Zscaler opened its Investor Day in New York on Tuesday with a press release, and the release had no raise. It reaffirmed the first-quarter and fiscal 2027 guidance it gave on September 3 and repeated a line investors already knew: multiple growth engines will drive the company “towards achieving our $10 billion ARR target” (per Zscaler).
A reaffirm isn’t news. The target is. So let’s do the math the release didn’t.
The guide, plainly. FY27 ARR of $4.396B to $4.426B, growth of about 16.6% to 17.4%. Revenue of about $3.908B to $3.938B. Non-GAAP operating income of $924M to $932M, up about 21%. Free cash flow margin of about 23.0% to 23.5%. Q1 revenue of $935M to $939M, about 19% growth (per Zscaler).
The base it grows from. Zscaler exited FY26 with ARR of $3.771B, up 25%. Strip out Red Canary and organic ARR was $3.630B, up 20%. Red Canary added $141M (per Zscaler’s Q4 release). So the FY27 guide steps down from 20% organic to roughly 17% all-in, with the acquisition now sitting in the base. We called that deceleration the real story in September. Nothing on Tuesday changed it.
The $10B math. This is our arithmetic, not company guidance. Start at the FY27 midpoint, about $4.41B. Compound at 17% a year and you cross $10B in a bit over five years, early fiscal 2033. At 20% it’s about four and a half years. At 15% it’s closer to six. The release puts no date on the target. That’s what the sessions need to supply. Without a date, $10B is a direction, not a plan.
The valuation check. Zscaler closed Monday at a market cap of about $33B (per Yahoo Finance). Against the FY27 ARR midpoint, that’s roughly 7.5 times forward ARR. With a ~23% free cash flow margin guided, that multiple prices durable high-teens growth with real cash. It doesn’t price acceleration. That cuts both ways. If the AI story turns into numbers, there’s room. If growth slides toward the low teens, the multiple has room to fall too.
Our POV. The bull case is simple and not wrong: agents are new traffic. Every agent that calls an API, a SaaS app or a private app is another session that needs inspection and policy. Zscaler’s proxy already sits in that path for users. Jay Chaudhry calls the agentic era “the most significant opportunity in our company’s history.” Maybe. But SSE is a mature category in large enterprises. In a category this mature, growth mostly means selling more modules into the same accounts. That’s what a slide from 25% to about 17% looks like.
The bear case is that AI security budget lands somewhere else. Identity vendors claim the agent. SailPoint did it the same morning. AI gateways claim the tool call. Enterprise browsers claim the session. Zscaler has to prove agent traffic runs through its exchange, not around it, and that customers will pay extra for it instead of expecting it in the bundle.
What would change our mind. A disclosed AI security ARR line with a growth rate. A date on $10B. A net retention figure on the slides. Any of those turns a reaffirm into a story. Without them, Tuesday was a hold-the-line day.
For buyers. Investor Day week is a good week to negotiate. A vendor telling Wall Street about multiple growth engines needs attach, and attach is your leverage. If you’re renewing ZIA and ZPA, get a quote for the AI and data security modules inside this renewal, not as a bolt-on next year. Then get the agent-traffic roadmap in writing, with dates, and tie a price protection clause to anything that ships late.