Why Zscaler Stock Rocketed Higher This Week

Zscaler shares rose 20.7% from last Friday through 3:37 p.m. after Bernstein maintained its outperform rating and raised its price target to $298 from $224. The new target implies 56% upside from Zscaler's $191.58 Wednesday close, with Bernstein citing improving cybersecurity-sector sentiment and Zscaler's remaining valuation upside. Zscaler trades at 25.8x operating cash flow, well below its five-year average multiple of 47.6x, although Wedbush last week cut its target modestly to $215 from $220.

Analysis

The re-rating case for ZS depends less on another analyst target change than on evidence that its zero-trust platform can sustain growth while expanding free-cash-flow conversion. The relevant verification points at the next earnings release are billings/RPO acceleration, net retention stabilization, and incremental operating margin; without those, a multiple rebound is simply a momentum trade in a crowded cyber tape. The stock’s sharp weekly move raises near-term positioning risk, particularly if rates rise and long-duration software is de-rated broadly.

Competitive dynamics are mixed. ZS is levered to enterprises replacing legacy perimeter architecture, but PANW’s platform-consolidation strategy can win budget by bundling SASE with endpoint, network, and cloud security; CRWD can similarly absorb security spend where endpoint is the control plane. A stronger ZS tape may nonetheless lift NET and Cloudflare-adjacent secure-access vendors, while pressuring smaller standalone security names whose valuation discount lacks a comparable large-enterprise growth catalyst.

Over 1-3 months, the catalyst path is sector estimate revisions and confirmation that CIO security budgets remain resilient despite IT-spend scrutiny. Over 6-18 months, the upside case requires ZS to demonstrate that AI-driven traffic and application modernization increase policy-enforcement demand faster than price competition erodes per-user economics. The contrarian view is that historical cash-flow multiples are a poor anchor if growth has structurally decelerated or if stock-based compensation remains elevated; apparent cheapness can persist rather than mean-revert.

Falsification: reduce bullish exposure if the next report shows billings or RPO below consensus, material net-retention deterioration, weaker FY guidance, or margin expansion achieved primarily through sales-capacity cuts. A broad cybersecurity multiple reset following weak PANW, CRWD, or FTNT commentary would also challenge an idiosyncratic ZS-long thesis.

Key Decisions for Investors

• Do not chase the current gap higher; build a long ZS position only on an 8-12% pullback or after next-quarter billings/RPO confirmation. Size for a 3-6 month holding period, with exit discipline on a guidance cut or net-retention miss.
• Use a relative-value expression: long ZS / short HACK or CIBR in equal beta-adjusted dollars for 1-3 months. This isolates potential company-specific estimate upside from a reversal in the broader cybersecurity sentiment bid.
• For a more defensive competitive view, pair a smaller long ZS position with long PANW rather than a concentrated standalone bet. PANW is the hedge against platform consolidation and budget bundling; reassess the spread after both companies’ next earnings updates.
• Avoid recommending ZS options until implied volatility, skew, and post-earnings move expectations are available. Set an alert ahead of earnings for unusual call open interest or IV below realized volatility, which would create a more attractive defined-risk upside structure.