Cantor Fitzgerald cuts Zscaler stock price target on capex concerns

Zscaler beat Q3 fiscal 2026 consensus on revenue, ARR, and EPS and raised full-year revenue guidance, but lowered free cash flow guidance due to higher-than-expected Q4 capex. Management is accelerating data-center equipment purchases to lock in pricing, lifting fiscal 2026 capex to the high-single digits as a percentage of revenue and implying another 200 bps increase in fiscal 2027. Despite the strong quarter, analysts broadly cut price targets, including Cantor Fitzgerald to $225 from $300, reflecting a more cautious outlook.

Analysis

The near-term setup is more nuanced than a simple “AI infra winner” story: ZS is effectively front-running its own supply chain inflation to protect deployment cadence, which should support top-line conversion but compresses near-term free cash flow and raises the hurdle for multiple expansion. That matters because the market usually rewards cybersecurity names for margin durability; here, the company is intentionally trading 2026–2027 cash generation for supply assurance, so any disappointment will likely show up first in valuation rather than revenue.

Second-order, the capex step-up may actually be a signal that demand is becoming more elastic at the enterprise hardware layer than the software layer. If customers keep buying Zero Trust software but defer appliance refreshes or larger branch rollouts, the mix shifts toward lower-cash-yield software ARR while dragging hardware attach economics. That creates an asymmetry where peers with more software-only exposure and less device dependency could re-rate relative to ZS over the next 6–12 months.

The consensus is likely underestimating how much of the current move is a supply-chain hedge, not a demand inflection. In other words, upgraded revenue guidance does not automatically translate into a cleaner model if component costs keep rising faster than pricing power; this is a margin duration problem, not a growth problem. The stock can still work, but the easy upside is likely capped until investors get evidence that fiscal 2027 capex and appliance gross margin are stabilizing.

Catalyst-wise, the next 1–2 quarters matter more than the next few days: watch whether backlog converts without a further deterioration in FCF guidance, and whether management’s initial fiscal 2027 outlook proves conservatively reset or the start of a longer de-rating. If software demand remains strong but hardware inflation persists, the likely outcome is a slower multiple grind rather than a collapse; if enterprise spending softens at the same time, the stock becomes a de-leveraging candidate.

Key Decisions for Investors

• Short-dated downside hedge: buy 1–2 month ZS put spreads into any post-earnings bounce; the thesis is that the market may have fully priced the revenue beat but not the 2027 capex/margin drag. Target: 1.5–2.5x premium if the name re-rates back toward analyst targets.
• Relative value pair: long PANW or CRWD / short ZS for the next 3–6 months. The trade expresses preference for software-led security models with less hardware exposure and cleaner FCF conversion; stop if ZS demonstrates two consecutive quarters of stabilized FCF outlook.
• If holding ZS, reduce size and treat as a hold-only name until fiscal 2027 capex assumptions are clearer. Upside still exists on ARR momentum, but risk/reward is now skewed toward range-trading rather than breakout valuation expansion.
• For tactical longs, wait for a 10–15% pullback or for the company to prove that appliance pricing pressure is contained before initiating. The best entry is likely after the market digests whether the margin hit is transitory or structural.
• Watch supplier-side read-throughs over the next 1–2 quarters; a broadening of component inflation would support a short basket of hardware-adjacent software names with device dependency, while easing input costs would be the main catalyst to cover ZS shorts.