Zscaler Is the Cheap Growth Name in Security Now. One Number Decides if That's True

Zscaler (ZS) has climbed about 49% from the $114.63 low it tagged right after its May earnings report, trading near $170 in Tuesday's session. The stock is still down roughly 24% on the year and sits about halfway below its $336.99 peak from last fall. Both things are true, and the instinct to pick a side — crash story or comeback story — is exactly the instinct to resist. The reason the stock is up is that its price-to-sales multiple collapsed. The reason that matters is what Zscaler reports on Sept. 3.

The May crash was a growth reset, not a broken quarter

Start with what actually happened, because the headline and the mechanism disagree. On May 26 Zscaler reported revenue up 25% year over year to $850.5 million, a record 23% non-GAAP operating margin, and adjusted EPS of $1.08 against roughly $1.01 expected. Then the stock fell more than 30% the next day, its worst session ever.

The quarter was not the problem; the reset was. Management guided fiscal 2027 annual recurring revenue (ARR) growth to 16–17%, roughly halving the ~24% pace it was still guiding for fiscal 2026, and CFO Kevin Rubin called it a "prudent approach" after the company lost two sales leaders. Add Zscaler's warning that capital spending would rise by roughly 200 basis points of revenue in fiscal 2027 on memory-price inflation tied to AI infrastructure, and the Street's reaction becomes legible: a growth stock had just been told its growth rate would roughly halve in a year while its cost outlook worsened.

The deceleration is visible even inside the reported numbers. Total ARR rose 25% to $3.525 billion, but about $127 million of that base came from the Red Canary acquisition that closed in August 2025. Stripping it out, ARR grew 21% and organic net-new ARR grew just 14%. The 16–17% fiscal 2027 guide is set on a base that still includes Red Canary. The business is genuinely slowing faster than the headline suggests — which is exactly why the stock's multiple had room to fall.

The multiple reset is the story

Here is the factor change worth paying attention to. Zscaler now trades at about 8.7x trailing sales and roughly 8x enterprise value to sales, down from on the order of 20x trailing sales at the peak less than a year ago. Against the natural security comparison set, that multiple is now at the bottom of the group: CrowdStrike trades at about 37.8x sales, Palo Alto Networks at about 26x, and Fortinet at about 15x. Even Okta, a far slower grower, sits essentially at the same 7.8x revenue multiple. Whatever label the narrative prefers — AI disruption, platform competition, sales churn — the quant outcome is that the market now prices Zscaler's mid-20s revenue growth and ~28% free-cash-flow margin at a lower revenue multiple than peers growing no faster, and at a fraction of what Zscaler itself commanded a year ago.

The profitability side holds up. Non-GAAP operating margin hit a record 23%, free cash flow was $136 million in the quarter — roughly $890 million over the trailing twelve months, a ~28% margin — and the balance sheet carries more than $1.8 billion of net cash against a healthy 186% quick ratio. The company still posts small GAAP losses ($13.9 million last quarter), almost entirely the accounting cost of generous stock compensation, so the gap between reported and adjusted profit is a dilution and quality topic rather than a solvency one.

The one genuine shadow in the quality column is the cash-flow guide. Zscaler cut its fiscal 2026 free-cash-flow margin target to about 23% from roughly 27% because capital spending is now running in the high single digits of revenue. That is a real margin cost from building AI-era capacity, and it removes a little of the shine from what is otherwise an unusually cash-generative business for the group.

Timing factors: momentum improving, revisions split

Three months ago this stock was in freefall below $120, momentum was a washout, and the revision stream was one downgrade after another. Today the read is a comeback that is real but unfinished. The stock is above its 50-day average (~$153) but still below its 200-day (~$177), with RSI near 52 — supportive short term, not yet confirming a sustained turn.

The analyst stream tells the same split story. Evercore cut the stock after the report and later added it to a tactical underperform list, wary of the growth reset and leadership churn. Meanwhile KeyBanc lifted its target to $210 in late August, JPMorgan to $215, and Barclays to $192, and 34 of 45 covering firms still carry a Strong Buy rating. AInvest's aggregate signal also labels ZS a Buy with a 9.73/10 fundamental rating; treat that as a mechanical cross-check rather than a named analyst view, since its contributors and scoring are not disclosed. The aggregate has stayed constructive through the whole reset — the real disagreement is about the credibility and timing of the fiscal 2027 number, not about whether the business is durable.

What Sept. 3 changes

That is the setup for the Sept. 3 fiscal fourth-quarter report, due after the close against a consensus of roughly $879 million in revenue. The number the market is really waiting on is not the quarter — it is whether fiscal 2027 still looks like 16–17% ARR growth when sales leadership has had time to stabilize. If the guide holds, today's multiple is roughly fair for a decelerating but highly profitable compounder, and the May crash did most of its job. If it walks up, or organic net-new ARR firms, the case that the sell-off overshot gets real evidence instead of vibes.

In portfolio terms, this is an offense-sleeve, high-beta growth position: it wins if AI-driven security spend and SASE adoption keep accelerating, it hedges nothing, and it belongs on the growth side of a barbell, where durable cash-flow names on the other side balance its beta. The factor stack reads "cheap relative to the group, growth positive but decelerating, momentum improving but below its long-term trend." That is a watch-list setup with, at most, a starter position sized for the timing risk — not a dip to aggressively average into, and not a broken business to cut. Hold is not Sell, and the Sept. 3 number, not the recent climb, is the trigger that tells you which way to lean.