Zscaler (ZS) 2025 Earnings Analysis
Zscaler2025 Earnings Analysis
58/100
Zscaler FY2025 (ending July 2025) is the purest zero-trust cloud security play — $2.7B revenue at 76.9% gross margin with $1.0B OCF and $0.8B FCF, but still GAAP unprofitable ($41.5M net loss) after 18 years of operation. The 10-K itself states 'we have a history of annual net losses and may not be able to achieve or sustain profitability in the future' with an accumulated deficit of $1.19B. The moat thesis is compelling — Zscaler's cloud-native zero-trust architecture replaces legacy firewalls/VPNs, and with 40% of the Forbes Global 2000 as customers and 9,400+ total customers, the platform effect is real. But earnings quality is fundamentally compromised: 76.9% gross margin generates negative GAAP income because SBC and aggressive growth investment consume all operating leverage. OCF of $1.0B proves the underlying business produces cash, but the gap between OCF and GAAP loss reveals how much value is being transferred to employees via stock compensation rather than accruing to shareholders.
Core Dimension Scores
Evaluating competitive strength across earnings quality, moat strength, and risk sustainability
Earnings Quality
Gross margin at 76.9% reflects pure-SaaS cloud economics — Zscaler's platform processes customer traffic through its globally distributed cloud with no hardware shipped to customers. The 10-K describes a subscription model where 'our subscription pricing is primarily calculated on a per-user basis' with ratable recognition over one-to-three year terms. This near-80% gross margin on a subscription base demonstrates genuine platform economics and unit-level profitability.
Net loss of $41.5M on $2.7B revenue — after 18 years of operation. The 10-K explicitly warns: 'We have incurred net losses in all annual periods since our inception' and 'we expect we will continue to incur net losses for the foreseeable future.' While the loss has narrowed from -$202M (FY2023) to -$58M (FY2024) to -$42M (FY2025), GAAP profitability remains elusive. The primary cause is stock-based compensation that inflates operating expenses beyond what the gross margin can absorb. Earnings are not just low — they are structurally negative.
OCF of $1.0B on $2.7B revenue represents a 37% OCF margin — dramatically different from the GAAP net loss. The massive gap between OCF ($1.0B) and GAAP income (-$42M) is primarily SBC, which is a non-cash expense that depresses GAAP earnings but does not consume cash. Additionally, multi-year subscription billing creates favorable working capital dynamics. While OCF proves the business produces real cash, it also quantifies the SBC dilution: approximately $1.0B+ of value annually flows to employees rather than to the bottom line.
FCF of $0.8B represents a 30% FCF margin, confirming the platform generates genuine free cash after all capital expenditures. The $0.2B gap between OCF and FCF reflects infrastructure investment (data centers, cloud capacity) to support the growing customer base. FCF is the single best argument for Zscaler's business quality — despite GAAP losses, the subscription model produces substantial cash that can fund growth without dilutive equity raises.
Earnings quality scores 48/100 — a tale of two metrics. On one hand, 76.9% gross margin and $1.0B OCF (37% margin) prove the underlying platform creates real economic value. On the other, 18 consecutive years of GAAP losses with the 10-K warning of continued losses 'for the foreseeable future' means reported earnings quality is structurally negative. The gap between OCF and GAAP is almost entirely SBC — real dilution to shareholders that non-GAAP cheerleaders conveniently ignore. Zscaler generates cash like a profitable company but reports losses like a startup, and the $1.19B accumulated deficit is the cumulative cost of this approach. Until SBC moderates enough for GAAP profitability, earnings quality remains fundamentally compromised.
Moat Strength
The 10-K positions Zscaler's fundamental thesis: 'We correctly predicted that with rapid cloud adoption and increasing workforce mobility, traditional perimeter security approaches would prove to be inadequate in protecting users and data, prohibitively expensive and result in poor user experience.' The cloud-native zero-trust architecture — where security is delivered as a cloud service rather than through on-premise appliances — is architecturally superior to legacy firewalls/VPNs. The 10-K notes 'we believe that most organizations have yet to fully make these investments,' suggesting significant remaining TAM penetration.
The 10-K reports 'over 9,400 customers across major industries' with 'approximately 40% of the Forbes Global 2000 as customers' as of July 2025. Customer count grew from 7,700 (FY2023) to 8,650 (FY2024) to 9,400+ (FY2025). The concentration of large enterprises creates a moat through reference customer effects — when 40% of the world's largest companies use Zscaler, enterprise CISOs face reduced career risk in choosing it. Government agencies also 'rely on us to support their secure digital transformation.'
The 10-K describes three expansion vectors: 'expanding deployment of our cloud platform to cover additional users; upgrading to more advanced capabilities; and selling a subscription to a new solution or product, for example selling a ZPA subscription to a ZIA customer.' This multi-vector upsell creates durable net revenue retention. 'These purchases increase the annual recurring revenue, or ARR, attributable to our customers over time.' The land-and-expand model converts initial subscription wins into growing, multi-product relationships.
The 10-K acknowledges 'we face intense and increasing competition and could lose market share to our competitors.' Cloud security is a contested market: Palo Alto Networks (PANW) is aggressively platformizing, CrowdStrike (CRWD) is expanding from endpoint into zero trust, and Microsoft bundles security capabilities with its enterprise licensing. The filing warns that 'many organizations have not yet abandoned the on-premise legacy products' — the migration tailwind is real but competitors are pursuing the same opportunity.
