Zscaler (ZS) Q4 2026 Earnings Call Transcript

Zscaler reported fiscal Q4 revenue of $898.2 million, up 25% year over year, ARR of $3.8 billion, also up 25%, and record non-GAAP operating margin of 24.3%, up 220bps. Organic net new ARR rose 17% to $232 million excluding Red Canary, while Security for AI bookings increased more than 50% sequentially and Z-Flex Q4 TCV exceeded $770 million, up more than 60% sequentially. Fiscal 2027 guidance calls for revenue of $3.908 billion-$3.938 billion and ARR of $4.396 billion-$4.426 billion, each implying roughly 17% growth, alongside a 3% workforce reduction that will incur $30 million-$33 million in restructuring charges. Elevated fiscal 2027 CapEx, expected in the low teens as a percentage of revenue, reflects tight and higher-priced memory, storage and processor supply.

Analysis

ZS has shifted from a seat-based secure-access vendor toward a platform with usage-linked monetization across workloads, branches, data, and AI interactions. That mix can raise lifetime value and reduce dependence on endpoint/user-count expansion, while Z-Flex makes displacement harder by embedding future module spend inside multiyear commitments. The critical read-through is competitive: ZS is increasingly competing for security-control-plane budget against PANW, CRWD, NET and Microsoft rather than merely replacing legacy VPN/firewalls; its ability to bundle enforcement with data controls is likely more important than early AI-booking growth rates.

Near term, the setup is constructive but not unambiguously bullish: organic momentum and sales productivity support upside revisions over the next 1-3 months, yet the forward growth outlook embeds a visible deceleration and management has explicitly deferred meaningful integrated SecOps contribution into the back half. Elevated infrastructure spend also changes the valuation debate from operating-margin expansion to FCF durability; if hardware inflation persists, the market may discount AI-security revenue as capital intensive rather than software-like.

The contrarian concern is that flexible multiyear contracts can pull forward bookings and obscure module-level adoption. The key falsifiers are organic net-new ARR failing to sustain mid-teens growth, NRR falling below the stated 115% level, or FY27 CapEx/FCF pressure exceeding guidance. Conversely, credible paid SecOps deployments and sustained non-seat growth would justify a platform multiple re-rating and pressure point-product vendors.

Key Decisions for Investors

• Initiate a starter long ZS only on post-earnings consolidation or after confirmation that organic net-new ARR remains at least mid-teens in Q1; target a 6-12 month hold into the October Investor Day and second-half SecOps ramp. Risk/reward is favorable only if valuation does not price FY28 AI-security monetization before paid deployments are disclosed.
• Express the relative thesis via long ZS / short CRWD in equal dollar beta-adjusted size over 3-6 months. ZS has a cleaner pathway to monetize inline AI governance and access enforcement, while CRWD faces greater expectation risk if AI security spending shifts toward preventive architecture; exit if ZS NRR drops below 110% or CRWD materially accelerates module adoption.
• Do not chase a standalone long on the Agentic SecOps launch. Set an alert for disclosed conversion, attach rate, and paid-customer metrics at the October Investor Day; absent these, treat launch commentary as product positioning rather than revenue evidence.
• Monitor MU and enterprise hardware supply-chain commentary as a hedge signal: continued memory/storage inflation can cap ZS FCF multiple expansion despite revenue upside. Reduce ZS exposure if FY27 CapEx runs above the low-teens percentage framework or FCF margin falls below 23%.