▶ Full Post Text
**TLDR:** Zscaler is down 60% trading at 52-week lows while growing revenue 26% and beating earnings. The market thinks AI kills security software. I think AI agents are about to become the biggest demand catalyst ZS has seen since COVID. Same setup as FSLY at $5 before agentic traffic sent it to $35.
**The DD:**
Every AI agent makes API calls. Thousands per minute. To databases, SaaS apps, external services, other agents. Every single one of those calls passes through ZS's Zero Trust Exchange to get authenticated and inspected. More agents = more traffic to inspect = more revenue.
Remember when COVID hit and everyone went remote? ZS went from $50 to $370 because their zero trust proxy was the only architecture that made sense when employees were everywhere. The old firewall model broke overnight.
Agents are the same thing but bigger. COVID broke the physical perimeter (employees leaving the office). Agents break the human perimeter (non-human identities running 24/7 making machine-speed API calls). One employee might spin up 50 agents. Each agent needs its own identity, authorization, and traffic inspection. The attack surface scales exponentially, not linearly.
Cisco says agents generate 25x more network traffic than chatbots. ZS's own red team found 100% of enterprise AI systems can be breached in 16 minutes. Companies are going to need to secure this stuff or get wrecked.
**"But what about competition from PANW and NET?"**
Yeah, FSLY had NET and AKAM right on top of it. MU had Samsung. AMD had NVDA eating 80% of the GPU market. They all ran because the demand wave was so massive that market share stopped mattering. If agent security TAM goes from $0 to tens of billions, all three eat well.
**Why hasn't ZS re-rated yet?**
Timing. The infra names (FSLY, AKAM, NET) charge by consumption. More bandwidth, more API calls, more revenue, instantly. ZS still charges per seat. An enterprise deploys 50,000 agents on top of 10,000 employee seats and ZS processes 5x the traffic for the same money.
But the pricing model is already shifting. ZS launched Z-Flex, a flexible licensing program where customers commit spending upfront and swap security modules as needs change. Q1 fiscal 2026: $175 million in total contract value bookings, up 70% sequentially. One aerospace company added nine modules in a single eight-figure deal, bumping their ARR with ZS by 40%.
Z-Flex is how agent security revenue starts showing up. Customer deploys agents, discovers new attack surfaces, adds AI security modules under the same agreement without a new procurement cycle. The gap between "we have a problem" and "we're paying ZS to fix it" goes from months to days.
By the time this shows up in earnings, the stock will have already moved. That's the trade.
**The setup by the numbers:**
* 52-week range: $114 to $337. Currently \~$135.
* Q2 FY2026: Revenue $816M (+26% YoY), EPS $1.01 (beat $0.89 estimate by 13%)
* 77% gross margins, more cash than debt
* Raised ARR guidance to 24% growth
* 39 analysts say Buy, 0 say Sell, average target $233
* Forward P/S \~5x vs PANW at 10x
* Down 47% in 6 months despite beating earnings
Citrini Research (the guys who called FSLY, AKAM, and NET before the agentic traffic narrative hit) included ZS in their Agentic Utilities basket published March 2026. They describe ZS as "the real-time enforcement layer" for agent API calls. They also called the Governance layer (where ZS sits alongside PANW, DDOG, SAIL) the most important structural shift in infrastructure software today.
**Why the market is wrong:**
Wall Street filed ZS under "AI disruption victim" alongside every other software name. BTIG downgraded it in April because Cloudflare and Netskope are competing. Evercore flagged Anthropic's new model as a headwind for cybersecurity stocks.
None of these analysts are thinking about the demand side. They're modeling competition for today's pie. They're missing that agents multiply the pie by 10x and ZS sits at the chokepoint.
Same thing happened with CDNs six months ago. Analysts were downgrading FSLY to $5 price targets because CDN was "commoditized." Then agentic traffic hit and the whole sector re-rated in one earnings cycle.
ZS is the FSLY of the security layer. 26% growth, 77% margins, near 52-week low, with a structural demand catalyst that the sell side hasn't modeled yet. The Z-Flex transition is already converting the installed base to consumption pricing. When agent security spend starts flowing through, it compounds on top of existing enterprise relationships with zero acquisition cost.
The risk is real. PANW just bought CyberArk for $25B and Chronosphere for observability. NET is building agent identity and MCP server security. If they eat ZS's lunch before the pricing transition completes, the re-rating doesn't come. And ZS has to execute. Growth quality matters. Organic net new ARR was softer last quarter once you strip out the Red Canary acquisition.
But at $135 I think the downside is mostly priced and the upside from the agentic tailwind is not priced at all.
Position: Long ZS. Adding at these levels.