Zscaler: Premium Cybersecurity, Premium Price

The Quarter in Context

The reported period is the fourth quarter of fiscal 2026, ended July 31, 2026, presented inside the annual 10-K filing dated September 3, 2026. Q4 revenue was $898.2 million, up 24.9% year-over-year, capping a fiscal year in which revenue rose from $2.67 billion to $3.35 billion, a 25% gain. Gross profit reached $689.2 million for the quarter, implying a 76.7% gross margin that is essentially identical to the prior year. The operating line, however, remained a loss: a $15.5 million operating loss for the quarter narrowed from a $32.2 million loss a year earlier, but the full-year operating loss of $133.3 million is wider than last year's $44.3 million because stock-based compensation grew to $841.6 million and the company incurred $10.3 million of restructuring charges. Net loss for fiscal 2026 was $63.2 million versus $41.5 million the prior year.

Operating cash flow tells a markedly better story. Quarterly operating cash flow of $279.3 million brought trailing-twelve-month operating cash to $1.13 billion, up 11.4% year-over-year. Capital expenditure of $199.8 million in the quarter was unusually heavy; year-to-date capex of $277.3 million is up 233% from a year earlier, and the filing flags that this reflects investment in infrastructure including data-center build-out. Free cash flow, calculated as operating cash flow minus total capital expenditure, was $79.4 million for the quarter and $852.4 million for the trailing twelve months. That cash engine is the single most important fact in this report: even with a GAAP loss, Zscaler is producing a large amount of owner cash relative to its scale.

Business Model and Profit Engine

Zscaler sells subscriptions to a cloud-native zero-trust security platform, the Zero Trust Exchange, that intermediates traffic between users, devices, workloads, and applications. Customers are mostly large enterprises and government agencies; the company cites penetration of more than 40% of the Forbes Global 2000 and over 50% of the Fortune 500, with roughly 11,000 customers in total. Customers pay recurring subscription fees for the right to inspect traffic through the platform and to apply zero-trust policies. Revenue is therefore overwhelmingly recurring in nature, recognized ratably from contracts that are typically one to three years in length. The annual report does not break out revenue by product line, but it describes four pillars: Zero Trust SASE, Security for AI, Data Security, and Agentic Security Operations.

Revenue becomes gross profit through hosting and delivery costs. Cost of revenue ran $660.97 million in fiscal 2026 versus $532.07 million the prior year, leaving a gross margin near 80%. The biggest operating costs are sales and marketing ($1.18 billion in fiscal 2026) and research and development ($559.7 million), both rising faster than revenue. The single largest non-cash expense is stock-based compensation and related employer payroll taxes at $841.6 million, which exceeded 25% of revenue and is the principal reason GAAP operating income is negative. Capital intensity is rising; year-to-date capex of $277.3 million is 8.3% of trailing revenue, up sharply, and the filings describe continued investment in the cloud platform and data-center capacity. We do not know from the filings what share of that capex is maintenance versus growth, so we treat the free-cash-flow figure as an accounting proxy rather than a true owner-earnings number. Pricing power appears real but is not directly measurable from the available disclosures, and customer concentration is undisclosed at the unit level.

Earnings Quality and Cash Conversion

Where the issuer reports cash flow and capital expenditure cumulatively, the standalone-quarter cash-flow figures are derived by subtracting the preceding cumulative filing. They are calculations from SEC facts rather than separately reported quarterly line items. The gap between accounting profit and cash profit is the central earnings-quality question here. On a trailing-twelve-month basis, Zscaler generated $1.13 billion of operating cash against a $133.3 million operating loss and a $63.2 million net loss. The bridge works as follows: depreciation, amortization, and stock-based compensation together add roughly $900 million of non-cash add-back; deferred revenue and other working-capital movements provided additional support. The result is a free-cash-flow margin near 25% of revenue, a level that compares favorably with most enterprise-software peers but is materially lower than headline GAAP margins suggest once stock-based compensation is treated as a real cost.

Working capital, however, requires attention. Accounts receivable stood at $1.15 billion on July 31, 2026, up materially versus the prior year, and the increase is not separated from deferred-revenue movements in the available summary. The company also carried $1.22 billion of goodwill and $214 million of finite-lived intangibles from a series of fiscal-2026 acquisitions including Red Canary, SPLXAI, SquareX, and Symmetry Systems, none of which were included in management's internal-control assessment. The restructuring announced September 1, 2026, calling for a 3% workforce reduction and $30 to $33 million in severance, will be a fiscal-2027 charge rather than a fiscal-2026 item. The headline takeaway is that cash quality is good but is supported by working capital that we cannot fully audit and by acquisitions whose contribution we cannot yet quantify.

