Zscaler’s 5% Valuation Gap Meets an AI Security Execution Test

Zscaler entered Google News with a tempting conflict: its shares could sit 5% below fair value as enterprise AI security spending expands.

That claim deserves attention, but not because 5% represents a decisive margin of safety. It matters because Zscaler now has measurable AI-related demand alongside a costly execution problem.

The company reported strong fiscal third-quarter growth and raised several full-year targets. Yet investors punished the stock after weaker cash-flow expectations and departures among senior sales leaders.

That tension creates a better question than whether one valuation model is correct. Can Zscaler convert demand for AI security into durable growth without losing efficiency or disrupting sales execution?

Palo Alto Networks, CrowdStrike, Cloudflare, and other security vendors face the same opportunity. Each wants to become the control layer between enterprise users, AI agents, applications, and sensitive data.

Zscaler’s advantage comes from inspecting traffic through its cloud-delivered Zero Trust Exchange. Zero trust means every connection must be continuously verified rather than trusted because it originated inside a corporate network.

The company argues that this architecture also fits autonomous AI agents. Those agents can reach applications, invoke tools, retrieve data, and make decisions without constant human approval.

However, the investment case depends on more than an attractive market story. The central conflict is AI security demand versus Zscaler’s ability to sell, deploy, and monetize that demand efficiently.

What the Google News Valuation Claim Actually Says

The 5% figure is a model output, not an independently observed fact about Zscaler’s value.

The supplied Google News headline points to a Simply Wall St assessment that Zscaler could be about 5% undervalued. That conclusion reflects assumptions about future revenue, margins, cash generation, and the rate used to discount future results.

Small changes to those assumptions can eliminate a narrow valuation gap. A lower long-term growth rate, weaker margin expansion, or higher discount rate could move estimated fair value substantially.

Simply Wall St’s wider valuation assessment has also presented more bullish scenarios. Those scenarios lean on continued zero-trust adoption and rising demand for AI security.

The publication describes its calculations as analytical estimates rather than investment recommendations. Its valuation pages can also change when market prices, analyst forecasts, or financial results change.

That context is essential. A Google News headline compresses a complex model into one accessible percentage, but the headline cannot preserve every assumption behind it.

The figure also looks less decisive when placed beside Zscaler’s recent share volatility. Investors sharply repriced the company after its fiscal third-quarter report, despite results that exceeded several stated expectations.

That reaction suggests the market was not focused solely on current revenue. Investors were also evaluating the quality of growth, the stability of the sales organization, and future capital requirements.

The 5% estimate should therefore serve as a starting hypothesis. It says the market price and one modeled fair value remain relatively close.

It does not establish that the market has overlooked Zscaler’s AI opportunity. Investors already recognize that AI creates new identities, traffic flows, permissions, and data-security requirements.

Instead, the disagreement concerns how much of that opportunity Zscaler can capture. It also concerns how quickly the company can capture it without sacrificing free cash flow.

Zscaler’s recent operating results provide evidence for both sides. Revenue and annual recurring revenue continued growing, but the company lowered its expected free-cash-flow margin.

Annual recurring revenue, or ARR, measures the subscription revenue expected from active contracts over a year. It offers a forward-looking view, although acquisitions and contract timing can affect comparisons.

Free cash flow measures cash remaining after operating expenses and capital spending. It matters because accounting revenue does not show how much cash a growing software company must reinvest.

These two measures now tell different parts of the story. ARR supports the demand thesis, while reduced cash-flow expectations highlight the cost of pursuing that demand.

A 5% valuation gap cannot resolve that conflict. The next several quarters must show whether AI security becomes an efficient growth engine or an expensive expansion program.

AI Security Demand Gives Zscaler Measurable Evidence

Zscaler’s AI thesis has moved beyond product announcements because customers are already contributing material recurring revenue.

Zscaler reported fiscal third-quarter revenue of $850.5 million, up 25% from the prior year. ARR also increased 25% to $3.525 billion.

Those headline numbers include Red Canary, the managed detection and response company Zscaler acquired. Excluding Red Canary, ARR grew 21% to $3.398 billion.

The distinction matters because acquired revenue does not demonstrate organic customer demand. Even after removing that contribution, however, Zscaler maintained growth above 20%.

The company’s third-quarter results also showed $166 million in net new ARR. Red Canary contributed $127 million of total ARR at quarter-end.

Zscaler’s data-security business supplied another encouraging signal. Data Security ARR passed $500 million and grew more than 30% year over year, according to its shareholder materials.

Data security includes controls that identify sensitive information and restrict how users or applications can move it. Generative AI increases this requirement because prompts can expose confidential records to external services.

An employee might paste customer information into a public chatbot. An internal assistant might retrieve documents beyond the user’s normal permissions. An autonomous agent could send regulated data through an unapproved connector.

