Earnings call transcript: Zscaler beats Q3 2026 forecasts, stock rises

Zscaler delivered a solid Q3 beat, with EPS of $1.08 versus $1.01 expected and revenue of $850.48 million versus $835.55 million, driving a 1.22% aftermarket gain to $183.17. Revenue rose 25% year over year, non-GAAP operating margin expanded to 23% (+140 bps), and the company guided Q4 revenue to $875 million-$878 million with EPS of $1.08-$1.09. Management also flagged strong AI-security demand, but tempered near-term outlook due to sales leadership transitions and integration work on Red Canary/Symmetry.

Analysis

The stock reaction is less about the quarter itself and more about what it says about the durability of the platform story: Zscaler is moving from a single-product security vendor into a broader control plane for AI-era access, data, and workload governance. That matters because the market has been treating cybersecurity as a crowded replacement cycle; if Zscaler can keep attaching adjacent modules to existing accounts, the revenue base becomes more recurring and less dependent on new-logo volatility. The key second-order effect is that this raises the bar for firewall and legacy VPN vendors, whose differentiation weakens further as buyers standardize on a unified policy layer.

The main near-term risk is not demand, but execution drag from the combination of leadership churn and integration complexity. Management is effectively telling us that the next few quarters will likely be shaped by transition noise, which can suppress conversion rates even if pipeline remains healthy; that creates a window where the market may over-penalize the name on any deceleration in net-new ARR. Another underappreciated risk is CapEx inflation: if appliance and data-center costs stay elevated, margin expansion becomes less linear and free cash flow can lag operating income for several quarters.

The consensus is probably underestimating the mix shift toward larger, multi-module deployments and overestimating the importance of legacy new-logo adds. If the installed base keeps widening its module count, the company can sustain mid-20s revenue growth even with slower net-new ARR because upsell is becoming the main engine. That said, the stock already discounts a lot of AI-security optionality, so upside likely comes from evidence that AI use cases are translating into actual product attach rather than just narrative.

Net/net, this is a quality story with a near-term execution overhang and a longer-duration platform re-rating path. The best setup is likely a pullback or a period of post-earnings digestion rather than chasing strength immediately after a beat.

Key Decisions for Investors

• Long ZS on weakness over the next 2-4 weeks; use any post-earnings fade toward the 20- to 50-day moving averages as entry, targeting a 10-15% rebound if the market re-focuses on ARR/FCF durability rather than sales-transition noise.
• Buy ZS Jan-2027 call spreads instead of outright equity to express the AI-security platform re-rate with defined risk; structure for a 2:1 to 3:1 payoff if module attach and FY27 guidance stabilize.
• Pair trade: long ZS / short PANW over 3-6 months. ZS has the cleaner AI-native narrative and more room for operating leverage, while PANW is more exposed to digestion in broad platform spend and may be more vulnerable if buyers favor architectural simplification.
• Hedge a ZS long with a small short in a legacy firewall basket on any strength (e.g., FTNT/PANW) for 1-3 months; the relative trade benefits if Zero Trust adoption keeps taking share from perimeter architectures.
• Avoid chasing the move in the first 24-48 hours after the print; the better entry is after guidance digestion, since leadership-transition concerns can create a temporary multiple reset despite intact fundamentals.