ZS - NASDAQ

Good day, and thank you for standing by. Welcome to the

Good afternoon, everyone. And welcome to the

Thank you, Ashwin. We had a strong start to our fiscal year. In Q1, annual recurring revenue or ARR growth accelerated to 26% year over year, and RPO growth accelerated to 35%. Combining our strong free cash flow margin of 52%, and revenue growth of 26%, we operated at rule of 78, making us one of the rare companies consistently outperforming the coveted rule of four d metric. We are one of the only five enterprise SaaS companies with over $3 billion in ARR, growing at over 25%. The continued success of our three growth pillars—AI security, zero trust everywhere, and data security everywhere—is driving our strong top-line performance. ARR from these three growth pillars accelerated in the quarter. I'm particularly pleased with our AI security pillar, which grew over 80% year over year and has already exceeded our FY '26 target of $400 million ARR, three quarters earlier than expected. With the strong demand, I expect AI security ARR to exceed half $1 billion by the end of this fiscal year. Diving deeper into our AI security pillar, while enterprises are leveraging AI to drive innovation and accelerate productivity, the proliferation of AI is also making them increasingly susceptible to attacks. One of the largest AI companies recently reported that a bad actor hijacked its AI coding assistant to autonomously perform a large-scale cyber attack against multiple organizations. This incident highlights two important trends. First, threat actors are using AI to dramatically increase the speed, effectiveness, and blast radius of attacks. We have been predicting an increase in this type of automation by AI agents, and we are now seeing it happen. Second, just like users and organizations, AI agents are also becoming the weakest link in their security. It is only a matter of time before millions of AI agents interact with each other across enterprises. Imagine a threat actor hijacking even one of an organization's trusted agents, and thereby accessing critical corporate resources and sensitive information resulting in a serious breach. We have a long history of securing users with our

Thank you, Jay, and good afternoon, everyone. We exceeded our growth targets in Q1 and operated at rule of 78 for the quarter. We ended Q1 with over $3.2 billion in ARR, reflecting approximately 26% year-over-year growth. ARR from each of our three growth pillars accelerated in the quarter, including on an organic basis. Q1 revenue was $788 million, growing 20% year over year, 10% sequentially, and exceeding the high end of our guidance. Geographically, the Americas accounted for 58% of revenue, EMEA for 27% of revenue, and APJ for 15% of revenue. Our remaining performance obligation or RPO grew approximately 35% year over year to $5.9 billion, with approximately 47% classified as current RPO. We closed Q1 with 698 customers generating over $1 million in ARR, and 3,754 customers exceeding $100,000 in ARR, demonstrating the strategic role we play in customers' digital transformation journeys. Turning to the rest of our Q1 financial performance, our gross margin was 79.9% as compared to 80.6% last fiscal year Q1. I'd like to remind investors that we are introducing new products that are experiencing strong growth and are optimized for faster go-to-market rather than margins. This will continue to influence our gross margins on a quarterly basis. We plan to optimize new products for margins over time as they scale. Operating expenses increased 11% sequentially and 23% year over year, reaching $458 million. Operating margin was 21.8%, towards the higher end of our long-term range and growing by approximately 40 basis points year over year. Our free cash flow margin for Q1 was 52%, including data center CapEx at 2% of revenue. We ended the quarter with $3.3 billion in cash, cash equivalents, and short-term investments. Next, let me provide our guidance for Q2 and full year fiscal '26. As a reminder, these numbers are all non-GAAP. For the second quarter, we expect revenue in the range of $797 million to $799 million, reflecting year-over-year growth of approximately 23%. Gross margins to be approximately 80%, operating profit in the range of $172 million to $174 million, net other income of approximately $19 million, earnings per share in the range of $0.89 to $0.90, assuming a 21% tax rate and 170 million fully diluted shares. For the full year fiscal 2026, ARR in the range of $3.698 billion to $3.718 billion, reflecting year-over-year growth of 22.7% to 23.3%. We anticipate approximately 47.8% of net new ARR to be recognized in the first half. Revenue in the range of $3.282 billion to $3.301 billion, reflecting year-over-year growth of 22.8% to 23.5%, operating profit in the range of $732 million to $740 million, earnings per share in the range of $3.78 to $3.82, assuming a 21% tax rate and approximately 170.5 million fully diluted shares, and free cash flow margin to be approximately 20% to 26.5%. With a large market opportunity and customers increasingly adopting the broader platform, we will invest aggressively to position us for long-term growth and profitability. Before moving to Q&A, I'd like to thank Ashwin for his significant contributions to IR and strategic finance and wish him well as he transitions to his product role. I'm also excited to welcome Kim to

To withdraw your question, please press 11 again. Please limit yourself to one question. One moment for questions. Our first question comes from Brad

On such a strong start to the year and hitting your

Thanks, Brad. We have done some amazing work on the technology side to build a

Thank you so much, Jay.