Business Quality, Moat, and Industry Position

On the available evidence, the company is best described as an important participant, not a demonstrated core supply-chain bottleneck. This classification describes strategic position only; it is not independent proof of a moat or valuation upside. Moat evidence in the filing is qualitative rather than quantitative. Zscaler describes a structurally unified platform in which more than 200 data centers, more than 950 issued and pending patents, and roughly 750 billion daily transactions create a data advantage that improves with scale. Switching costs are real but indirect: customers integrate identity, endpoint, and SIEM systems into the platform, which raises the cost of replacement, though no quantitative retention metric is disclosed in the cited excerpts. Brand and customer-concentration evidence is mixed; Zscaler's penetration of large enterprises is described in percentages rather than names, and unit-level customer concentration is not provided.

Industry structure is competitive. Legacy firewall and VPN vendors, integrated SASE platforms from networking incumbents, and adjacent pure-plays all compete for the same workload migration. Zscaler's positioning relies on architectural differentiation (cloud-native zero trust versus perimeter appliances), which is plausible but is the company's own characterization rather than independent verification. The available evidence does not include independent third-party benchmark data, channel checks, or pricing comparisons, which is a gap we flag rather than paper over. Net, we treat the moat as plausible but not yet proven by the available record.

Management and Capital Allocation

Capital allocation is the most observable discipline test. The 10-K discloses $1,062.9 million of federal net operating loss carryforwards, $600.4 million of state NOLs, and $188.8 million of federal R&D credits, which materially reduce future cash tax costs if profitability arrives. Long-term debt exists in the form of the 2028 Convertible Senior Notes referenced in the exhibit list and Note 10, with capped-call transactions disclosed in Exhibit 10.22. Share repurchases and dividends are not present in the trailing-18-month available SEC data, so we cannot evaluate buyback timing or dividend policy. The diluted-share count has grown from 149.6 million in fiscal 2024 to 160.2 million in fiscal 2026, a roughly 7% three-year increase that is dilutive in a way that needs to be watched given the high stock-based compensation.

Management commentary in the forward-looking-statements section emphasizes AI-driven demand, zero-trust adoption, and continued investment in growth. The September 2026 restructuring suggests that management is willing to reset cost structure, which is a positive capital-allocation signal. Conversely, four acquisitions in twelve months and rising capex indicate that management prefers to reinvest aggressively rather than return capital; that is internally consistent with a growth thesis but leaves the equity holder dependent on continued multiple expansion to earn a return.

Valuation and What the Market Already Expects

Market data as of September 4, 2026 places the share price at $177.80 and market capitalization at $28.75 billion. With the company carrying $928.4 million in cash and equivalents and no debt figure in the same-date available snapshot, the dated enterprise value is roughly the dated market cap adjusted only for cash. At trailing revenue of $3.35 billion, the market is paying about 8.6 times revenue and, on the available TTM free cash flow of $852.4 million, about 34 times free cash flow. These multiples are not facts but are mechanical observations of what the market is currently paying. The conclusion guardrail notes that the dated market capitalization is more than 20% above the deterministic base-case value, so the qualitative implication is that the market is pricing in more growth than the central case envisions. We discuss this implication qualitatively; the valuation analysis table in the next section is the sole source for the numerical scenarios.

Ten-Year Cash Flow to Fair Market Value

The starting free cash flow is the normalized SEC cash-flow proxy, while every growth rate, discount rate and terminal rate below is an explicit editorial assumption rather than company guidance. Each annual cash flow is forecast and discounted separately; terminal value is year-ten free cash flow multiplied by one plus terminal growth, divided by discount rate minus terminal growth, and then discounted back ten years. Fair market capitalization equals that explicit ten-year present value plus discounted terminal value and a same-date balance-sheet adjustment when available. If current cash and debt facts do not share one report date, the table shows the adjustment as unavailable and conservatively applies zero. The share count is derived from the dated market capitalization and share price so US shares and foreign ADRs use a consistent traded-security denominator.

In the reverse-DCF, holding the 9% discount rate and 3% terminal growth fixed, and solving only for one constant growth rate rather than using the base-case growth path, the current market capitalization implies roughly 11.8% annual free cash flow growth for ten years. This is a sensitivity framework, not a price target: the terminal-value share shows how strongly each result depends on assumptions beyond the explicit forecast. Negative margin of safety means the current market capitalization exceeds the scenario value.

Five Value-Investing Lenses

Benjamin Graham Lens

Graham's discipline demands a margin between price and a conservative estimate of intrinsic value, supported by a balance sheet that can absorb adversity. Zscaler's balance sheet carries $928.4 million in cash against an operating loss, with no same-date total-debt figure available in the available SEC data. Stockholders' equity of $2.60 billion includes $1.22 billion of goodwill and $214 million of finite-lived intangibles, so tangible book value is much smaller at $1.17 billion. The dated market capitalization is many times tangible book. With trailing free cash flow positive but GAAP earnings negative, Graham's earnings-power test is uncertain: free cash covers interest and reinvestment but GAAP losses consume deferred tax assets rather than generate them. There is no margin of safety between the dated price and the central valuation case; a famous brand and falling share price do not by themselves create cheapness.