These are operational risks, not abstract predictions. Companies need to discover AI services, inspect prompts, enforce access rules, and track which agents can reach particular information.

Zscaler says its AI Protect portfolio addresses those jobs. The suite includes AI asset discovery, policy guardrails, data protection, and red-team testing for AI applications and agents.

The company has also introduced AI Broker, Endpoint AI Security, and AI Access Graph. These products target communication between agents, activity on employee devices, and relationships among identities, applications, and data.

AI Access Graph creates a map of those relationships using security metadata. The intended benefit is identifying excessive permissions or unexpected paths to sensitive information.

This approach fits Zscaler’s existing position in the traffic path. Its service already mediates connections among users, devices, applications, and cloud workloads for many customers.

Adding AI agents extends that identity model. An agent needs authorization, limited access, continuous inspection, and a record of its actions, much like a human user.

Chief executive Jay Chaudhry has framed agents as a new weak link. In a June interview about agent security, he argued that agents can misuse permissions without direct user action.

The company says its platform processes more than 750 billion requests daily. That scale could provide useful context for detecting unusual behavior, although scale alone does not guarantee accurate detection.

Zscaler must still show that its controls recognize malicious activity without blocking legitimate work. Excessive alerts or latency can make a security product harder to deploy broadly.

Even so, the financial evidence supports a real demand signal. AI-related security needs appear to be strengthening adjacent businesses such as data protection and zero-trust access.

The company’s fiscal second-quarter performance offers another reference point. Revenue rose 26% to $815.8 million, while ARR reached $3.359 billion.

Operating cash flow reached $204.1 million, and free cash flow was $169.1 million. Zscaler also raised its fiscal-year ARR growth outlook to approximately 24%.

Its second-quarter release connected that growth directly to organizations adopting AI and agentic workflows. That explanation remains a company assertion, but subsequent growth gives it some support.

The clearest bullish argument is therefore not that every AI application needs a new security category. It is that AI increases traffic and data exposure across categories Zscaler already sells.

That creates several routes to expansion inside existing accounts. A customer can add data-loss prevention, agent monitoring, application protection, or managed threat detection.

Cross-selling can lower the cost of entering a new market because Zscaler already has customer relationships and deployment infrastructure. It can also raise contract complexity and lengthen approval cycles.

The opportunity is credible, but the operating mechanism remains demanding. Selling another module is easier than proving that every module delivers enough value to survive budget reviews.

AI Spending Meets a Sales Execution Problem

The primary contest is not Zscaler against one competitor; it is the company’s AI-security promise against its own execution requirements.

Zscaler raised its fiscal 2026 revenue outlook after the third quarter. It projected approximately $3.330 billion in annual revenue, representing growth near 25%.

The company also forecast ARR between $3.740 billion and $3.749 billion. That range implied approximately 24% growth.

Non-GAAP operating income expectations increased to between $755 million and $757 million. Non-GAAP measures exclude selected expenses and should not replace the company’s GAAP results.

At the same time, Zscaler reduced its expected free-cash-flow margin to between 22.8% and 23.3%. Its previous expectation ranged from 26.5% to 27%.

Management attributed the reduction to higher capital spending, including infrastructure required for growing traffic and new services. Capital expenditure was expected to reach a high-single-digit percentage of revenue.

That investment could support future growth. It also pushes part of the AI opportunity’s cost into the present while the resulting revenue remains uncertain.

The company recorded a GAAP operating loss of $29.6 million for the quarter. That was 3% of revenue, compared with a $25.4 million loss one year earlier.

Free cash flow rose 14% to $136 million. Operating cash flow fell to $198 million from $211.1 million in the prior-year quarter.

These results do not describe a business in operational distress. They do show why investors resisted treating stronger revenue guidance as an uncomplicated victory.

Two senior sales leaders departed near the end of the quarter. Management responded by taking a more cautious approach to near-term guidance during the leadership transition.

One replacement had already been appointed, while another search remained underway. The company’s sales organization must absorb those changes while introducing a wider product portfolio.

Security platforms are not bought like ordinary workplace software. Large deployments involve technical evaluations, policy changes, integrations, procurement reviews, and extensive testing.

Agentic AI adds another layer. Buyers must decide which teams own the risk, which agents need monitoring, and whether existing security budgets can fund new controls.

A strong product can still underperform if account teams cannot explain its role. Sales specialists need to connect technical capabilities with measurable risk reduction.

The company’s competitive environment makes execution more important. Palo Alto Networks sells network security, secure access, cloud protection, and security operations through an increasingly consolidated platform.

CrowdStrike approaches the market from endpoint protection and security operations. Cloudflare combines network services, application security, and zero-trust access across its global infrastructure.