Thank you.

Thank you. Our next question comes from Saket Kalia with Barclays. You may proceed.

Okay, great. Hey, guys. Congrats on the strong start to the year. Thanks for taking my questions and congrats, Ashwin. Maybe a little bit of a joint question for you, Jay, and Kevin. You know, the billion dollars in ARR that's coming from the three emerging areas is clearly outgrowing the rest of the business. In fact, I think you said it accelerated. And for good reason. But I was wondering if you could help us think about the other $2 billion in ARR. And maybe specifically, is it fair to think about that other tranche as more of a la carte

Yes, it's very true that our three buckets, a billion-dollar ARR, have been growing very well. The remaining $2 billion, yes, a big part of that is the ICPA. It has been going quite well. But the big opportunity for that business is also to emerge into

Very helpful. Thanks, guys.

Yeah. Thank you.

Our next question comes from Meta Marshall with Morgan Stanley. You may proceed.

Great. Maybe just wanted to ask a question about Red Canary and just how it's kind of performing towards expectations given that you guys have been looking at a fair amount of churn within your kind of assumption for that business. Just any context around that performance would be helpful. Thanks.

I'll start with broad comments. And Kevin can go deeper. The incubation of Red Canary at

Yeah. Look. I would just add that Red Canary is trending slightly better than our previous guidance. But keep in mind that, you know, we don't believe that Red Canary's contribution is material to our overall business. So as we go forward, we don't intend to provide specific color on Red Canary.

Great. Thanks. Thank you.

Our next question comes from Tal Liani with Bank of America. You may proceed.

Hi, guys. This quarter was stronger than actually you we see because if I look at the year-over-year growth in dollars, last year, first of all, 26% almost on a very strong quarter. And second, last year, on a year-over-year basis, you added between $122 million to $130 million every quarter on a year-over-year basis. And this quarter, you're adding $160 million. So that means that the growth is strong. And I'm trying to understand if you can break down on revenue level, not on ARR level, what is driving the strength. I mean, the stock is down, but the trends beneath the surface seem very strong. And I'm trying to understand what is driving it and if you can break it down, even not in numbers, if it's just qualitative to discuss what's happening in the core versus what are the key leading products that are driving this strength.

I'll start with a broad product area. Right? As you know, we built a platform, then we're expanding the platform. The three big pillars of our platform have been

Yeah. Thanks for the question, Tal. I mean, I think that's frankly, both the qualitative and the quantitative response, which is we are seeing accelerated growth in our three growth pillars, is contributing, you know, well to the business. I also mentioned in my prepared remarks that we saw organic growth come in at similar levels to what we saw last quarter. So we are seeing very strong performance. And the business did come in better than our internal expectations in the quarter.

Uh-huh. And how is the core business? You have Cisco with the new product, Check Point with the new product, Palo talking about very strong growth. How is the competitive landscape when it comes to the core business?

The competitive landscape hasn't changed a whole lot, if anything else. Our brand has gotten bigger. Most of the large enterprises know us very well. We are very well engaged here. A number of new entrants who have come in the market in the past year or so. Largely some of the firewall companies, we have hardly seen them out there. So the competitive landscape hasn't really changed much to mention.

Got it. Thank you.

Thank you.

Our next question comes from Joseph Gallo with Jefferies. You may proceed.

Hey, guys. Thanks for the question. Jay, I think when some look at the recent massive M&A in the space, they're fearful of the implications for underlying cyber growth. In your conversations with customers, how are they thinking about spending in calendar 2026? And what are the priority areas that they have as a part of that?

So customers' priorities for spending? Yes. Just, you know, with the how is the fund cyber growth been? Yep. How do you expect it next year and what the priorities are? Broadly speaking, there's no significant growth in the back environment. IT budgets remain tight. There is pressure on CIOs. There is far less pressure on the cyber side of it. So cyber is under less pressure. We do see scrutiny from our deals, similar to what we shared in the past. But two areas are still of high interest to customers. One is zero trust security because all these breaches happening out there. And second is AI security because everyone is trying to do some level of deployments of AI applications because CIOs feel like if they aren't doing anything in this area, they'll be viewed as laggards. That is also mixed. Some of the customers are seeing better results than others in terms of AI. But as soon as they start thinking about doing AI applications and models, the security becomes a worry for them. So we are going in with two leading messages:

Thank you.

