Zscaler (ZS) CRO Rich sells $492k in shares

Rich Michael (CRO & President of WW Sales) sold 3,147 ZS shares on March 17, 2026 at $156.5932 for $492,798 and now directly holds 104,350 shares; the sale was to cover tax withholding on RSU vesting. Zscaler reported FY26 Q2 revenue growth of 26% YoY and ARR up 25%, with a 77% gross margin and net cash position (more cash than debt). Analysts are mixed: Wells Fargo initiated Overweight with a $200 PT, while TD Cowen, BMO, and Stifel cut price targets (to $220, $210, and $180 respectively) though several maintained ratings after noting better-than-expected Q2 performance.

Analysis

Zscaler is benefiting from structural demand for cloud-native Zero Trust and data-sovereignty offerings; expanding local footprints (e.g., Canada) raises switching costs and creates a higher-margin, sticky ARR profile over 2–4 quarters while simultaneously increasing near-term CAC and implementation friction. Second-order beneficiaries include local cloud infra providers and MSPs that resell regional deployments; legacy appliance vendors face pressure as enterprises accelerate SaaS-first security stacks, creating a multi-year share-shift opportunity.

The principal risk is macro and multiple compression: persistent Fed-driven rate volatility can push growth multiples lower faster than revenue deceleration, turning durable ARR into valuation pain in the next 3–12 months. Strategic tail risks are more binary and multi-year — hyperscaler bundling or a large competitor M&A that integrates competing stacks would materially compress TAM and re-price long-duration growth expectations.

From a catalyst standpoint, AI-driven product monetization and measurable expansion in NRR/ACV per customer are the two near-term binary outcomes (next 1–4 quarters) that will re-rate the stock; quarterly beats on both will trigger outsized multiple expansion. The market is pricing growth durability concerns more than optionality on new AI/security modules, creating an asymmetric trade window for defined-risk long exposure paired with short exposure to legacy incumbents that lose wallet share.

Key Decisions for Investors

• Defined-risk long (directional): Buy ZS Jan 2027 150/250 call spread on a pullback to current levels or lower. Rationale: captures multi-year AI/Zero Trust optionality with capped premium. Target: +80–120% if company demonstrates step-up in NRR/AI monetization within 12–18 months; max loss = premium paid. Stop/exit: close if shares fall 20% from entry or if NRR declines sequentially.
• Pair trade (sector rotation): Long ZS stock equal-notional / Short PANW stock equal-notional, 12-month horizon. Rationale: play SaaS-native security share gains vs appliance/NGFW incumbents. Target: spread widening by 25–35% (ZS outperformance); risk: legacy capex rebound or PANW executing successful cloud pivot — set symmetric 15% stop on either leg.
• Income/vol play (tactical): Sell cash-secured Jun 2026 ZS 120 puts if implied vol spikes on earnings weakness, collecting premium to generate ~8–12% annualized yield. Rationale: monetize elevated IV and get long at a lower basis; risk = assignment/decline below strike, mitigate by sizing at 30% of normal long allocation.
• Hedged accumulation: Accumulate ZS on weakness up to a 6–12 month target allocation while concurrently buying 6–9 month protective puts to cap downside. Rationale: retains upside to multi-year TAM shift while limiting short-term macro risk. Target R/R: protect to limit drawdown to ~20% while left uncapped to upside re-rate events.