Zscaler's Selloff Was About Next Year, Not This One

Zscaler holders watched their stock slide about 4.5% in a single session — right after the company posted its best quarter ever and wrapped its best year ever. The answer was never the numbers. It's the forecast, and what that forecast says about the year ahead.

Primer first: this story starts with the product, not the P&L. Zscaler runs the world's largest cloud-native “zero trust” security platform.

Translation: instead of plugging people into a corporate network and hoping the walls hold, it connects every user, device, workload — and now AI agent — directly to the one application they need. Security policy gets enforced inline on every single connection.

Attackers can't reach what they can't see. Once someone's inside, there's no network left to roam — no lateral movement, no open hallways. That's the whole trick, and it's now a $3.4-billion-a-year business.

Here's where it gets interesting for anyone watching the AI buildout. Agentic AI — software agents that act on their own, armed with credentials and real access to company data — is a brand-new attack surface. It's also a brand-new workload to secure.

An agent that goes rogue, or gets hijacked mid-task, is a threat no legacy firewall was ever built to imagine. Zscaler's answer: treat a machine agent exactly like a human identity. Verify who it is. Decide what it's allowed to touch. Connect it to precisely one application.

Management calls the company “the cybersecurity platform for the AI era.” Bold line. The booking numbers say it's landing.

So, about those numbers. Revenue hit $898.2 million in the fiscal fourth quarter — up 25% and comfortably ahead of the roughly $877 million consensus. Adjusted earnings of $1.19 a share cleared estimates by a dime — the tenth straight EPS beat.

Operating margin hit a record 24.3%, and gross margin held at 80%. Full-year free cash flow reached $779 million at a 23% margin — Rule of 40 math around 49. Customers paying more than $1 million a year now number 785, up 18%. By any sane measure, this was clean.

Then there's the line that makes this an AI story and not just another security print. Cumulative Security-for-AI bookings crossed $100 million over the past year. They jumped 50% quarter over quarter in Q4 alone. Roughly 70% of those wins also bought data security — the cross-sell engine humming.

Z-Flex, Zscaler's flexible consumption model, booked more than $770 million in contract value in the quarter. Up 60% sequentially, and past $1.7 billion for the year. That's what it looks like when customers scale their security exactly as fast as their AI deployments scale.

So what spooked the market? One metric: the ARR outlook.

Management guided FY27 ARR growth to roughly 17% — a genuine step down from FY26's 25%. ARR is the number the Street treats as the company's pulse. On the surface, a deceleration that steep reads like the growth story ending.

Zscaler's rebuttal: it's arithmetic, not demand. Last year's number included Red Canary's roughly $141 million of ARR landing all at once. Strip out the acquisition, and organic net new ARR actually accelerated — to 17% growth in Q4.

Context matters, too. Zscaler's shareholders got flattened in May, when a guidance reset sent the stock crashing about 32% in a single day — the worst session in company history. That scar tissue leaves holders trigger-happy.

Shares already traded roughly half off their 52-week high, down about 20% this year. The wider cyber complex slipped in sympathy too. Hand a jumpy crowd a headline metric that steps down, and this is what you get.

The next acts are already on the calendar. Agentic SecOps gets its launch webcast September 9; Investor Day follows October 6 — two chances for management to argue the AI-security thesis in full.

The wedge matters because Zscaler, CrowdStrike, and Palo Alto Networks are all sprinting at the same prize. Whoever owns security for AI agents gets first claim on the next decade of cyber spending.

So here's the read. The market didn't sell the quarter. It sold the optics of a decelerating headline number. The underlying engine accelerated, and the AI-security line is compounding at a pace most software companies would kill for — the market looked past both.

Records don't usually get punished like this. If autonomous agents really are the next attack surface — and the industry says they are — the 4.5% shrug looks less like a warning, more like a price of admission. To the story that's actually being told.

Disclosure: The Signal holds no position in ZS. Positions may change. This is not financial advice.