Thank you. Our next question comes from Mike Cikos with Needham. You may proceed.

Great. Thanks for taking the questions here, guys. I just wanted to come back to the SASE market specifically. And, Jay, I know you're probably already cringing at the word SASE, but just there was a lot of security vendors out there last week discussing some success and competitive displacements in the SASE market. Just wanted to get your feedback specifically on what you're seeing as far as trends from a competitive or pricing discipline standpoint. Appreciate it. Thank you.

Look. We demand very strong in when it comes to, I will call, the

Perfect. Thank you.

Our next question comes from Brian Essex with JPMorgan. You may proceed.

Hi, good afternoon. Thank you for taking the question. I guess, Kevin, for you, you know, just I understand that you don't want to break out Red Canary, but can you give us a sense for organic net new ARR in the quarter? And then maybe one for Jay. With the acquisition of Red Canary and what you've done with Avalor and now SPLX, love to get your sense of, do you have any sense of how you might align with the threat intelligence market and value you might be able to add given the data visibility, potential for incremental add in terms of the quality of data that you might be ingesting on the platform and ability to provide better visibility to customers on the threat intelligence side?

Of course. Thanks for the question. I'll go ahead and start. As I had previously mentioned, organic growth in Q1 was consistent compared to Q4. And again, as I said, we're very pleased that the organic business came in better than our internal expectations.

So on the second part, we talked about two acquisitions we have had. Avalor has become our data fabric, which can ingest data from the

Got it. Helpful. Thank you.

Our next question comes from Shrenik Kothari with R. W. Baird. Yeah. Thanks for taking my question.

So, Jay, on the AI security tracking, $100 million, and you mentioned traction across all the modules, AI Guard, SPM, with teaming. Just can you help us unpack where there's more traction, what's currently driving in terms of use cases, are most deployments as at visibility governance via SPM, or are you seeing CSOs truly prioritizing all the runtime AI with AI Guard as well? And then I have a quick follow-up.

Yeah. This is a very good question. About two years ago, two plus years ago, when ChatGPT came on the scene, the number one thing customers wanted to do was visibility into GenAI solutions or, sorry, applications that users are going to go to. Since we are sitting in the traffic path, very quickly we built our first product, GenAI Security. That's being used by quite a large number of these customers. Next, we launched AI asset discovery and posture management. Tons of interest because everything starts by understanding AI assets you have. Third, last summer, early summer, we launched AI Guardrails. When customers are building their internal AI applications and models, they want to use guardrails to make sure that models are protected and only the right people with the right kind of prompts can easily access them. That's an early stage, but it's growing nicely. The pipeline is growing very well. And the fourth thing we brought to the market came through SPLX acquisition. That's core red teaming technology. And as applications are being built, customers want to make sure they don't have liabilities. And we aren't stopping there. The fifth is extending our platform to enchanting exchange so we can have the right agent-to-agent to agent-to-application communication. All that is proceeding well. So I think we are very well positioned. We will keep on investing in these innovations. But we balance our investments with our operating margins.

Very helpful, Jay. Just Kevin, a quick follow-up on your comment around these modules ramping, as Jay was saying, how are you thinking about the investment horizon overall and as you're scaling these compute-rich products, AI Guard, and how to think about the margins here?

Yes. Since the models and things they're using are really on them. On a fairly well-confined set of data, we haven't seen any massive change in gross margins. If these things change over time, I'm sure we'll let you guys know. And maybe just to continue on that thread. You know, look, for Q1, we're pleased with the margin profile. We're comfortable with the Q2 guide. And then as we look into the back half of the year, you will notice that there's margin expansion in the guide in the back half. We are orientated to growth, but you know that we're also very mindful of the financial model and operating margin.

Thank you.

Our next question comes from Roger Boyd with UBS. You may proceed.

Great. Thanks for taking the questions. Jay, I just wanted to go back to

Sure. As you know, customers have traditionally used firewalls everywhere. We replaced a lot of them when it comes to user protection. And work on branch and cloud is pretty simple. When traditionally people would go to the cloud and build cloud workload, they would do left-hand shift. They have left-hand shifted, not so far, also the problem has VMs. They're lift and shifted east-side firewalls to the cloud as VM as well. We go in and say, you don't really need a lot of these firewalls everywhere.

Thank you.

Our next question comes from Eric Heath with KeyBanc. You may proceed.

