the probability-weighted blend (PWEV $153) is +3% versus spot.

SBC charge: scenario targets are gross per-share prices; the PWEV is reduced by one year of stock-based-compensation dilution (3.5% of shares, on SBC ≈ 25% of revenue), trimming the gross PWEV of $159 to $153 (-3.4%). SBC is charged once, as dilution — never also deducted from FCF.

Scenario rationale — what each probability buys (the driver path behind every target):

• Structural Impairment (20%, $85). Structural impairment: SASE bundling by Palo Alto and Microsoft caps net-new ARR, growth decays toward high-single digits and the multiple de-rates. Target $85 sits below the 52-week low ($115) by construction. Drivers — implied_target: 85; probability: 0.2.
• Recession Overlay (10%, $115). Cyclical: an enterprise-IT spending pause slows seat and module expansion for 1-2 years before normalising; growth low-double-digits, multiple compressed. Drivers — implied_target: 115; probability: 0.1.
• Base — In-Line (35%, $155). Mid-cycle: mid-teens ARR growth on continued VPN/firewall displacement and steady dollar-based net retention; operating margin holds near the low-20s. Drivers — implied_target: 155; probability: 0.35.
• Sentiment Recovery (25%, $200). Upside: SSE consolidation and emerging-product attach re-accelerate growth and the market re-rates the multiple toward the security-growth cohort. Drivers — implied_target: 200; probability: 0.25.
• Bull — Platform Winner (10%, $260). Upside tail: Zscaler becomes the default zero-trust platform of record, data-security and AI pillars scale, and both earnings and the multiple expand. Drivers — implied_target: 260; probability: 0.1.

Valuation Triangulation

Five anchors — but read them with their basis in mind. The Monte Carlo, the DCF terminal, and the peer re-rate all key off a market multiple, so they are not fully independent; only the discounted cash flows themselves are genuinely multiple-free. The discipline is to read the spread and weight the cash-based view, not to treat five numbers as five independent votes.

Peer EV/Revenue re-rate — 0% weight: it duplicates the peer-multiple information already carried by the Peer P/E anchor while ignoring margin mix; weighting both would double-count the peer view. Shown as a cross-check.

sum-of-parts, peer P/E re-rate excluded from the weighted blend — diverges >55% from the Monte-Carlo / scenario core. For a high-leverage equity the per-share DCF (enterprise value less large net debt) is hypersensitive to the terminal multiple; a peer re-rate across heterogeneous margins is apples-to-oranges. Shown above for reference; the blend leans on the multiple-discipline and scenario anchors.

Monte Carlo — the distribution, not a point

10,000 paths, Student-t shocks (fat tails) with a regime-switching overlay. The median lands at $118 and 30% of paths finish above spot. The variance decomposition shows the p/e multiple is the dominant swing factor (93% of variance). Value is a multiple bet: fundamentals move the answer far less than the rating does.

DCF — the cash-flow anchor

Independent of the market multiple: a 5-year path, WACC 9.5%, 22x terminal FCF multiple → $139. This anchor is deliberately the heaviest (35%): it is the valuation least hostage to the current multiple regime.

Peer benchmarking — relative value

Against the peer cohort, re-rating to the peer-median forward multiple (P/E 65.5x) implies $262. A premium is only justified by superior growth/margins; otherwise it is multiple risk. Weighted just 10% so the market's mood does not drive the fair value.

Sum-of-parts

Valuing each piece at the multiple it deserves (ZIA (Secure Internet / SWG) 36x, ZPA (Zero Trust / ZTNA) 36x, Emerging + Services 36x) → $740. 'ZIA (Secure Internet / SWG)' dominates at 36× → $67B (56% of EV) — the segment whose multiple matters most.

Across all anchors the spread is 237% of the median — wide (genuine disagreement — the blend carries low valuation confidence).

Revenue-Segment Breakdown

The company-specific drivers behind the valuation — each segment carries its own growth, margin, multiple and capex intensity. (Tags: FACT reported · ESTIMATE from disclosures · INFERENCE judgment.)

AI revenue, decomposed — the AI lines broken out (Azure-AI / Copilot / model-API / pass-through style), so the AI contribution is auditable:

• AI / data-security emerging pillar (Risk360, AI analytics, data protection): Fastest-growing emerging line inside the SSE platform; valued at a premium multiple in the engine sum-of-parts (14x ARR) but still a minority of total ARR.