Microsoft can bundle identity, endpoint, cloud, and productivity security within relationships many enterprises already maintain. That distribution can influence purchasing even when specialists offer different technical strengths.

Zscaler’s pure cloud architecture remains a point of differentiation. However, customers often prefer fewer vendors, making portfolio breadth and commercial packaging as important as architecture.

The company has responded through broader platform offerings and flexible licensing. Those moves can reduce purchasing friction, but they can also make bookings harder to interpret.

A flexible contract may let customers shift spending among products. That can improve adoption while obscuring which newer services are driving incremental demand.

Zscaler therefore needs product-level evidence. Investors should look for sustained AI-security ARR, higher data-security penetration, and stronger organic net new ARR.

Total ARR alone becomes less informative when acquisitions contribute to growth. The third-quarter disclosure separating Red Canary was helpful and should remain standard.

The company’s quarterly filing also details risks around competition, long sales cycles, acquisitions, and changing customer demand. Those disclosures apply directly to the AI expansion.

Acquisitions can fill product gaps faster than internal development. They can also create integration costs, overlapping systems, and customer confusion.

Red Canary expands Zscaler into managed detection and response, where analysts investigate suspicious activity for customers. That service could complement automated AI controls when alerts require human judgment.

The acquisition also complicates growth comparisons. Zscaler must show that combining services creates durable expansion rather than temporarily adding purchased ARR.

This is where the Google News valuation narrative becomes more demanding. AI spending can support a higher long-term growth assumption, but execution failures can reduce that assumption just as quickly.

A narrow estimated discount offers limited protection against missed guidance or weaker organic bookings. Software valuations respond sharply when investors revise future growth expectations.

The company does not need to defeat every rival. It does need to prove that customers view its AI products as extensions of essential controls rather than optional experiments.

That proof should appear in renewals, module adoption, organic ARR, and cash generation. Product announcements alone cannot settle the valuation debate.

What the 5% Gap Does Not Prove

A modest modeled discount does not prove that Zscaler is cheap, nor does a sharp share decline prove that its business is weakening.

Valuation models convert uncertain forecasts into precise-looking numbers. The mathematical output can appear authoritative even when the underlying estimates cover many possible outcomes.

For Zscaler, the largest uncertainties sit beyond the next quarter. They include long-term growth, operating margins, competitive pricing, capital intensity, and stock-based compensation.

AI security could increase Zscaler’s addressable market. It could also encourage customers to redirect spending from older modules instead of adding entirely new budgets.

That distinction determines whether AI produces incremental revenue. Repackaging existing controls under an AI label would offer less upside than winning new workloads and new buyers.

Zscaler’s data-security growth provides encouraging evidence, but it does not isolate AI’s contribution. Data-protection demand also comes from cloud migration, regulation, and vendor consolidation.

Management’s statements about AI demand should therefore receive reportorial treatment. They describe what the company sees in its pipeline, not independently audited market share.

Third-party analysts also disagree about the stock’s prospects. Some view zero trust and AI security as durable growth drivers, while others focus on slower organic growth and sales disruption.

Morningstar’s security outlook identifies Zscaler as an important zero-trust provider. It also treats valuation and competitive uncertainty as separate questions from product quality.

That separation is useful. A strong company can be a poor investment at an excessive valuation, while a volatile stock can still represent a healthy business.

The market’s post-earnings response reflected this difference. Zscaler beat several quarterly expectations, yet forward execution concerns dominated the immediate interpretation.

One concern involves organic growth. Excluding Red Canary, third-quarter ARR increased 21%, below the reported 25% total growth rate.

Another involves cash conversion. Higher infrastructure spending reduced the expected free-cash-flow margin even as management raised revenue and operating-income forecasts.

A third concern involves sales continuity. Leadership changes can delay large transactions because enterprise deals depend on account planning and executive relationships.

None of those risks invalidates the AI-security thesis. Together, they raise the evidence required before assigning substantial value to that thesis.

User experience also matters. Traffic inspection can introduce latency, access interruptions, or policy conflicts when configuration is poor.

Security teams may accept some friction to reduce risk. Employees and developers may route around controls if those controls repeatedly block legitimate tools.

AI agents make that balance harder. An agent can execute hundreds of actions faster than a human, so delayed inspection can impair performance.

Permissive inspection creates the opposite danger. A compromised agent could reach data or tools before a security team recognizes the behavior.

Zscaler says its inline architecture can enforce decisions as traffic moves. Buyers still need independent testing that covers accuracy, latency, scalability, and integration complexity.

The company must also prove its products can recognize agent identities consistently. Enterprise environments contain many model providers, orchestration systems, plugins, and custom applications.

Standards such as Model Context Protocol can simplify connections between AI systems and tools. They also create common pathways that attackers can study and misuse.

