The Ledger / ResearchPrivate

ZSZscaler, Inc.

Cluster cyber software Coverage sec_domestic CIK 1713683 owner request, no thesis · First logged: 2026-09-19

Stages closed8 of 10Worked and gated by the routine.
Carried to a cluster0Owned by a cluster pass — listed under Sources.
Open with you2Conviction, buy price and size are never the routine’s.
Last worked19 Sep 2026The date of the most recent dossier.

Where this name stands

8 of 10 stages closed

ClosedCarried forwardOpen with the ownerFailedNot started

Next action

read the Investor Day targets against the 17% FY27 guide

Open with the owner

product/expert conversation, thesis conviction, buy price and size

Failed gates

none; S0 liability test scores 0

StageWhat it coversStateWhat the run found
S0Universe & fitClosed3/4 — lock-in 1, unscrapeable telemetry 1, liability 0, bottleneck 1; gate met (owner checks dropped 2026-09-21)
S1Source taggedClosed
S2Kill testClosed25% growth, 80% GM, net cash, FCF+; flag: SBC $822m ≈ FCF $779m, still a GAAP loss
S3Filings deep diveClosed(partial) — 10-K excerpts, proxy, Q4 FY26 call in full; 10-K not read end to end
S4Industry/supply mapClosed10-K names only categories; Palo Alto, CrowdStrike, Fortinet named by Morningstar
S5Ownership checkClosedproxy + 13F Q2-26 + Form 4s; no ATM program captured in ~13 months of filings (Equibles 2026-09-20; absence is not proof)
S6ScuttlebuttClosed(weak) — Glassdoor, Gartner, competitor blog, broker partner checks; expert call open OPEN (user)
S7Written thesis + testOpen with the ownerOPEN (user) — draft in dossier-2026-09-19.md; framework not yet run
S8Valuation & sizingOpen with the ownerOPEN (user) — ~7.7x EV/FY27 revenue, ~33x EV/FCF, SBC-adjusted FCF ≈ 0
S9Watchlist/monitoringClosedInvestor Day 2026-10-06; Q1 FY27 call 2026-11-24

Kill criteria

Specific and testable, from the dossier’s evidence
  • Organic net new ARR growth below 10% in any two consecutive quarters
  • NRR below 112%
  • Q1 FY27 capex guide above low teens % of revenue
  • Another senior sales departure before 1H FY27 ends

Sources

11 documents cited by the connection map

What this profile was read from. Every edge on the map below cites one of these keys and a locator inside it; anything the run took from background knowledge or a search summary is marked as such in the dossier text rather than listed here.

KeyDocumentWhere it came fromRetrieved
10K-FY26Zscaler 10-K for FY ended 2026-07-31, filed 2026-09-03Edgar via Bigdata.com doc B794EA8C16EAB2FA398E06ABCAC83AC72026-09-19
DEF14A-25Zscaler DEF 14A filed 2025-11-21Edgar via Bigdata.com doc FFA3E80D4FE57D8D2FF3DB77EFE40C7F2026-09-19
AGM-262026 Annual Meeting transcript 2026-01-12Quartr via Bigdata.com doc 17A1E27686AB9790169FA5560033E2222026-09-19
Q4-CALLQ4 FY26 earnings call 2026-09-03Alpha Vantage EARNINGS_CALL_TRANSCRIPT ZS 2026Q4; Quartr via Bigdata.com doc DF6C3F4792229D084D3982B7201945832026-09-19
Q3-CALLQ3 FY26 earnings call 2026-05-26Quartr via Bigdata.com doc AB1891B363082AFA66518238F5CD2FD12026-09-19
13F-Q2-26Fund holdings, reporting quarter 2026Q2WSRA via Bigdata.com company tearsheet, entity D44D332026-09-19
AV-INSIDERInsider transactions from 2025-09-01Alpha Vantage INSIDER_TRANSACTIONS ZS2026-09-19
PR-SOCPress release 2026-09-09, Zscaler launches Agentic SOCPubT via Bigdata.com doc 16B26F933ED8ED483AC543AF5F20C5D92026-09-19
CONF-0603Investor conference transcript 2026-06-03Quartr via Bigdata.com doc 8FA49E5E21F5829FD66AF9A8F9F198562026-09-19
CONF-0609Customer/investor event transcript 2026-06-09Quartr via Bigdata.com doc 7D882E426C03900C3AAAC6999C3770BA2026-09-19
NEWSNamed news item; the edge locator names outlet, date and doc idBigdata.com premium news2026-09-19

Connection map

52 edges · 45 nodes · 11 documents

Every edge carries the document it was read from and where in it. Kinds in use: holds (10), officer of (7), director of (7), acquired (6), competitor (3), technology partner (2), event (2), key person risk (1), context (1), governance structure (1), shareholder proposal (1), insider transaction (1), issuer of (1), auditor of (1), counsel to (1), channel concentration (1), channel partner (1), partner and competitor (1), supplier dependency (1), customer of (1), regulator of (1), litigation watch (1).