Moat strength scores 75/100 — a genuine architectural moat facing competitive pressure. Zscaler's zero-trust cloud architecture is structurally superior to legacy firewalls/VPNs, and the 9,400+ customer base with 40% Forbes G2000 penetration provides reference-customer network effects. The land-and-expand model with multi-vector upsell (users, capabilities, new products) creates durable revenue expansion. However, the moat faces challenge from PANW's platformization strategy, CRWD's zero-trust expansion, and Microsoft's bundling. The 10-K's acknowledgment that 'most organizations have yet to fully make these investments' confirms the TAM remains large, but also means the competitive battle is still being fought for the majority of the market.
Capital Allocation
FCF margin of 30% ($0.8B/$2.7B) on a GAAP-unprofitable company is the central paradox. The subscription billing model with multi-year terms creates cash collection well ahead of revenue recognition, and the cloud infrastructure is capital-efficient. This FCF proves the business model works at the cash level — the question is whether management will eventually let operating leverage flow to GAAP profitability or continue to reinvest aggressively.
Goodwill at just 6.5% of assets confirms Zscaler's growth has been overwhelmingly organic — the zero-trust platform was built internally, not assembled through acquisitions. Low goodwill means low impairment risk and confirms that the competitive position (76.9% gross margin, 9,400+ customers) was earned through product innovation rather than financial engineering.
The 10-K states: 'we believe that our market opportunity is large and requires us to continue to invest significantly in sales and marketing efforts to further grow our customer base' and 'we expect our operating expenses to increase significantly over the next several years.' This is the trade-off: management is choosing market share over GAAP profitability, spending aggressively on S&M and R&D while the zero-trust market is still being formed. Rational if the TAM is large enough, but investors receive no current earnings return.
Stock-based compensation is the dominant reason for GAAP unprofitability. With ~$1.0B+ in annual SBC against $2.7B revenue, approximately 37%+ of revenue equivalent value is being transferred to employees through equity dilution. The 10-K's accumulated deficit of $1.19B is largely the cumulative result of SBC-driven losses. This is a capital allocation choice: management could reduce SBC and achieve GAAP profitability, but chooses to use equity compensation as the primary talent retention tool in competitive cybersecurity hiring.
Capital allocation scores 60/100 — strong FCF generation undermined by massive SBC dilution. The 30% FCF margin and 6.5% goodwill/assets confirm organic growth discipline and genuine cash economics. However, the ~$1B+ annual SBC transfers enormous value from shareholders to employees, and management explicitly commits to 'significantly' increasing operating expenses. This is the classic high-growth SaaS trade-off: the business model works (30% FCF margin proves it), but current shareholders are subsidizing growth through dilution rather than receiving earnings. The score reflects respect for the underlying economics tempered by the reality that GAAP profitability remains structurally elusive.
Key Risks
The 10-K states: 'We have incurred net losses in all annual periods since our inception' with an accumulated deficit of $1.19B. After 18 years of operation and $2.7B in revenue, GAAP profitability has never been achieved. The filing warns 'we may not be able to achieve or sustain profitability in the future' and 'we expect we will continue to incur net losses for the foreseeable future.' This is not a company approaching a profitability inflection — management is explicitly telegraphing continued losses.
The 10-K warns: 'We face intense and increasing competition and could lose market share to our competitors.' The specific competitive threats are formidable: PANW is building a comprehensive cloud security platform, CRWD is expanding from endpoint to zero trust, and Microsoft bundles security into its enterprise license agreements. The filing notes 'we expect customer cautiousness to continue in the near term, elongating our sales cycles and the timing of large deals.' In a slowing enterprise spending environment, Zscaler's premium pricing is more vulnerable to bundled alternatives.
The 10-K acknowledges: 'We continue to see customer scrutiny of and elongated approval processes for transactions, particularly larger deals, as customers continue to carefully consider purchasing decisions and are requiring multiple approvals for large expenditures in response to the uncertain economic environment.' Large enterprise zero-trust transformations are multi-million-dollar, multi-year commitments that face procurement scrutiny during economic uncertainty. Longer sales cycles compress near-term revenue growth and increase go-to-market costs.
Stock-based compensation at ~$1.0B+ against $2.7B revenue represents approximately 37%+ of revenue equivalent flowing to employees as equity dilution. This sustained dilution means that even as revenue grows 23% (FY2023 to FY2024) and 23% (FY2024 to FY2025), per-share value creation is significantly lower than headline revenue growth suggests. Until SBC as a percentage of revenue moderates materially, shareholders are funding growth through ownership dilution rather than earning returns.
Risk profile scores 50/100 (higher = safer). The fundamental risk is that Zscaler may never achieve sustainable GAAP profitability — 18 years of losses with management explicitly forecasting more is not a transitional state but a structural pattern. Competitive pressure from PANW, CRWD, and Microsoft's bundling strategy threatens market share in a market where the majority of enterprises have yet to adopt zero trust. Enterprise deal cycle elongation in uncertain macro conditions compresses near-term growth. SBC dilution at ~37%+ of revenue equivalent means shareholders bear the cost of growth without current earnings. The zero-trust TAM is large and Zscaler is well-positioned, but the risk-reward requires faith that GAAP profitability will eventually emerge from a business that has never demonstrated it.
Management
Ask about this section
This analysis is for educational purposes only and does not constitute investment advice.