Zscaler’s brokers and access graph address parts of this problem. Their commercial value depends on coverage across heterogeneous systems, not only preferred technology partners.

Regulation adds another uncertainty. Enterprises operating across the United States and Europe face different privacy, localization, and accountability requirements.

Compliance can increase security spending. It can also lengthen deployment cycles and require regional infrastructure, documentation, and contractual commitments.

The bull case assumes these demands favor a large platform with extensive infrastructure. The cautious case assumes compliance and competition will raise costs alongside revenue.

A Google News reader should not choose between those positions based on one percentage. The relevant question is which assumptions receive support from future disclosures.

A 5% estimate could be conservative if AI-security ARR accelerates while organic growth and cash margins improve. It could be optimistic if sales disruption persists or infrastructure costs remain elevated.

Investors also need to consider the estimate’s date. Both market prices and analyst forecasts move, so the calculated discount may no longer apply when the article is read.

That time sensitivity is especially important for volatile software shares. A single trading session can exceed the entire valuation gap described in the headline.

The responsible conclusion is limited. Zscaler has enough operating momentum to justify deeper analysis, but not enough evidence to turn a 5% model difference into certainty.

Three Signals That Will Decide the Next Zscaler Verdict

The next valuation judgment should follow three measurable signals: organic ARR, sales stability, and cash-flow recovery.

The first signal is Zscaler’s organic net new ARR. Investors need a clear view that excludes Red Canary and any future acquisition contributions.

Reported ARR grew 25% in the third quarter, while ARR excluding Red Canary grew 21%. The gap is understandable, but the organic figure better tests underlying demand.

If organic net new ARR accelerates, it would strengthen the claim that AI security and data protection are expanding customer spending. Continued deceleration would weaken that claim.

Product-level disclosures would make the signal more useful. Zscaler should identify how AI-security contracts contribute to new business, renewals, and module expansion.

The second signal is sales execution after the leadership departures. Management must fill the remaining role and maintain large-deal momentum during the transition.

Watch for commentary about deal timing, sales productivity, pipeline conversion, and customer expansion. Repeated references to delayed transactions would indicate that disruption remains unresolved.

Stable or improving conversion would support management’s explanation that the caution was temporary. It would also reduce the risk attached to the widened product portfolio.

The third signal is free-cash-flow margin. Zscaler lowered its fiscal-year expectation because capital spending increased.

Higher investment is defensible if it supports lasting traffic growth and new paid services. The company should eventually show that infrastructure growth produces operating leverage.

A rebound in cash-flow margin, alongside sustained revenue growth, would strengthen the undervaluation argument. Further reductions would suggest that AI expansion carries more capital intensity than investors expected.

These three signals should be evaluated together. Strong ARR without cash improvement might indicate expensive growth, while higher cash flow with weak ARR might signal reduced investment or demand.

Sales stability connects the other two. Effective execution determines whether product capability becomes recurring revenue and whether infrastructure spending produces an adequate return.

The next fiscal report will also reveal whether management’s full-year guidance remains achievable. The company currently expects revenue growth near 25% and ARR growth near 24%.

Investors should avoid treating a single quarterly beat as final proof. Enterprise contracts can shift between periods, and acquisitions can alter comparisons.

Competitive responses also deserve attention, but they remain supporting evidence. Palo Alto Networks, CrowdStrike, Microsoft, and Cloudflare will continue expanding AI-related controls.

The decisive test is whether Zscaler can grow within that environment. Market expansion can support several vendors, provided each delivers distinct operational value.

For enterprise buyers, the practical question is equally concrete. Does Zscaler reduce exposure across users, agents, applications, and data without adding unacceptable complexity?

Security leaders should request measurable deployment results. Useful evidence includes blocked data exposure, reduced investigation time, policy coverage, latency, and false-positive rates.

Developers should ask how controls affect agent workflows. They need predictable access policies, useful error messages, and audit trails that explain why an action was blocked.

Knowledge workers should care because AI agents can inherit access to documents, messages, and internal applications. One excessive permission can expose far more information at machine speed.

The Google News claim is therefore best read as an invitation to inspect the assumptions. It is not a conclusion that Zscaler shares offer a guaranteed return.

Zscaler has established a credible AI-security demand story through revenue, ARR, and data-security growth. Its reduced cash-flow outlook and sales transition keep that story under pressure.

The next one to three months should provide better evidence. Organic ARR will measure demand, sales disclosures will measure execution, and cash flow will measure the cost.

Readers following Zscaler should save those three metrics before reacting to the next headline. If all three improve together, the 5% discount thesis gains substance.

If they diverge again, the valuation debate will remain unresolved. The better question for the next Google News update is simple: did AI security create efficient growth, or merely a larger promise?