The Great Repricing Crushed This Cybersecurity Growth Stock. That's a Buying Opportunity.

Zscaler shares have tumbled over 60% from the $368.78 all-time high (Nov 19, 2021) to roughly $139 today, shrinking market cap from $51.7B to $22.1B (now <7x analysts' FY2026 revenue estimate of $3.3B). Revenue and adjusted net income grew at CAGRs of 44% and 75% from fiscal 2020–2025; analysts project a 21% revenue CAGR from fiscal 2025–2028 and expect GAAP profitability in the final year. The business remains a cloud-native zero-trust leader (9,400+ customers, 40% of Forbes Global 2000), is expanding AI features (ZDX Copilot) and pursuing acquisitions, but macro headwinds (rising rates, geopolitical conflicts) and slowing growth temper the outlook.

Analysis

The move to cloud-native zero-trust creates a non-linear ARPU lever: once a platform controls the TLS termination and DNS layer for enterprise flows, incremental AI features (behavioral baselining, automated remediation) can be monetized at multiples of pure-seat-based pricing without proportionate cost growth. That creates scope for margin expansion even if headline revenue growth slows, because software-defined inspection scales more with traffic volume than headcount when orchestration and ML models mature.

Second-order winners include cloud infra providers and GPU suppliers that service the bursty model training/inference demand tied to security analytics — but incumbents that sell on-prem appliances face structural shrinkage of addressable spend. Conversely, a faster-than-expected shift back to on-prem (driven by regulation, latency, or sovereign controls) would be the most direct existential reversal for a cloud-native security stack.

Catalysts and timing: expect quarter-to-quarter noise from macro and execution (sales cycles/renewal cadence) but 12–36 months is the right horizon for a valuation re-rate tied to demonstrating higher ARPU retention and supranormal gross-margin expansion. Key near-term risks are integration drag from tuck-ins, an AI feature that materially raises cloud costs, and a macro-driven re-tightening of discount rates that penalizes long-duration SaaS cash flows.

The consensus underestimates optionality from composable security: if the platform becomes the dominant telemetry aggregator, it can sell adjacent controls and payable-for-performance services to reduce churn. That pathway implies upside non-linearity — a base SaaS valuation may be too conservative while the market prizes steady, self-funded margin expansion over headline growth for re-rating.

Key Decisions for Investors

• Long ZS equity (initial 4–6% NAV, scale to 10% on drawdowns) with a 12–24 month horizon. Hedge tail risk by buying 9–12 month ZS puts ~20% OTM sized to limit portfolio loss to ~3% NAV. Risk/Reward: asymmetric — loss limited by hedge; upside 30–70% conditional on ARPU/gross-margin inflection or multiple re-rate.
• Options spread: buy a 12-month ZS call spread (pay premium for 25–40% OTM call, sell a deeper OTM call to partially finance). Position size 1–2% NAV, target 2–4x return if a clean beat/upgrade cycle emerges; max loss = premium paid, useful as a low-cost asymmetric bet on a catalyst within 6–12 months.
• Pair trade (12–36 months): long ZS / short INTC sized dollar-neutral (2–5% NAV each). Rationale: long exposure to cloud-native security optionality vs short exposure to legacy silicon-dependent appliance demand. Risk/Reward: benefits if cloud security spend gains share; risks if hardware cyclicality or AI compute demand leads to unexpected INTC upside — monitor regulatory/sovereign-data headlines.