Hey, great. Thanks for taking the question. Maybe to come back to

Overall, our customers are looking for saving money and making it easier for them to operate and deploy these solutions. And along with that, making sure they have better cyber protection. The number one reason for customers' interest in the

Thank you.

Our next question comes from Fatima Boolani with Citi. You may proceed.

Good afternoon. Thank you so much for taking my questions. Jay, I wanted to go back to a very specific remark. In your script earlier in the call. Just with respect to the migration of SAP from on-prem to SAP Rise being an opportunity that would be tantamount to the success and the tailwinds that you saw from Microsoft Exchange going to Microsoft March. And so I wanted to take the opportunity to have you unpack some of that in terms of how will that manifest in your business across the product lines today? And then specifically, you know, with the portfolio that is significantly larger today than you had when this the initial Microsoft platform migration was happening. Where do you expect to see sort of the I'll frame it as option value in some of your newer products that frankly didn't exist? In the last sort of precedent example.

Sure. You know, the customers moved to Office March several years ago because Office moved to the cloud or Exchange moved to the cloud. But SAP has taken a long time. It's a far more complex application. But now SAP is pushing for deployment of what they call SAP RISE in the cloud and telling customers that you got to move, and they're giving some incentives as well. So if you do the old way using the legacy firewall technology and network, you move SAP RISE to the cloud, then you really then deploy all these express routes and direct connects for connectivity. And then you've got firewalls and all the stuff you deploy to access those applications, the VPN type approach. We go in and say none of that stuff is needed. No special access routes and direct connects needed. You can access SAP RISE applications with

Thank you.

Our next question comes from Gray Powell with BTIG. You may proceed.

Great. Thanks for taking the question. Yes, it's really interesting this quarter. I mean, I look at the numbers, and overall, everything looks good. I do think there's some confusion on just organic ARR. So I guess here's my question. You highlighted $175 million in Flex bookings this quarter. Compares to RPO bookings at about $940 million. So basically, Flex is now 20% of the mix. It almost doubled versus last quarter. Where do you see that going longer term? And then as Flex becomes a bigger component of bookings, does that give you higher visibility on future period ARR because there's just inherently an installed ramp in those contracts as customers grow out?

Yeah. Great. So I'll start and Jay can add anything that he may want to share. Look. I appreciate you raising

Yeah. I would say our business has performed very well on all metrics. They are on cash flow, all areas. So we're very pleased with it.

Thank you. Our next question comes from Joshua Tilton with Wolfe Research. You may proceed.

Hey, guys. Thanks for sneaking me in, and congrats to Ashwin. Just one for me, and apologize if this was addressed already bouncing back forth between a few calls. But, did your assumption for what Red Canary contribute to the full year ARR change at all? And if not, is it fair to assume you raised ARR by for the full year is how much you outperformed organically in the first quarter?

Yes. Thank you for the call. I did make a comment earlier. We are seeing Red Canary trend slightly better than our previous guidance. But, as a reminder, we don't believe that Red Canary's contributions to our overall business are material. So we're not going to be making color commentary with respect to Red Canary going forward. With respect to the outperformance, I mean, we did pass that through the full year guide. But I think to further clarify, you said that before. Organic growth in Q1 for us was consistent as compared to Q4. Very pleased with it. It beat our internal expectations.

Thank you.

Our next question comes from Jonathan Rukaver with Cantor. You may proceed.

Yes. Hi. Good afternoon. Jay, I'm curious to hear your thoughts on the synergies you see between Red Canary and the, you know, the data security portfolio. It would seem that you know, you have opportunities around remediation, a possible governance layer, for DSP and DLP. Can you just provide an update on that integration strategy? And maybe just a little bit of color on how you see that driving differentiation relative to you know, all the other vendors that are targeting data security capabilities related to AI.

Yes. Very, very good question. I would mention three points there that set us apart from many others. Number one, we have built a full portfolio of data security. There's no such thing as data security, but AI only. Data is lost in many ways. So number one, the strongest portfolio is helping us. Number two, AI is helping us doing better data classification. Which is important because better classification means better detection. Number three, the other point you made, it was a Red Canary synergy. That is the following. We are able to get all the signals from

Thank you. And our last question comes from Matt Hedberg with RBC. You may proceed.

Great. Thanks for taking my questions, guys. Congrats on the results, really. I wanted to follow-up on, I think it was Gray's question on

So first of all,

The only thing I would, again, I guess, express is you see growth in customers moving into

Thank you. I would now like to turn the call back over to Jay Chaudhry for any closing remarks.

Well, thank you for your time. We look forward to seeing you at one of us or some of the investor conferences.