Zscaler Q1: I Was Right (Rating Downgrade)

Zscaler was downgraded to sell after a disappointing Q3 FY26, with organic revenue growth stagnating at 21% and FY27 guidance cut to 16-17%. Organic Net New ARR growth has slowed to single digits, signaling weakening new enterprise wins and softer sales velocity. Competitive pressure from integrated platforms and recent leadership departures add to pipeline and execution concerns.

Analysis

ZS is no longer a “prove-it” story on valuation; it is becoming a duration trap. When net new ARR decelerates into the single digits while guidance is still reset lower, the market typically re-rates the multiple in two stages: first on the print, then again over the next 2-3 quarters as sales efficiency assumptions get revised and quota-carrying capacity is questioned. The key second-order effect is not just slower top-line expansion, but a higher cost of growth as management has to spend more to defend footprint in a more crowded deal cycle.

The competitive issue is broader than one vendor losing share. Fully integrated security suites can subsidize ZS displacement via bundle economics, which compresses pricing across the entire standalone SASE/SSE category and makes new-logo wins harder for everyone else. That tends to benefit hyperscalers and platform incumbents, while hurting adjacent point-solution names and channel partners whose attach rates depend on best-of-breed spend. Leadership turnover adds a non-linear risk because enterprise security sales is relationship-driven; even a modest pipeline disruption can show up with a 1-2 quarter lag in bookings.

The stock’s “cheapness” is not yet a floor because the market is likely underestimating how long it takes for slowing ARR to work through the model. If sales velocity does not stabilize by the next two reporting cycles, the debate shifts from growth deceleration to durable share loss, which usually cuts further into terminal multiple assumptions. A cleaner reversal would require evidence of re-acceleration in new enterprise adds or a meaningful step-up in product differentiation that cannot be matched by bundled suites.

The contrarian angle is that platformization is already widely discussed, so the stock may not fall in a straight line if the next quarter shows even mild stabilization in billings or margin resilience. But that would only create a tradable bounce unless net new ARR inflects; for now, the burden of proof remains on ZS, not the shorts.

Key Decisions for Investors

• Short ZS on rallies over the next 1-3 weeks; use any post-earnings bounce or sector-driven strength to build. Target 15-20% downside over 3-6 months if ARR deceleration persists, with risk capped via tight stops above the pre-print reaction high.
• Pair trade: long a diversified security platform leader vs short ZS for 3-6 months, expressing the view that bundle economics will continue to favor integrated suites over standalone security vendors. Prefer a pair with lower valuation compression risk on the long leg.
• Buy medium-dated put spreads on ZS, 2-4 months out, to capture a likely second-leg de-rating as guidance revisions flow through estimates. Structure for limited premium outlay and defined downside if management surprises with stable new-logo trends.
• Avoid catching the knife on ZS until there is at least one quarter of stabilization in organic Net New ARR; the next catalyst window is the following print, not the current one. If you need exposure, use options rather than equity to limit model-risk.
• Monitor peers exposed to standalone security spend for sympathy weakness; use any broad rotation into cybersecurity to fade names with similar platformization exposure, as the market may initially misread category-level resilience as company-specific resilience.