Zscaler

Zscaler popularized cloud-delivered zero trust and is the category leader in security service edge, and its fiscal 2026 numbers show the franchise still compounding at scale: Q3 FY26 revenue grew 25% year-over-year to $850M and ARR crossed $3.5B, up 25%, with record operating margins and strong free cash flow — the rare combination of durable growth and profitability at multibillion-dollar scale. The Zero Trust Exchange is a structural bet against legacy perimeter security: it brokers identity-aware connections between users, devices, and apps inline, from a global network of data centers, replacing VPNs and firewalls with policy delivered as a service — a model with powerful network effects, since more traffic inspected means better threat intelligence, and switching costs rise as enterprises route their entire workforce through it. Zscaler is not standing still on the platform: the acquisition of Red Canary (adding roughly $127M of ARR) pushes Zscaler into managed detection and response and security operations, extending it beyond SSE into the SOC, and its data-security and digital-experience modules deepen per-customer spend. With a large share of the Fortune 500 already on the platform, a secular VPN-and-firewall replacement cycle far from complete, and expansion into MDR and AI-driven security, Zscaler is the scaled incumbent of the zero-trust transition — big, growing 25%, and profitable.

Zscaler's 25% growth is impressive but decelerating from prior highs, and the Red Canary acquisition is doing visible work to prop up the headline: excluding Red Canary's ~$127M contribution, organic ARR grew 21% and organic net-new ARR grew just 14% — a meaningful slowdown that suggests the core SSE business is maturing faster than the topline implies, and that Zscaler is now buying growth. The competitive vise is real and tightening: Palo Alto (Prisma Access/SASE), Cloudflare (a fast-growing, developer-loved, network-native challenger undercutting on price), Microsoft (Entra and its security stack bundled into E5), and Cisco all attack SSE/SASE, and the market is consolidating toward single-vendor SASE platforms where Zscaler's security-service-edge strength must be paired with the networking (SD-WAN) side it is weaker in. The Red Canary move pushes Zscaler into MDR/SOC, a crowded market against CrowdStrike, Arctic Wolf, and the SIEM incumbents — an integration bet that stretches the company beyond its core competency at exactly the moment focus matters. As a scaled public company, Zscaler is valued for continued premium growth, so any further deceleration in organic net-new ARR pressures a rich multiple. The zero-trust replacement cycle it pioneered is now a battleground the giants have all entered, and 14% organic net-new ARR growth is the number the bull case has to explain away.