Named Exposures

SSE / zero-trust demand cycle (FACT/ESTIMATE)

Dilution vs cash generation (FACT)

Platform-consolidation vs point-product risk (INFERENCE)

Model Appendix

DCF — line items

FCF is bridged: NOPAT + D&A − Capex − ΔNWC (capex intensity 8% of revenue, weighted from the segments) — not a single conversion fudge.

WACC 9.5% · Σ PV(FCF) $4B + PV(terminal) $17B = EV $21B; + net cash → equity $23B ÷ diluted shares 0.16B = $139/share (exit-multiple terminal).

• Gordon (perpetuity-growth) terminal at 2.5% → $103/share — a genuinely non-multiple, cash-based cross-check; the exit-multiple and Gordon values bracket the terminal-value risk.
• Incremental ROIC on the forecast capex ≈ 39% vs WACC 10% → above WACC — the build is value-creative.

Peer set

Peer-median fwd P/E → $262; EV/Rev → $330.

Weighted fair-value math

Sensitivity

DCF/share — WACC × terminal multiple

DCF/share — revenue CAGR Δ × op-margin Δ

Tornado — DCF/share swing by driver (widest first)

Company lever — SoP/share vs ZIA (Secure Internet / SWG) multiple (AI re-rating) (base 36x)

Consensus & Market Expectations

_Consensus figures: Alpha Vantage sell-side aggregates. Where the house view sits materially above or below the street, the divergence is itself a datum — see the thesis.

Balance Sheet & Liquidity

Balance-sheet data as of 2025-07-31 (Alpha Vantage).

Capital Allocation

Free-Cash-Flow Quality

Accounting quality: SBC 22.0% of revenue; cash conversion (OCF/NI) -2371% — cash-backed.

Catalyst Calendar

• 2026-09-02 (~56d) — Quarterly earnings — est. EPS $1.09 (AV EARNINGS_CALENDAR)
• 2026-09-02 (~56d) — Q4 FY2026 earnings — billings, net-new ARR, dollar-based net retention, FY2027 guide (AV EARNINGS_CALENDAR)
• 2026-12-02 (~147d) — Q1 FY2027 earnings and early FY2027 billings read (authored)
• 2027-03-03 (~238d) — Q2 FY2027 earnings — emerging-product (data / AI security) attach update (authored)

Forecast Track Record

• EPS surprise: beat 87.5% of the last 8 quarters; average surprise +14.2%.
• Prior-forecast backtest (7 snapshots, 2026-04-24→2026-07-07): directional hit-rate 85.7%; mean predicted +9.1% vs realized +2.0%. Disconfirming track record is reported, not suppressed.

Competitive Moat

Narrow moat. Zscaler's moat is real switching cost — once enterprise traffic is routed through its global cloud edge and policies are configured, replacement is disruptive — plus a proprietary points-of-presence network. But SASE bundling from Palo Alto and Microsoft attacks the edges. FALSIFIABLE: if dollar-based net retention falls below 110% and net-new ARR keeps decelerating, the moat is being commoditised and the terminal multiple must compress from the mid-30s toward a durable-grower low-20s.

Moat sources:

• Switching cost from routing enterprise traffic through the Zscaler cloud edge and configured policy
• Proprietary global points-of-presence / cloud-proxy network with scale telemetry
• Multi-product SSE platform (ZIA + ZPA + data/AI security) raising cross-sell lock-in
• OFFSET: Palo Alto Prisma Access, Microsoft E5 zero-trust and Cato bundling compress the standalone-SSE premium

Regulatory & Legal Risk

Probabilities and sensitivities are analyst estimates, not market-implied.

Scenario Macro & Key Risks

What the Market Is Pricing In

At the current price, the market pays 32.5× forward EPS, vs the house DCF terminal 22.0×, and a peer median 65.5×. The house DCF sits 7% below spot, so the market is pricing in more than the house case — roughly 0.9pp of revenue CAGR.

Variant perception: the house view is below-consensus, and the thesis is primarily FCF-driven.

Peer Quality & Weighting

Quality-weighted forward P/E: 61.0× (simple median 65.5×). Direct peers count 100%, segment 50%, broad 25%.

Valuation-anchor screen: Sum-of-parts (excluded (>3× or <0.3× spot)). Anchor median 146.2. Extreme/excluded anchors carry no headline weight.

