Zscaler's AI Security Quarter Comes With a Data-Center Bill
TL;DR: Zscaler reported a strong fiscal third quarter on May 26, 2026, with revenue up 25% to $850.5 million and ARR up 25% to $3.525 billion, but the more important signal was the cash-flow reset. The company cut full-year free-cash-flow margin guidance to 22.8%-23.3% because AI-era security is pulling forward data-center and appliance spending. The business implication is blunt: some “cloud software” revenue now carries an infrastructure bill. #What Zscaler Reported That Investors Could Not Ignore Zscaler did not miss the obvious operating numbers. In its third-quarter fiscal 2026 results, the company said revenue grew 25% year over year to $850.5 million, annual recurring revenue grew 25% to $3.525 billion, and non-GAAP operating margin reached 23%. That is not a broken software quarter. The market cared about a different line. Zscaler lowered its full-year free-cash-flow margin outlook to 22.8%-23.3%, down from a prior 26.5%-27% range, because capex is moving into the high single digits as a percentage of revenue. That is the real story. AI security is not just another module to attach to an enterprise contract. It is starting to make the vendor buy more physical capacity before all of the revenue benefit shows up cleanly. #Why The Cash-Flow Cut Matters More Than The Revenue Beat Software investors like Zscaler because the story usually sounds elegant: sell subscriptions, expand seats, push more traffic through a cloud security platform, and let gross margin do the rest. AI makes that story messier. On the earnings call, Zscaler’s CFO described higher prices and tighter availability for memory, storage, and processors, plus spending tied to data-center equipment and Zero Trust Branch appliances. The company said it was pulling some fiscal 2027 investment into the fourth quarter of fiscal 2026 to lock in today’s equipment prices. The overlooked mechanism is timing A security buyer may sign a longer contract because AI agents, sensitive data, and non-human identities are creating new risks. That helps ARR. But the vendor