Benjamin Franklin Lens

Franklin's discipline translates into thrift, opportunity cost, and patience. The question is whether reinvestment is producing more value than alternative uses of capital. Zscaler's $277 million trailing-twelve-month capex and four acquisitions in twelve months are aggressive reinvestment; the returns on that reinvestment are not disclosed in the cited excerpts, so we cannot verify the opportunity-cost calculation. With $841.6 million of stock-based compensation, the company is effectively buying labor with new shares at a price that may or may not be below intrinsic value; if the stock is overvalued, that compensation is dilutive in real terms, which would lower the discipline score. Conversely, the NOL stockpile reduces future tax cost and is a real asset, though one whose value depends on continued operating profitability, which the GAAP loss line currently does not demonstrate.

Warren Buffett Lens

Buffett would look at owner earnings, moat, and management. Owner earnings here, defined as operating cash flow minus total capital expenditure, were $852.4 million over the trailing twelve months; that is a clean number but includes heavy growth investment that we cannot split from maintenance. The moat argument is architectural, built around 200+ data centers, 950 patents, and 750 billion daily transactions, and is consistent with the kind of scale advantage Buffett admires; however, the available evidence is descriptive rather than independently verified, and unit-level retention or win-rate data is missing. Management's aggressive acquisition pace and willingness to do a September 2026 restructuring are signals of capital-allocation discipline, but the $841.6 million of stock-based compensation is dilutive in a way Buffett historically disliked. Net, the qualitative read is plausible but not yet a textbook Buffett holding.

Charlie Munger Lens

Munger would invert the thesis: what would have to be true for this to be a bad investment? First, growth in zero-trust adoption would need to slow materially; second, a competitor with a credible integrated offering would need to compress pricing; third, continued stock-based compensation at current scale would need to outpace cash generation and erode per-share value. The available evidence does not disprove any of these scenarios: growth has been strong but cyclical macro and IT-spend conditions are not directly observable in the excerpts, and competition is acknowledged in the forward-looking statements. Munger would also flag incentives: roughly $841 million of stock-based compensation creates a management bias toward share-price optimism, which is a real conflict when judging the central case. The bias check forces us to be skeptical of management-available narrative and to discount the bull case more heavily than the bear case.

Li Lu Lens

Li Lu would test the circle of competence and durability. The business is a recurring-revenue software platform with a single architectural model, which is straightforward to understand at a high level; the harder question is whether the moat is durable once integrated networking incumbents and adjacent security vendors respond. Culture evidence from the filing is positive on governance: PricewaterhouseCoopers audited internal controls, a code of conduct and insider-trading policy exist, and the September 2026 restructuring shows willingness to cut costs. What we cannot verify from available evidence is field-level customer feedback, win rates against named competitors, and the durability of pricing as AI workloads scale. Permanent loss risk is moderate: customer churn in enterprise software is real, and a renewed IT-spend downturn could compress growth. Within Li Lu's framework, this is a watchlist candidate rather than a fully verified circle-of-competence purchase.

Risks, Disconfirming Evidence, and What Would Prove This Thesis Wrong

Prominent growth narratives can amplify attention bias and the price investors are willing to pay before cash flows arrive. That does not negate the operating evidence, but it raises the burden of proof for valuation and makes execution shortfalls more costly. Three observable thesis breakers would force us to lower confidence sharply. First, a sustained deceleration of organic growth below the high-teens run-rate currently implied by the dated market capitalization would compress valuation; the available evidence shows revenue growth of 25% in fiscal 2026, but does not separate organic from acquisition contribution, and management's forward-looking statements emphasize growth uncertainty. Second, a structural deterioration in free-cash-flow margin below the current 25% would be a red flag; the rising capex and acquisitions are the most plausible sources of such deterioration. Third, a regulatory or competitive shock to zero-trust architecture, such as a major customer defection or a credible alternative platform, would threaten the moat narrative; we have no externally verifiable evidence to weigh against this. Disconfirming evidence already in the record includes the rising capex intensity, the heavy stock-based compensation, the widening operating loss in fiscal 2026, and the goodwill additions from multiple acquisitions. Opportunity cost is meaningful: a high-growth, unprofitable equity like this competes for capital with mature, cash-generative businesses that may offer more durable per-share compounding.

Investment Conclusion

At a dated share price of $177.80 and a dated market capitalization of $28.75 billion, Zscaler trades meaningfully above the deterministic base case, which implies the market is paying for sustained execution that the available evidence does not independently verify. Trailing free cash flow is robust at $852.4 million, the gross margin is high, and customer penetration is broad, but GAAP earnings remain negative, stock-based compensation is heavy, and acquisition intensity has risen. The qualitative implication of the gap between dated market cap and the central valuation case is that the market is pricing in a growth and margin trajectory that leaves limited margin of safety. We classify this as Overvalued at the current dated price, with the caveat that a sustained re-rating to a more conservative growth assumption would be required before we would consider a constructive stance. This analysis is for educational and informational purposes only and is not investment advice or a recommendation to buy or sell any security.