Cybersecurity stocks are surging. One looks promising into earnings

Zscaler is set to report after the close, with the article arguing for a bullish but capital-efficient stance via a call spread risk reversal rather than outright stock or long premium. Fundamentals cited are strong: revenue growth of 26% YoY, trailing 12-month revenue of $3.32B, free cash flow margins around 27%, about $1B in NTM free cash flow, and $1.7B in net cash. The key thesis is that AI agent traffic and Zscaler's inline proxy architecture could drive underappreciated demand, though risks include decelerating net retention, hyperscaler competition, and a market that may already have priced in some good news.

Analysis

The cleanest read-through is not just that ZS can beat on security demand, but that every incremental AI workflow increases the number of policy-enforced inspection points, which is a structurally better monetization path than point-solution perimeter spending. That creates a second-order advantage versus FTNT: as enterprises shift from network-centric control to identity- and workload-centric control, the competitive battle moves from appliance refresh cycles to data-plane ownership, where cloud-native architectures typically defend share better and expand wallet share faster.

The market is likely underpricing the duration of this theme, but overpricing the near-term tolerance for a miss. If the company merely confirms profitability inflection and keeps remaining performance obligations healthy, the stock can rerate on multiple expansion over the next 1-3 months; if it disappoints on billings or commentary around large-deal conversion, the unwind can be sharp because crowded “AI security winner” positioning tends to have poor downside convexity around earnings.

The key contrarian point is that the bullish case does not require heroic acceleration; it only requires that AI-related traffic growth and security attach rates offset macro noise. What consensus may be missing is that unmonetized AI features can still be strategically valuable if they increase platform embedment and improve future pricing power. The bigger risk is not competition from legacy firewalls so much as procurement delay: if budget scrutiny lengthens sales cycles, the stock can de-rate for several quarters even if the secular thesis remains intact.

Key Decisions for Investors

• For the earnings event, express bullish delta with limited premium: sell downside put exposure and finance a call spread in ZS; target a 30-60 day window where implied volatility is rich relative to realized and upside can be captured with less capital at risk than outright stock.
• If entering before the print, size as a pseudo-long equity replacement rather than a volatility bet; the structure should behave like a stock surrogate with capped upside, preserving more than 1:1 downside protection if the quarter is merely mixed.
• Pair trade: long ZS / short FTNT over the next 1-3 months. The thesis is that cloud-native AI security monetization should command a premium versus on-prem retrofit narratives; this also reduces market beta if cybersecurity multiples compress broadly.
• If ZS gaps up on a clean profit and commentary beat, add on post-earnings drift rather than chasing the open; the highest-probability move is often a second-leg rerate as investors re-underwrite FY growth and FCF conversion over the next 2-6 weeks.
• If billings or net retention underwhelm, cut risk quickly: the stock could give back a meaningful portion of the post-recovery rally in 1-3 sessions because positioning is likely long and the event setup is already optimistic.