Zscaler's AI Bookings Jump 50%: Can AI Products Drive Growth?

Zscaler's Security for AI bookings rose more than 50% sequentially in fiscal Q4 2026, while AI Protect bookings exceeded $100 million over the trailing 12 months; 70% of AI-security deals also included Data Security. Q4 revenue increased 25% year over year to $898.2 million and ARR rose 25% to $3.77 billion, but fiscal 2027 revenue guidance implies a slower roughly 17% growth rate. AI-security adoption and new agent-focused products provide a potential growth catalyst, although Palo Alto Networks and CrowdStrike are rapidly expanding competing offerings and Zscaler shares are down 12.3% year to date.

Analysis

The investable signal is not AI-security demand itself, but which vendor can convert it into durable platform consolidation rather than a feature sale. PANW and CRWD enter with broader installed-product surfaces—network/cloud and endpoint/identity/SIEM, respectively—so AI governance can attach to existing budgets with lower sales friction. ZS's data-security attachment is encouraging, but it also signals that its AI proposition may be monetized principally as an upsell to an already slowing core rather than a separate growth vector.

Near term (days to 3 months), ZS's valuation discount can support a tactical catch-up move if the next print shows AI bookings translating into RPO, net retention, and billings acceleration. The critical issue is whether new AI products become material before the planned second-half fiscal-year scaling period; absent that evidence, investors are likely to value ZS on its lower growth trajectory and assign a persistent discount to PANW/CRWD. A weak enterprise IT-spending backdrop would disproportionately hurt ZS because point-product budget scrutiny rises when platform vendors can bundle comparable controls.

The contrarian view is that the market may be over-crediting first-year AI ARR disclosures across the group. Enterprises are still defining agent governance architectures, and early bookings can be pilot-heavy, discount-supported, or pulled from existing data-security budgets. The structural winner over 6-18 months may be identity-centric security—CRWD, and potentially Okta (OKTA)—because autonomous agents create non-human identity, privilege and audit problems that secure-web-gateway controls alone do not solve.

Falsification for the relative thesis: ZS demonstrates two consecutive quarters of reaccelerating billings/RPO and expanding net retention while maintaining margin, or PANW/CRWD show AI-led deal displacement, material discounting, or slowing platform-module adoption. Monitor renewal duration, large-deal mix, and disclosed AI ARR quality rather than sequential booking growth alone.

Key Decisions for Investors

• Maintain a 3-6 month pair: long PANW / short ZS, sized beta-neutral. PANW has the cleaner path to bundle AI security into a broader platform, while ZS must prove monetization against a slower core-growth base; reassess if ZS reports billings or RPO growth above revenue growth for two quarters.
• Add CRWD on post-earnings weakness rather than chase strength; use a 6-12 month horizon. The agentic identity and endpoint control plane offers broader wallet-share optionality than AI gateway security alone. Risk: elevated multiple compression if net-new ARR or subscription gross margin misses.
• Treat ZS as a tactical long only after verification: initiate following evidence that Security for AI contributes to a measurable increase in large-deal mix, RPO, or net retention at the next two earnings releases. A 15-20% upside re-rating is plausible from a discounted revenue multiple, but downside remains comparable if guidance is cut or AI adoption stays pilot-scale.
• Watch OKTA as a second-order beneficiary, not an immediate recommendation: agent identity adoption could expand its addressable market, but require disclosed non-human identity attach rates and stable retention before positioning.