PANW, NET, ZS: Cybersecurity Rally Creates One Buy and Two Reasons to Wait

Three names, one headline rally — but three very different risk/reward setups.

Palo Alto Networks has nearly doubled over the past year and now trades at a multiple that leaves no room for execution slip-ups. Cloudflare just delivered a strong beat-and-raise but sits at a price-to-sales ratio that assumes flawless delivery for the next several years. Zscaler, by contrast, is the actual buy-the-dip candidate: its stock has roughly halved from its 52-week high, revenue growth remains in the mid-20s, and the valuation reset ran much further than any real deterioration in the business.

The sector-wide move higher is real. But the investing decision isn't whether cybersecurity is attractive — it's which of these three names has actually reset enough to justify the entry.

Palo Alto Networks (PANW): Priced For Perfection After a Disappointing Guidance Miss

PANW is up 97.5% year-to-date and roughly 118% on a rolling annual basis. It currently trades at $363.86, near the top of its 52-week range ($139.57–$376.98), with a market capitalization of $296.5 billion. That makes Palo Alto the single largest pure-play cybersecurity company by a wide margin — nearly three times Zscaler and three times Cloudflare.

The valuation tells you how much future success investors have already demanded. At 28 times trailing sales and 352 times trailing earnings, the stock is pricing in years of flawless platform expansion, successful CyberArk integration (a $25 billion acquisition), and sustained double-digit revenue growth.

The problem: the latest earnings report showed signs the market doesn't want to see. In fiscal Q2 2026 (ended January), revenue grew 15% year over year to $2.6 billion, a deceleration from the high-teens-to-low-20s pace in prior quarters. While the company beat non-GAAP EPS ($1.03 versus $0.94 expected) and reported adjusted EPS of $0.85, the Q3 EPS guidance of 78–80 cents fell well short of the 92-cent consensus. Shares fell 7% on the release.

That gap between current growth and embedded expectations is the core issue. A $296.5 billion market cap at 15% revenue growth demands that every metric — margin expansion, integration synergy, subscription migration — executes without a hitch. The company's free cash flow is genuinely strong at $3.8 billion TTM with a 36% FCF margin, but the forward P/E of 262x means earnings growth has to stay exceptional for years to justify today's price.

The next catalyst is the September 1 earnings report. If Q3 fiscal results confirm that the guidance miss was a one-time anomaly and the CyberArk integration is on track, PANW can hold its ground. But any further deceleration, integration delay, or margin compression at this valuation invites a painful repricing. At 28x sales, this is a stock where the downside from a miss far exceeds the upside from another average quarter.

Rating: Avoid. Wait for a pullback that creates margin of safety.

Cloudflare (NET): Accelerating Growth, But the Multiple Assumes a Perfect Future

Cloudflare reported a standout Q2 on August 6th, beating revenue estimates... at $696.1 million and growing 36% year-over-year — the third consecutive quarter of acceleration. Non-GAAP EPS of $0.29 beat the $0.27 consensus. Remaining performance obligations grew 35% year-over-year. Full-year revenue guidance was raised to $2.87 billion from $2.81 billion, and full-year non-GAAP EPS guidance rose 5% to $1.26.

The stock responded accordingly, jumping 14.9% and hitting a new 52-week high of $324.73 on August 7th. The market cap now sits around $104 billion.

Here's what the beat doesn't tell you. Cloudflare trades at approximately 42 times trailing sales. That is not a multiple justified by current growth alone — it requires sustained acceleration, margin expansion, and successful monetization of the "agentic internet" thesis that CEO Matthew Prince described on the earnings call. Prince framed AI agents querying thousands of sites as creating exponential growth in billable network traffic compared to human visits. That's a compelling narrative, but it's still a narrative.

The operational details raise questions. Gross margin declined to 73.1% from 76.3% a year ago, and the decline is structural: as Cloudflare shifts toward higher-compute developer products, each dollar of revenue costs more to deliver. GAAP operating loss widened to 29.6% of revenue from 13.1% a year ago, driven by a $150.7 million restructuring charge tied to a 20% workforce reduction. Free cash flow margin fell to 8% in Q2 from 13% in Q1, as heavy capital expenditures support rising AI inference demand.

Then there's the growth curve itself. Q3 guidance of $736–$737 million implies roughly 31% year-over-year growth, a step down from Q2's 36%. Management attributed this to conservative buffering, but it's still a deceleration after three quarters of acceleration.

Cloudflare has $4.16 billion in cash and a genuine platform story. The RPO growth of 35% validates real forward demand. But at 42x sales, the stock has priced in an almost flawless two-year path: growth stays above 30%, gross margins stabilize, the agentic internet thesis converts to visible revenue, and the restructuring pays off without execution disruption. Any one of those assumptions failing invites sharp multiple compression.

Rating: Hold. The business is strong but the entry point demands near-perfect execution over years you haven't seen yet.

Zscaler (ZS): The Actual Valuation Reset

Zscaler is the name in this group where the selloff has genuinely created an opportunity. The stock trades at $168.68, roughly 50% below its 52-week high of $336.99 and down 37% on a rolling annual basis. Year-to-date, it's down 25%. The market cap has contracted to $27.3 billion.

The business has not contracted with the stock. In fiscal Q3 2026 (ended April), revenue grew 25% to $850.5 million. ARR grew 25% to $3.525 billion. Non-GAAP operating margin hit a record 23%. Free cash flow was $136 million (16% of revenue), and FCF growth year-over-year stands at 28.8% on a TTM basis.

The stock has more than halved since its peak. Revenue growth has stayed at roughly 25% through the decline. The valuation is now 8.6 times trailing sales — less than half PANW's 28x and a fraction of Cloudflare's 42x. Free cash flow of $890 million TTM gives the stock a meaningful cash yield against its current enterprise value of $25.4 billion.

Zscaler is still losing money on a GAAP basis — operating margin is negative 4.7% before stock-based compensation and amortization — but so were most SaaS growth stocks at their peaks. The non-GAAP path is clearly positive at 23% operating margin and climbing, and the FCF machine is running. The balance sheet is clean: $982 million in cash, a net cash position of $1.84 billion.

The risks are real. The company cut through restructuring, and organic ARR growth excluding the Red Canary acquisition was 21% — still solid, but noticeably below the headline 25%. The Symmetry Systems acquisition (targeting AI agent governance) and the broader push into AI security products carry integration risk. And Zscaler's next earnings report on September 3rd needs to confirm that the growth trajectory holds after two consecutive quarters of guidance raises.

But the math works differently here than it does for PANW or NET. At 8.6x sales, Zscaler doesn't need flawless execution. It needs to continue doing roughly what it's already doing — 24–25% revenue growth, expanding margins, positive and growing free cash flow — and the stock has substantial room to re-rate. The valuation reset was driven by broad software multiple compression and AI-security skepticism, not by a fundamental break in the business.

Rating: Buy. The valuation reset ran further than the business warranted.

The Decision

The Citrini headline treats the cybersecurity rally as a single story. It's not. PANW is up 118% and priced for perfection at nearly $300 billion. NET just delivered impressive growth but trades at a 42x sales multiple that has already assumed years of flawless execution. ZS is the only name where the stock has fallen faster than the fundamentals declined, creating a genuine gap between price and business quality.

The next earnings catalysts come fast: PANW on September 1st, Zscaler on September 3rd. Palo Alto needs to prove its slowdown wasn't structural. Zscaler needs to confirm the growth path holds. Either way, the entry point for each stock tells you which investor has the easier job.

Summary ratings: PANW — Avoid. NET — Hold. ZS — Buy.