FromLinkToAs ofEvidence
Jay (Jagtar Singh) Chaudhryofficer ofZS2026-09-0310K-FY26 — signatures page (chunk 425)
Jay (Jagtar Singh) Chaudhrykey person riskZS2026-09-0310K-FY26 — Risk Factors, key personnel (chunk 127)
Kevin Rubinofficer ofZS2026-09-0310K-FY26 — signatures page (chunk 425)
Mike Richofficer ofZS2026-06-16AV-INSIDER — reporting title on 2026-06-16 transaction
Mike RichcontextZS2026-05-26Q3-CALL — Q&A, Brad Zelnick question
Adam Gellerofficer ofZS2026-06-22AV-INSIDER — reporting title
Robert Schlossmanofficer ofZS2026-01-12AGM-26 — chunk 2
Raj Judgeofficer ofZS2025-11-21DEF14A-25 — Director Independence (chunk 27)
Kimberly Watkinsofficer ofZS2026-09-03Q4-CALL — opening
Karen Blasingdirector ofZS2025-11-21DEF14A-25 — chunk 27
Andrew Browndirector ofZS2026-01-12AGM-26 — chunk 12
Scott Darlingdirector ofZS2026-01-12AGM-26 — chunk 12
David Schneiderdirector ofZS2026-01-12AGM-26 — chunk 12
James Beerdirector ofZS2025-11-21DEF14A-25 — chunk 27
Charles Giancarlodirector ofZS2025-11-01DEF14A-25 — beneficial ownership table (chunk 219)
Eileen Naughtondirector ofZS2025-11-21DEF14A-25 — chunk 27
ZSgovernance structureZS2026-01-12AGM-26 — chunk 12
James McRitchieshareholder proposalZS2026-01-12AGM-26 — chunk 6
Ajay Mangal, as trusteeholdsZS common stock (NASDAQ)2025-11-01DEF14A-25 — beneficial ownership table (chunk 219)
Jay (Jagtar Singh) ChaudhryholdsZS common stock (NASDAQ)2025-11-01DEF14A-25 — beneficial ownership table (chunk 219)
Jay (Jagtar Singh) Chaudhryinsider transactionZS common stock (NASDAQ)2026-09-16NEWS — The Globe and Mail 2026-09-19 summarising Form 4 (Bigdata.com doc 93ECCE0C6F73646DF094A45320947737)
The Vanguard GroupholdsZS common stock (NASDAQ)2025-11-01DEF14A-25 — chunk 219
BlackRockholdsZS common stock (NASDAQ)2026-06-3013F-Q2-26 — company_funds_holders rank 2
Jericho Capital Asset ManagementholdsZS common stock (NASDAQ)2026-06-3013F-Q2-26 — rank 1
Millennium ManagementholdsZS common stock (NASDAQ)2026-06-3013F-Q2-26 — rank 3
Citadel AdvisorsholdsZS common stock (NASDAQ)2026-06-3013F-Q2-26 — rank 5
Norges BankholdsZS common stock (NASDAQ)2026-06-3013F-Q2-26 — rank 8
T. Rowe Price AssociatesholdsZS common stock (NASDAQ)2026-06-3013F-Q2-26 — rank 14
Artisan PartnersholdsZS common stock (NASDAQ)2026-06-3013F-Q2-26 — rank 11
ZSissuer of0.0% Convertible Senior Notes due 2028 ($1,725m)2026-07-3110K-FY26 — Note 10 Convertible Senior Notes (chunk 602)
PricewaterhouseCoopers LLPauditor ofZS2026-09-0310K-FY26 — Report of Independent Registered Public Accounting Firm (chunks 287, 290)
Wilson Sonsini Goodrich & Rosaticounsel toZS2026-01-12AGM-26 — chunk 2
ZSacquiredRed Canary, Inc.2026-07-3110K-FY26 — Note 6 Business Combinations (chunk 592)
ZSacquiredSymmetry Systems, Inc.2026-07-3110K-FY26 — chunk 592
ZSacquiredSquareX Holdings, Inc.2026-07-3110K-FY26 — chunk 592
ZSacquiredSPLXAI Inc.2026-07-3110K-FY26 — chunk 592
ZSacquiredAirgap Networks Inc.2024-04-1210K-FY26 — chunk 592
ZSacquiredAvalor Technologies Ltd.2024-03-0810K-FY26 — chunk 592
ZSchannel concentrationUnnamed channel partner (13% of receivables)2026-07-3110K-FY26 — Revenue Recognition narrative (chunk 720) and channel risk factor (chunk 93)
ZSchannel partnerCarahsoft2026-09-03Q4-CALL — CFO prepared remarks
ZStechnology partnerAnthropic2026-09-09PR-SOC — chunk 2
ZStechnology partnerOpenAI2026-09-09PR-SOC — chunk 2
ZSpartner and competitorMicrosoft2026-06-03CONF-0603 — chunk 34
ZSsupplier dependencyZS2026-09-03Q4-CALL — CFO capex remarks
Palo Alto NetworkscompetitorZS2026-09-14NEWS — Morningstar 'Zscaler Stock Fell 5%...' (Bigdata.com doc 7C19A3F6FFEF79FFA7DBC2D7ACFEFD6E)
CrowdStrikecompetitorZS2026-09-14NEWS — same
FortinetcompetitorZS2026-09-14NEWS — same
Edward Jonescustomer ofZS2026-06-09CONF-0609 — chunks 45-46
U.S. Securities and Exchange Commissionregulator ofZS2026-09-0310K-FY26 — cover
ZSlitigation watchZS2026-09-0310K-FY26 — Legal Matters (chunk 500)
ZSeventZS2026-09-03Q4-CALL — CFO prepared remarks
ZSeventZS2026-09-03Q4-CALL — Q&A Saket Kalia

