Research · Sep 3, 2026
[ZS] Zscaler Compounds Zero-Trust Security Platform Through Adoption And AI Security
Zscaler, Inc. is a San Jose, California-headquartered cybersecurity company that operates a cloud-native zero-trust security platform delivered as a service from a globally-distributed cloud rather than through on-premises security appliances, with the founding-cycle thesis that the migration of applications to the cloud and the shift toward remote and distributed work would render the traditional perimeter-based network-security model increasingly obsolete. Zscaler's zero-trust architecture secures the connection between a user and an application directly, regardless of where the user or the application is located, on the principle that no connection is trusted by default. The platform spans several principal areas: the Zscaler Internet Access service secures the connections from users to internet and software-as-a-service applications; the Zscaler Private Access service secures the connections from users to private applications; and the platform also includes data-protection, digital-experience-monitoring, and an expanding set of adjacent capabilities, with a subscription-based revenue model producing a recurring revenue stream. On selected various aggregate disclosure, the fiscal 2025 financial profile reflects total revenue at the scale characteristic of a leading cloud-security company, a non-GAAP operating margin profile that has expanded as the subscription base has scaled, and a balance-sheet position consistent with a well-capitalized software company. The cloud-native zero-trust security platform core franchise anchors revenue, supported by the platform producing a meaningful recurring subscription revenue base scaling with the customer base and per-customer adoption, by the zero-trust architecture producing architectural differentiation aligned with the structural cloud migration and distributed work, and by the platform-expansion strategy producing a structural growth vector through selling additional services to the existing customer base. The multi-cycle zero-trust adoption combined with the AI security drives the multi-year trajectory, with the zero-trust adoption reflecting the enterprise migration toward the zero-trust security model as the principal driver of addressable-market expansion, and the AI security reflecting both the new security requirements created by the growth of AI applications and the opportunity to apply AI within the security platform itself. Capital structure is conservative with a meaningful net cash position, and a capital allocation framework focused on continued reinvestment in the platform and the go-to-market organization. The bull case anchors on the zero-trust architecture leadership, the recurring-revenue model, and the platform-expansion vector; the bear case anchors on the competitive intensity, the growth-rate trajectory, and the valuation expectations embedded in a high-growth security equity.