The Motley Fool Interviews Zscaler Founder and CEO Jay Chaudhry

Zscaler CEO Jay Chaudhry outlined the company’s long-term zero‑trust strategy and product expansion—Zscaler Internet Access, Private Access, digital experience and extensions for cloud workloads, branches and IoT—positioning the firm as a platform alternative to legacy firewalls. The company, with a market capitalization around $39 billion and roughly 7x appreciation since its 2018 IPO (cited ~30% annual returns since listing), emphasizes strong customer retention (NPS ~75–85) and repeat purchases across large enterprise buyers; Chaudhry highlighted AI-driven cyber threats but argued zero‑trust architecture mitigates those risks and reiterated confidence in growth and market opportunity. The discussion reinforces management’s long-horizon focus and product-led differentiation rather than near-term financial detail or guidance that would immediately move markets.

Analysis

Market structure: Zero‑trust/cloud‑native security (Zscaler ZS, ServiceNow NOW, Salesforce CRM) are clear winners as enterprises shift spend from perimeter hardware to policy/service subscriptions; legacy firewall vendors (Palo Alto PANW, Fortinet FTNT) face pricing pressure and slower renewal velocity. The platformification trend increases ZS’s pricing power for add‑ons but also concentrates demand risk in a smaller set of hyperscaler integrations (AWS/Azure) and enterprise procurement cycles. Cross‑asset: stronger SaaS adoption is risk‑on — expect modest tightening in high‑yield tech credit spreads, higher implied vols in ZS options around earnings, and marginal USD weakness if equities rally.

Risk assessment: Tail risks include an AI‑enabled breach or high‑profile outage at ZS (could erase 20–40% market cap in days), regulatory/data‑localization rules forcing on‑prem solutions in key geographies, or hyperscalers building native substitutes. Immediate (days): earnings/guidance moves and any security incident; short (3–6 months): large enterprise renewals/NRR/kickoffs; long (2–5 years): TAM capture and margin expansion. Hidden dependencies: concentration in top enterprise logos, channel/partner integrations, and reliance on customer net retention >110% to sustain SaaS economics.

Trade implications: Direct: initiate a 2–3% long position in ZS as a 3–5 year core hold, targeting 12–18% annualized returns; Pareto exit/trim 50% if quarterly ARR growth decelerates below 15% YoY or NRR drops under 110%. Pair trade: long ZS (2%) / short PANW (1.25%) to express cloud‑native vs legacy dispersion over 6–18 months. Options: for tactical upside, buy a 9‑ to 12‑month ZS call spread sized to 0.5–1% portfolio risk or sell 6–12 week OTM puts to accumulate if willing to own at a 10–20% discount. Rotate 2–4% from legacy security hardware into CRM/NOW to play platform beneficiaries.

Contrarian angles: Consensus underestimates inertia and procurement cycles that can slow revenue ramp (risking quarters of weaker billings), but it also underprices ZS’s customer stickiness — Jay’s repeated‑buy datapoints imply a structural upsell flywheel similar to ServiceNow’s early platform build. The market may be underreacting to the asymmetric downside (a single large breach) and overreacting to short‑term AI headlines; prefer risk‑defined option structures and hard stop‑loss triggers (reduce 50% within 48 hours on a material security incident affecting >5% revenue). Historical parallel: platform SAS winners (CRM/NOW) gained sustained multiples after multi‑year execution; ZS can follow that path if retention and gross margins remain stable.

Key Decisions for Investors

• Establish a 2–3% core long position in ZS for a 3–5 year horizon, target 12–18% annualized return; trim 50% if quarterly ARR growth <15% YoY or NRR <110% or if stock rallies >30% within 12 months.
• Implement a pair trade: long ZS (2%) and short PANW (1.25%) for 6–18 months to capture dispersion between cloud‑native security gains and legacy firewall share loss; unwind if PANW announces proven cloud‑native wins or ZS issues weak guidance.
• Use options for asymmetric exposure: buy a 9–12 month ZS call spread sized to limit downside to 0.5–1% of portfolio, or sell 6–12 week OTM puts to accumulate ZS at a 10–20% discount; avoid naked directional calls >1% risk.
• Rotate 2–4% of portfolio from legacy security hardware names (PANW/FTNT) into cloud platform beneficiaries CRM and NOW over the next 30–90 days, taking profits on reallocated names if they outperform by >25%.
• Set hard risk triggers: reduce ZS position by 50% within 48 hours if a material security breach impacts >5% of revenue, or if new data‑localization laws materially restrict cloud delivery in a top 3 customer geography.