Every document keyed above is listed in Sources.

Log

  • 2026-09-19 — first pass, model-drafted in a supervised session; see dossier-2026-09-19.md for evidence and access limits.
  • 2026-09-20 — correction to the 2026-09-19 dossier's access-limits note: sec.gov, data.sec.gov and efts.sec.gov are NOT blocked by the egress policy. The 403s were a missing User-Agent header, which SEC requires; with one, all three return 200 (verified 2026-09-20). S3 and S5 can be redone against primary EDGAR documents, and S2's share-count trend against the XBRL companyconcept API. Separately, Bigdata.com — the source behind most of that dossier — now reports out of credits. Dossiers are never edited after their date, so this log carries the correction. See ledger/research/WATCHLIST_PLAN.md §1.
  • 2026-09-20 — two gates advanced using the newly authorised Equibles connector, no model judgement involved. S5 shelf/ATM, previously "could not be confirmed": no ATM program captured across roughly the last 13 months of 10-K/10-Q/8-K filings. The source is explicit that absence there is not proof the company runs none, so the scorecard says the same. S3 red-flag sweep gains a real finding: channel-partner concentration at 85% of FY26 revenue, down from 88% in FY25 and 91% in FY24, with one channel partner at 13% of receivables (12% the prior year). Structured XBRL from the 10-K filed 2026-09-03 and the 10-Q filed 2026-05-26; both filing URLs are in the connector's output. Going-concern status checked at the same time: no flag on the newest examined filing.
  • 2026-09-21 — owner decision: Stage 0's circle-of-competence and exclusion-list checks are dropped for this project (WATCHLIST_PLAN.md §16). The exclusion check, open on this scorecard since 2026-09-19, is therefore closed rather than answered, and S0's gate is met on the four machine-checkable parts alone. S6, S7 and S8 owner items are unaffected.

Dossier, 19 Sep 2026

Never edited after the day it was written

Zscaler (ZS) — research dossier, 2026-09-19

Drafted by Claude in a supervised session, no owner input. Nothing here is human-verified. Retrieved sources are named per item. Items marked [background] come from Claude's prior knowledge, not from a document retrieved this session.

Access limits this session

  • FMP connector: only profile-symbol and peers allowed on the current plan. Statements, insiders, 13F, analyst, news, filings all denied.
  • sec.gov, efts.sec.gov, ir.zscaler.com, stockanalysis.com: blocked by the session's network egress policy.
  • Used instead: Bigdata.com (Edgar filings, Quartr transcripts, premium news, WSRA fund holdings, LinkUp jobs), Alpha Vantage (Q4 FY26 transcript, insider transactions, institutional summary, company overview), open web search for Glassdoor, Gartner Peer Insights, short interest.
  • Zscaler is not a subject in ledger/subjects.yaml and no podcast row mentions it. The board contributes nothing yet.

