Zscaler sells cloud-delivered security services that sit between users, devices, applications, and the internet. Its Zero Trust Exchange enforces identity-aware access, inspection, and data protection from the cloud instead of relying on firewalls and VPNs at the corporate perimeter.
Zscaler earns almost all of its revenue from subscriptions to cloud security services, usually sold on annual or multi-year contracts and priced by users, workloads, or modules. Core products are Zscaler Internet Access (secure web gateway), Zscaler Private Access (zero trust access to internal apps), and Zscaler Digital Experience (performance monitoring), with data protection, workload security, security operations, and AI security sold on top. Most sales go through channel partners and service providers. Deferred revenue was $2.926 billion at July 31, 2026, up 19%. Red Canary, bought in 2025, brought a managed detection and response business that contributed $141 million of ARR at the end of fiscal 2026.