Historical-range cross-check: 52-week range $115–$337, centre $197 (+32% vs spot); spot sits at the 16th percentile of the range. Low-weight mean-reversion cross-check, not a fundamental anchor.

Risk / Reward & Margin of Safety

Reward/risk compares triangulated upside against the probability-weighted bear target, not the extreme tail. Bull case (Bull — Platform Winner): $260.

Assumption Register

Sensitivity-ranked drivers (widest fair-value swing first): Revenue CAGR ±3pp (33.0); Terminal × ±15% (32.0); Op margin ±3pp (30.0); Capex intensity ±15% (13.0); WACC ±1pp (11.0).

Inputs, Sources & Confidence

Every load-bearing input, labelled by type and confidence. (reported fact · company guidance · consensus estimate · market data · house estimate · inference.)

Source Log

Citation coverage: 14/14 mandated claims sourced. Filing URLs are not available via the market-data provider; company statements are cited as 10-K/10-Q via Alpha Vantage.

Load-Bearing Assumptions

DCF: WACC 10%, terminal multiple 22×, FY+5 revenue $6B. Triangulation leans 35% on DCF, 25% on PWEV.

Reasons the Thesis Could Fail (Falsifiable)

Pre-registered signals that would break the thesis — each polices a specific scenario boundary and is checked at every earnings update:

• Calculated billings growth, year on year < 0.12 (2 consecutive prints → Structural Impairment). Billings lead revenue and reveal net-new ARR before it is recognised. Roughly the midpoint between the Base path (16%) and the Recession Overlay path (9%); two prints below it mean the base scenario is no longer operative.
• Dollar-based net retention rate < 1.1 (2 consecutive prints → Structural Impairment). Module cross-sell into the installed base is the mechanism separating the base case from impairment. Net retention below 110% for two prints means existing customers have stopped expanding, removing the cheapest growth lever and signalling SASE-bundling losses.
• Total revenue growth, year on year < 0.125 (2 consecutive prints → Recession Overlay). Midpoint of the Base path (16%) and the Recession Overlay path (9%). Two prints below this line indicate the enterprise-spend or bundling risk has become the operative scenario and the tree should reweight toward the bear branches.
• Non-GAAP operating margin < 0.19 (2 consecutive prints → Recession Overlay). The base case holds margin in the low-20s. Two prints below 19% imply the company is defending growth with sales and marketing spend and the margin leg of the base scenario has failed.
• Free-cash-flow minus stock-based compensation < 0.0 (2 consecutive prints → Structural Impairment). SBC runs at roughly 22% of revenue and FCF-minus-SBC is barely positive (~$0.07B). Two prints below zero mean real cash generation net of dilution has turned negative, undermining the quality of the reported FCF margin.

Fact / Inference / Speculation

• FACT: Spot $150; 52-week range $115–$337; engine rating HOLD; base-case target $155 (+3%). (source: Alpha Vantage 2026-04-20, 8 July 2026)
• INFERENCE: Triangulated FV $139 (-7% vs spot · triangulated FV); the rating tracks the Monte-Carlo + scenario-PWEV core; the cash-flow anchor sits below the multiple-discipline core.
• SPECULATION: At current prices the embedded bet is that the market keeps paying the current multiple through the capex cycle — a regime call the engine cannot verify from fundamentals alone.

Recommendation: HOLD

Balanced: triangulated fair value $242 (+62% vs spot); the outcome hinges on P/E Multiple. The debate is P/E Multiple — fundamentally a multiple/regime call. SBC runs $0.7bn TTM (~22% of revenue; charged once, as dilution).

Disclosures & Limitations

This report is for informational and research purposes only. It is not personalised investment advice and does not consider any investor's objectives, financial situation, risk tolerance, tax position, or liquidity needs.

• No suitability assessment has been performed for any individual.
• Market data may be delayed or inaccurate; figures are as of the analysis date.
• Model outputs (fair values, targets, scenario probabilities) are estimates and may be wrong.
• Forecasts are uncertain; past performance is not indicative of future returns.
• The author or publisher may hold positions in securities mentioned.
• Users should verify information against primary sources (company filings) before acting.
• Investing involves risk of loss; there is no guarantee any target price is achieved.
• Ratings follow a defined research methodology (12-month expected-return thresholds), not individual circumstances.