Snapshot (price data as of 2026-09-18 close, FMP via Bigdata.com)

ItemValue
Price / market cap$197.31 / $31.9bn
52-week range$114.63 – $336.99
1y / 3m / YTD-33% / +59% / -12%
Cash & ST investments (2026-07-31)$3.47bn
Debt$1.725bn 0% converts due 2028-07-15 (carrying $1.70bn)
Shares outstanding / float (Alpha Vantage)163.1m / 106.5m
Insiders / institutions (Alpha Vantage)34.7% / 53.2%
Short interest (FINRA 2026-08-31 via Equibles search result)6.35m shares, ~5.9–6.2% of float, 2.9 days to cover
Analyst consensus (FMP)42 buy, 10 hold, 1 sell; PT median $200 (low 150, high 298 Bernstein)
Next eventsInvestor Day 2026-10-06 NYC; Q1 FY27 call 2026-11-24

FY2026 results (10-K filed 2026-09-03; Q4 call 2026-09-03)

MetricFY26Note
Revenue$3,352.5m, +25%ex-Red Canary $3.2bn, +20%; Red Canary $144m
ARR$3,771m, +25%net new ARR ex-RC $232m in Q4, +17% (7% FY25, 10% 1H26)
GAAP gross margin77% flatnon-GAAP 80.3%
GAAP net loss-$63.2mFY25 -$41.5m, FY24 -$57.7m; accumulated deficit $1,252.7m
Non-GAAP op margin22.9%Q4 24.3% record
Free cash flow$779m, 23%down from 27%; capex $277m (8% of rev) + $73m capitalised software
Stock-based comp$821.9m24.5% of revenue; unrecognised $1,806.5m over 2.5 yrs
Weighted shares (GAAP)160.2m154.4m FY25, 149.6m FY24 (+3.5%/yr); FY27 non-GAAP guide 173m diluted
RPO$7,365m, +27%45% current
NRR115% every quarter of FY26CFO, Q4 call
Customers>9,400 (Q3 call); 785 >$1m ARR; 4,182 >$100kFortune 500 penetration 45%→50% (Q4 call)
GeographyAmericas 57% (+31%), EMEA 28% (+16%), APJ 15% (+23%)47% international; ~60% of employees outside US, India significant
Goodwill$1,218mfrom $418m; four FY26 acquisitions
DSO (FMP ratios, TTM)~125 daysannual-in-advance billing model

FY27 guidance (Q4 call): revenue $3.908–3.938bn (+16.6–17.5%), ARR $4.396–4.426bn, non-GAAP op margin ~23.7%, FCF margin 23–23.5%, non-GAAP EPS $4.86–4.90, capex ex-software low teens % of revenue (memory prices). Q1 FY27 revenue $935–939m. Restructuring 3% of staff, $30–33m.

Revenue history [background]: FY24 ≈ $2.17bn, FY25 ≈ $2.67bn. Not retrieved this session; consistent with the +25% FY26 growth in the 10-K.

Pipeline scorecard

Lives in scorecard.md next to this file and is updated there; this dossier is a dated snapshot.

S0 detail

  1. Distribution lock-in = 1. Installed base >9,400 customers, RPO $7.4bn, ~160 exchanges/200+ data centres peered to major providers (10-K), channel via GSIs and telcos.
  2. Unscrapeable data = 1. Inline telemetry, "over 750 billion transaction logs per day" (Chaudhry, Q4 call); physically generated, not on the internet.
  3. Liability absorption = 0. Zscaler does not take breach liability onto its balance sheet.
  4. Bottleneck = 1 (judgement). Global peered exchange footprint plus government authorisations; the last point is [background] (FedRAMP) and unverified this session.

Surplus: NRR 115% four quarters running, Z-Flex ARR uplift ~30%, gross margin stable at 80% while op margin expands. Third-party complaints of 35%+ renewal increases (dope.security, a competitor's blog) cut both ways: pricing power exists, and it is resented. Falsifier: a hyperscaler or Microsoft bundling SSE into an identity/endpoint suite at zero marginal price, which the 10-K itself flags ("AI technologies may lower barriers to entry ... including large AI providers and hyperscalers"). Chaudhry says Microsoft is "not a meaningful factor" (self-reported, June 2026 conference).

