Zscaler Breaks Out After a 66% Slide, With Slower Growth and Steady Cash Flow

Deep Dive Ticker Tape

Article published Sep 22, 2026. Prices below use latest available snapshots.

ZS Price Structure

↗
Loading chart…

Loading timeframes…

Verdict: doing well since the April low and now extended — buy the retest, not the breakout. The stock has broken out of its base after a long slide, growth is slowing while cash flow holds, and the entry is a pullback into the old base top, not the chase. Medium conviction.

Quick Snapshot (as of 2026-09-21)

Question Answer
The call 🟡 Buy the retest, not the breakout. Entry $188–$198 · stop $170 · first target $250 · medium conviction.
What it is The largest inline cloud security service: user, branch, workload and now AI-agent traffic runs through Zscaler's 200-plus data centers, where it is inspected and routed to the application without joining the corporate network. About 11,000 customers, including more than 40% of the Forbes Global 2000.
Why now The stock fell 66% from its November high to an April low as growth slowed and a capital-spending jump cut the free-cash-flow outlook. It has since held two higher lows, and on September 14 it broke out of a four-week base. On September 21 it closed at its highest level since January 28.
Proof Fiscal 2026 (year ended July 31): revenue $3,353 million, up 25% (20% without the Red Canary acquisition); annual recurring revenue (ARR) $3,771 million, up 25%; a record 24% non-GAAP operating margin in the fourth quarter; free cash flow $779 million, 23% of revenue.
Objection Organic growth is slowing: fiscal 2027 guidance calls for revenue and ARR growth of about 17%. The company still posts GAAP losses, with stock compensation near a quarter of revenue. The whole security group is trading on an unsettled argument about whether AI models help or replace security vendors.
Stock setup Breakout from a $159–$191 base, now extended about 15% above its 20-day average with RSI near 68. The trend-hold entry is a retest of the $188–$198 breakout area, not the current price.

Action Matrix (as of 2026-09-21)

Signal If Then
🟢 Buy A pullback holds $188–$198 (the old base top and the Sep 15–18 range) on lighter volume Entry zone for a trend-hold position. This is the flag after the breakout.
🟡 Wait It keeps running without a pullback Wait. Chasing at RSI near 70 and 15% over the 20-day buys the extension, not the setup.
🔴 Out A close back below $170 (the breakout-day low, just above the 50-day and 200-day averages near $168–$169) The breakout failed; stand aside until a new base forms.
🟠 Target A daily close above $225 on rising volume The December level clears; next resistance is the $250 area where the stock settled after its late-November drop.
🔴 Thesis breaks The Q1 fiscal 2027 print (expected late November to early December) shows net new ARR growth falling below the 17% organic rate of Q4 The growth objection wins; the multiple has no support.

The Story Right Now (as of 2026-09-21)

Zscaler is recovering, not cratering: it bottomed in April after a 66% slide from its November high, and last week it broke out of a four-week base to its best close since January 28.

Data as of 2026-09-21 close: ZS $207.13, RSI 67.6, +14.8% vs SMA20, +23.2% vs SMA200, 7D +8.03%, 30D +13.96%, 3M +66.96%, 1Y -28.96%, -38.54% from the 52-week high.

The decline had two phases. From the November 3 high of $336.99, the stock fell through the winter, with double-digit single-day drops in late November, late February and early April, and hit $114.63 on April 10. Then on May 27, the day after its third-quarter report, it fell 31.5% in one session while the rest of the security group fell 3% to 5%. That report raised revenue, ARR and operating-income guidance for the year. It also cut the free-cash-flow margin outlook from 26.5–27% to 22.8–23.3%, citing capital spending "in the high single-digits as a percent of revenue", and showed organic net new ARR growing only 14%. No captured news explains which of those the market punished, so the cause of the size of that drop is not established.

The low held. May 27 bottomed at $125.66 and June 12 at $119.50, both above April. From mid-August to September 11 the stock built a base between about $159 and $191. The fourth-quarter report on September 3 beat estimates, but the stock still fell 4.5% the next day and touched $159.20 on September 8.

September 14 was a group move. Zscaler rose 16.5% on 7.6 million shares, more than double the prior four sessions' average, while CrowdStrike rose 13.9%, Palo Alto Networks 13.1%, SentinelOne 14.5%, Okta 12.0% and Fortinet 9.0%. That day's captured commentary included Nvidia's Jensen Huang calling AI-driven security a new business opportunity and Jim Cramer questioning Anthropic's CEO for leaving cybersecurity out of his AI outlook. That is context, not a proven cause. For Zscaler the day did something the others did not need: it closed above the top of its base and above the May 26 pre-crash close of $184.59, recovering the whole report-day gap. September 21 added a 5% gain to $207.13, though on below-average volume.

The fundamentals behind the recovery are steady rather than improving. Fiscal 2026 revenue grew 25%, but 20% without Red Canary, the managed-detection business bought during the year. Fiscal 2027 guidance calls for revenue growth of 16.6% to 17.5% and ARR growth of 16.6% to 17.4%. Growth is stepping down about three points from the organic rate. What holds up is profitability: the non-GAAP operating margin reached a record 24% in the fourth quarter, the fiscal 2027 guide implies about 21% growth in non-GAAP operating income, and the free-cash-flow margin guide of 23.0% to 23.5% is flat with fiscal 2026. The capital-spending jump behind the May cut is now in the base: fourth-quarter capital expenditure and internal-use software reached $218.5 million against $78.7 million a year earlier. On September 1 the company also committed to a roughly 3% headcount reduction, with $30 million to $33 million of charges, "strategically reallocating resources to provide additional capacity to support our AI and growth initiatives."

The stock is the laggard of a strong group. CrowdStrike, Fortinet, Okta and Cloudflare all closed September 21 within 1% of their 52-week highs; Palo Alto is 6.8% below. Zscaler is 38.5% below. That gap is the opportunity and the warning at once. At about $207 the company is valued near $35 billion on its own diluted share count, roughly 42 times the midpoint of fiscal 2027 non-GAAP earnings guidance and 9 times fiscal 2027 revenue guidance. That is not cheap for 17% growth. The rerating case rests on the new products (AI-agent security, data security, the Red Canary operations business, usage-priced Z-Flex contracts) keeping net new ARR from decelerating further.

The call: constructive, medium conviction. The chart has completed bottom, pop, base and breakout, the shape the desk buys, and the business is intact. But the stock is extended after a 67% three-month run, and growth is slowing. Wait for a pullback into $188–$198 that holds. Invalidate below $170. First target $250, where the stock settled after its late-November drop. What would change the view: Q1 fiscal 2027 net new ARR growth below Q4's 17% organic rate, another free-cash-flow guide cut, or the whole security group rolling over on the AI argument.

Extended analysis