The Great Repricing Crushed This Cybersecurity Growth Stock. That's a Buying Opportunity.

Zscaler shares have plunged over 60% from the $368.78 ATH to about $139, with market cap down from $51.7B in 2021 to $22.1B today. Revenue and adjusted net income grew at CAGRs of 44% and 75% from fiscal 2020–2025, but analysts forecast slower revenue CAGR of ~21% for fiscal 2025–2028 and expect GAAP profitability by the final year; fiscal 2026 revenue is forecast at $3.3B implying <7x revenue valuation. Key upside is continued expansion of its cloud-native zero-trust platform, AI-driven ZDX Copilot and M&A-driven moat widening; key risks are slowing growth, rising interest rates and GAAP headwinds from stock-based comp and acquisitions.

Analysis

Zscaler’s cloud-first positioning creates a structural advantage versus legacy appliance vendors, but the real second-order beneficiary is hyperscaler bandwidth and telemetry services: sustained adoption of AI-driven security features will increase egress, observability and managed ingestion demand, transferring incremental gross margin to cloud infra and GPU compute vendors. Channel partners and MSSPs will bifurcate — those who embed Zscaler deeply will see stickier ARR and higher services revenue; resellers focused on appliance refresh cycles face secular decline in deal frequency and average contract size.

Key risks live at the KPI level, not the headline multiple: softening net retention or a step-up in churn from mid-market customers would compress any multiple quickly, while normalization of stock-based comp and successful integration of recent buys could flip GAAP profitability and be a catalyst for re-rating. Macro sensitivity remains material — a sustained rise in rates or a two-quarter enterprise IT spend pullback could keep multiples depressed for 12–24 months even with steady underlying ARR growth.

From a tactical allocation standpoint, this is a patient-convexity trade: downside is bounded by subscription visibility while upside is levered to ARPU expansion from AI tooling and cross-sell of acquired modules. A potential strategic takeout by a large cloud/security acquirer is a low-probability, high-payoff tail; conversely, an unexpected meaningful contraction in large account renewal rates is the principal path to downside.

Consensus is underweight the margin-leverage story that follows SBC normalization and amortization tailing off over 2–3 years; if management can show sequential improvement in gross margin and net retention stabilization, the multiple should re-rate materially. Monitor three metrics over the next two quarters — net retention, gross margin ex-SBC, and incremental ARR from AI modules — as go/no-go signals for scaling positions.

Key Decisions for Investors

• Initiate a 12–24 month constructive position: buy ZS Jan-2028 LEAP calls sized 1–2% of portfolio notional. Hedge entry with a small 9–12 month 25% OTM put to limit downside. R/R: asymmetric (target 2.5–3x) if ARPU and net retention re-accelerate within 18 months; stop-loss if net retention drops below 100% or quarterly ARR growth misses guidance by >200bps.
• Pair trade (12 months): long ZS equity vs short a legacy appliance-focused security vendor (e.g., PANW or FTNT) sized dollar-neutral. Mechanism: expect multiple expansion for cloud-native stack and compression for appliance-led vendors. Target relative outperformance 20–35%; unwind if ZS absolute performance lags sector by >15% or if macro IT spend deteriorates.
• Event-trade around earnings (next 1–3 months): buy a modest call spread (3-month) to capture upside to guidance/metric beats while capping premium paid. Size <0.5% notional. Exit on confirmed improvement in gross margin ex-SBC or net retention; if both miss, cut immediately.
• Tactical convexity hedge (9–12 months): small long NVDA 12-month calls (0.25–0.5% notional) to capture upside from enterprise AI telemetry/compute tail that benefits Zscaler indirectly. This is optional skew insurance—payoff if AI-driven ingestion ramps and drives re-rating across security/SaaS names.