S3: the three biggest risks management itself discloses (10-K FY26)

  1. Channel concentration and non-exclusive resellers: top five channel partners 31% of revenue and rising; one partner 13% of receivables.
  2. Key-person and sales-leadership turnover: "highly dependent on ... Jay Chaudhry"; "two sales leaders recently departed."
  3. Competition intensified by AI lowering entry barriers, including hyperscalers; larger vendors can sell "at zero or negative margins" and bundle.

Also: 2028 converts ($1.725bn, intends cash settlement), international/India exposure, sustained GAAP losses. Red flags checked: no auditor change (PwC), no restatement or going-concern language seen, one CAM (subscription revenue recognition), acquired entities excluded from ICFR audit (0.1% of assets, 4.4% of revenue). SEC comment letters: could not confirm; sec.gov blocked.

S4: value chain in words

Suppliers: memory/storage/processor vendors and colocation (unnamed; component pricing is the disclosed pressure) → Zscaler Zero Trust Exchange (ZIA, ZPA, Zero Trust Branch/Cloud, data security, Security for AI, Agentic SOC with Anthropic/OpenAI models) → channel (GSIs, telcos, VARs, Carahsoft, cloud marketplaces; 31% via top five) → enterprise and federal customers (federal = high single digits of new ACV). Pricing power sits at renewal and in Z-Flex commitments. Competitors named by Morningstar and management: Palo Alto Networks, CrowdStrike, Fortinet, Microsoft; Netskope, Cloudflare, Cisco are [background].

S5: who is on the other side

Insiders: Chaudhry 16.8% plus an 18.2% trustee line (Ajay Mangal; proxy footnote not retrieved). All officers and directors 17.2%. Twelve months of Form 4s show only RSU tax-withholding sales and small 10b5-1 lots; no open-market buys. 13F Q2-26 (WSRA via Bigdata.com): BlackRock +15%, Millennium +237%, Citadel +97%, Jericho Capital and Norges Bank new; T. Rowe cut 63%, Artisan and Westfield exited. 747 holders, 51% institutional per that dataset (Alpha Vantage says 58%). Short interest ~6% of float.

S6: outside-in evidence

  • Glassdoor 3.5/5 on 2,550 reviews, down 2% in 12 months; 63% recommend (web search summary).
  • G2 4.7/5; Gartner Peer Insights complaints: 10–20% throughput drop, certificate breakage with Docker/npm, ZPA latency, renewal sticker shock.
  • Job postings (LinkUp via Bigdata.com): 275 average active, +27% y/y trailing 12 months, despite the 3% cut.
  • Oppenheimer (2026-08-19): partner checks "mixed ... broadly tracking in line/better versus partner plans."
  • Company-hosted testimonials (Edward Jones, June 2026) are not independent evidence.

S7: draft thesis (not the owner's, not scored)

Bull: organic net new ARR accelerated 7%→10%→17% through FY26 while guidance embeds ~4% net new ARR growth for FY27; if Security for AI and Agentic SOC land, 17% is a floor and the stock re-rates from ~7.7x EV/FY27 revenue. Bear: the acceleration is Q4 renewal seasonality plus Z-Flex pull-forward; new logos have lagged (CFO, Q3 call); Red Canary churn and capex inflation compress FCF; SBC absorbs the whole FCF. Kill criteria: organic net new ARR growth below 10% in any two consecutive quarters; NRR below 112%; Q1 FY27 capex guide above low teens; another senior sales departure before 1H FY27 ends.

S8: valuation frame (owner to decide)

EV ≈ $30.1bn (market cap $31.9bn less $1.77bn net cash). On FY27 guide midpoints: EV/revenue 7.7x, EV/FCF ~33x, non-GAAP P/E ~40x. SBC-adjusted FCF ≈ zero. Scenario sketch: bear FY29 revenue $5.0bn at 5x = $25bn; base $5.6bn at 8x = $45bn; bull $6.2bn at 11x = $68bn. These are illustrative, not a model.

S9: monitoring

Investor Day 2026-10-06; Q1 FY27 2026-11-24; Agentic SOC uptake; geo sales-leader onboarding; Red Canary renewals; memory pricing/capex; 13F Q3-26 for Jericho/T. Rowe; any filed (not "investigated") securities suit; 2028 convert conversion conditions.

Connection map seed

See relationships.yaml: 45 nodes, 52 sourced edges (officers, directors, holders, auditor, counsel, six acquisitions, channel concentration, partners, competitors, converts, litigation watch).

This is process support, not investment advice.