Zscaler, Inc. Revenue, History, and Strategy

Zscaler generated $2.673 billion in total revenue for fiscal year 2025, a 23% increase from the $2.168 billion reported in fiscal 2024, with subscription revenue representing nearly 100% of total revenue. Operating loss was $128.5 million, or 5% of revenue, compared to $121.5 million, or 6% of revenue, in fiscal 2024. Non-GAAP operating income, which excludes stock-based compensation, amortization of acquired intangible assets, and other non-cash charges, was $580.1 million, or 22% of revenue, up from $442.2 million, or 20% of revenue, in fiscal 2024. This margin expansion demonstrates the operating leverage inherent in the cloud security model as fixed infrastructure costs are spread across a growing revenue base. Net loss for fiscal 2025 was $41.5 million, compared to $57.7 million in fiscal 2024, with diluted net loss per share of $0.27 compared to $0.39 in the prior year. Non-GAAP diluted net income per share was $3.28, compared to $2.60 in fiscal 2024, reflecting the company's underlying profitability when excluding stock-based compensation and other non-cash charges. The company's cash position is robust: cash, cash equivalents, and short-term investments totaled $3.572 billion as of July 31, 2025, an increase of $1.163 billion from July 31, 2024. In July 2025, the company issued $1.725 billion in convertible senior notes due 2028, receiving net cash proceeds of $1.7 billion, and fully repaid the $1.15 billion convertible senior notes due 2025. Operating cash flows were $972.5 million, or 36% of revenue, consistent with fiscal 2024, while free cash flows reached $726.7 million, or 27% of revenue, also consistent with the prior year. This cash generation funds the company's acquisition strategy, including the Red Canary acquisition in August 2025, the $350 million Avalor acquisition in 2024, and the Airgap Networks acquisition in 2024. The balance sheet carries $1.701 billion in noncurrent convertible senior notes and total liabilities of $4.621 billion against total assets of $6.420 billion, with stockholders' equity of $1.799 billion. Deferred revenue totaled $2.468 billion as of July 31, 2025, an increase of 30% year-over-year, with $2.054 billion classified as current and $414 million as noncurrent. This deferred revenue visibility is a critical financial strength, providing near-certainty for approximately 77% of the next year's revenue. The company's stock-based compensation expense was $685.5 million in fiscal 2025, up from $549.1 million in fiscal 2024, reflecting the competitive talent market in cybersecurity and the company's reliance on equity compensation to attract and retain employees. The effective tax rate was negative in fiscal 2025 due to the net loss position, with a provision for income taxes of $23.2 million on a pre-tax loss of $18.3 million. The company's return on assets and return on equity are not meaningful due to the net loss position, but the strong cash flow generation and deferred revenue growth indicate underlying business health. The price-to-sales ratio of approximately 8–10x and enterprise value-to-revenue ratio reflect the market's premium valuation of Zscaler's growth and recurring revenue model, while the forward P/E on a non-GAAP basis suggests expectations of significant earnings growth as margins expand. For fiscal 2026, the company guides to revenue of approximately $3.265–$3.284 billion, representing growth of 22–23%, with non-GAAP operating income of $728–$736 million and non-GAAP net income per share of $3.64–$3.68. The ARR guidance of $3.676–$3.698 billion indicates continued strong subscription momentum.

Zscaler operates in the cloud security market, specifically in the Secure Access Service Edge (SASE) and Security Service Edge (SSE) segments, which are valued at approximately $15–20 billion globally and growing at a compound annual growth rate of 15–20% as organizations accelerate migration from on-premise firewalls and VPNs to cloud-native security platforms. The market is dominated by a mix of cloud-native specialists like Zscaler, legacy firewall vendors expanding into cloud (Palo Alto Networks, Cisco, Fortinet), and cloud platform providers adding security services (Microsoft, Amazon, Google). Zscaler's competitive position is strongest in large enterprises with complex global footprints, stringent compliance requirements, and sophisticated cloud migration needs — a segment where appliance-based solutions often fall short. The primary competitive dynamics vary by customer segment and geography. In the large enterprise segment (10,000+ employees), Zscaler is the category leader for cloud-native zero trust, with Gartner consistently placing it in the leader quadrant for SSE and SASE. The company's penetration of the Fortune 500 — protecting nearly 45% of those companies — creates a referenceability advantage that compounds with each new win. However, the competitive landscape is intensifying. Palo Alto Networks' Prisma SASE competes head-to-head with Zscaler's Zero Trust Exchange, leveraging Palo Alto's massive firewall installed base and cross-sell motion into cloud security. Palo Alto's acquisition of CloudGenix for SD-WAN and its Prisma Access platform create a single-vendor SASE offering that competes directly with Zscaler's modular approach. Cisco's Secure Access and Umbrella platforms compete with Zscaler in enterprise deals, leveraging Cisco's deep relationships with network engineering teams and its massive channel partner network. Cisco's ThousandEyes acquisition adds digital experience monitoring that competes with ZDX. Fortinet's FortiSASE competes on price, offering bundled security and networking at lower cost points that appeal to mid-market buyers. Fortinet's hardware heritage creates skepticism among cloud-first buyers, but its pricing pressure is real. Microsoft's threat is perhaps the most insidious because it is indirect. Microsoft Entra ID (formerly Azure AD), Defender for Cloud, and Azure network security services create adjacency in identity and cloud security that can disintermediate Zscaler's access control workflows. Microsoft's distribution advantage — virtually every enterprise already pays for Microsoft 365 and Azure — creates a path for Microsoft to capture security budgets without displacing Zscaler entirely. Cloudflare competes in the SSE market with a developer-friendly platform, strong DDoS protection, and a growing zero trust access product. Cloudflare's network is larger than Zscaler's in terms of points of presence, but its enterprise security depth is less mature. Netskope and Skyhigh Security compete in CASB and DLP segments, capturing budgets for cloud application security that Zscaler addresses through its unified platform. The competitive dynamics in 2024–2025 are shaped by AI investment, where Zscaler's massive data scale provides an advantage for training AI models but competitors are closing the gap. Palo Alto Networks' Cortex XSIAM, Cisco's Security Cloud, and Microsoft's Security Copilot all integrate AI across their platforms. Zscaler's advantage is architectural: its unified cloud platform allows AI features to be deployed simultaneously to all customers, while competitors must navigate separate upgrade cycles for on-premise and cloud versions. The partner ecosystem is a critical competitive battlefield. Zscaler's relationships with systems integrators and managed security service providers create global implementation capacity. These partners have built specialized practices around Zscaler, training consultants and developing deployment methodologies that reduce time-to-value. The geographic expansion is competitive on multiple fronts. In North America, Zscaler holds strong market share in large enterprises but faces pressure from Palo Alto and Cisco in mid-market accounts. In EMEA, Zscaler has invested heavily in GDPR compliance and regional data centers, but faces entrenched competition from local vendors and Cisco's long-standing relationships. In APAC, the competitive dynamics are fragmented, with local vendors and Palo Alto's presence creating barriers. The SLED and public sector verticals represent growing competitive strengths for Zscaler, where the company's security certifications (CMMC Level 2, FedRAMP) and cloud-native architecture appeal to government agencies with complex compliance requirements. The competitive narrative is ultimately one of architectural purity versus installed-base leverage. Zscaler's cloud-native, proxy-based platform offers superior innovation velocity, global scalability, and zero trust enforcement but lacks the decades of network hardware relationships that Palo Alto, Cisco, and Fortinet have accumulated. As the market matures, the question is whether Zscaler can build broader security portfolio depth faster than legacy vendors can modernize their architectures — a race that will determine market share in the next decade.