Zscaler: Cheaper Than Other Cybersecurity Names For A Reason

Zscaler’s FY2027 guidance implies decelerating revenue and ARR growth, tempering the positive backdrop of strong cybersecurity demand. While Q4 delivered solid margins and accelerated net new ARR, the article flags execution challenges and slower overall momentum versus sector leaders. Partnerships with AWS and CrowdStrike are positioned as longer-term catalysts, but near-term growth appears less compelling.

Analysis

The key issue is not demand for cybersecurity; it is where budget gets allocated. When a vendor with strong brand and solid margins still guides to slower growth, the market usually re-rates the entire cohort on terminal growth assumptions, not on this quarter’s ARR print. That tends to punish the weakest operator first: ZS’s multiple is more vulnerable than CRWD’s because investors pay a premium for durable growth, and deceleration implies less operating leverage per dollar of incremental sales.

Second-order, a slower ZS path can actually help competitors by freeing up wallet share in large enterprise refreshes. CRWD is best positioned to absorb spend because it has broader platform breadth and a stronger cross-sell narrative; PANW would also be a likely beneficiary if buyers prioritize consolidation. The AWS relationship is useful as a distribution lever, but it is not the same as evidence of product pull-through; if anything, cloud partnerships can lower CAC while leaving the core growth problem unchanged unless conversion rates improve.

Time horizon matters: the first move is usually multiple compression in days, then renewed focus on billings/remaining performance obligations over the next 1-3 months, especially if peers keep comping faster. Over 6-18 months, the thesis is falsified only if ZS shows sustained ARR re-acceleration or a clear inflection in large-deal conversion; absent that, the market will likely continue to reward scale leaders with better growth durability. The contrarian view is that margin discipline plus partnerships could make this look like a temporary transition year, but consensus may be underestimating how long it takes to convert channel relationships into visible top-line acceleration.

Key Decisions for Investors

• Short ZS vs long CRWD as a relative-value pair for the next 1-3 months; thesis is growth-quality divergence, with CRWD better able to defend premium multiples if cybersecurity spend stays healthy.
• If you want directional exposure, use ZS put spreads 1-2 months out rather than outright shorts; the setup is a decelerating-guidance story where multiple compression can happen faster than fundamentals deteriorate.
• Watch for a confirmation signal in ZS billings/ARR and large-deal commentary over the next quarter; if management fails to show re-acceleration, add to the short on any post-earnings bounce.
• Avoid betting on AMZN as a direct beneficiary; any AWS-related upside is likely too second-order to matter near term, so the cleaner trade is within security names rather than cloud infrastructure.