Skip to content

Security · public

How Zscaler went to market

Zscaler sold security as a cloud service to replace on-premises appliances, carried into accounts by telecom carriers and integrators while its sales force owned the senior relationship. Customers landed with one product and cross-bought more. From 2020 it rebranded the platform around zero trust, a term its own pages credit to Forrester, and now expands through Z-Flex spend pools.

Buyer:
Mid-market, Enterprise
Contract size:
Mixed
Checked:
October 18, 2026
The motion at a glance · The partner-carried land and expand
  1. Pitch replacing the appliances

    Sales argues the castle-and-moat appliance stack loses relevance as applications move to the cloud.[1]

  2. Partner carries it in

    Carriers and integrators include Zscaler in network transformation and cloud migration projects.[1]

  3. Joint sale at the top

    Zscaler's sales force owns the senior IT relationship while the partner transacts.[1]

  4. Land users, then expand

    Customers add users, upgrade suites, and cross-buy ZIA or ZPA.[1]

  5. Add products from committed spend

    Z-Flex lets customers adopt new products inside a pre-negotiated spend commitment.[10]

  6. Champions buy again elsewhere

    Security leaders who change jobs buy Zscaler again at their next company.[23]

Back to step 1, and round again

01The phases

PrimarySupportingTried, then dropped

  1. 2008 to 2016

    Cloud security instead of appliances, sold with carriers

    Incorporated in 2007 as SafeChannel and renamed Zscaler in 2008, the company sold security delivered from its cloud to large organizations, mostly through telecom carriers, integrators, and resellers.

    • Sales-led

      A sales force builds relationships with senior IT buyers in large organizations, in a joint model where a partner usually transacts the deal. The S-1 counts over 200 of the Forbes Global 2000 as customers.[1]

    • Partner channel

      Carriers such as BT, Deutsche Telekom, Orange, and Verizon include Zscaler in network transformation projects, and integrators bring it into cloud migrations. The top five channel partners were 40% of fiscal 2015 revenue.[1]

    • Category creation

      Zscaler pitched replacing the castle-and-moat stack of on-premises appliances with security as a cloud service, and says it pioneered that approach. The S-1 never uses the phrase zero trust.[1],[23]

    • Brand narrative

      ThreatLabZ, an internal research team analyzing threats across Zscaler's cloud, is presented as a differentiator and publishes reports on emerging security issues.[1]

  2. 2016 to 2020

    Second product, land and expand, IPO

    Zscaler Private Access launched in April 2016 as a second product. The company went public in March 2018 and held its first Zenith Live user conference that June.

    • Land and expand

      Customers start with some users, then add users, upgrade to richer suites, and cross-buy ZIA or ZPA. Dollar-based net retention ran from 115% to 120% across fiscal 2017 to 2020.[1],[18],[4]

    • Partner channel

      Most revenue comes through the channel, and the S-1 says the sales team is focused on increasing sales through partners rather than direct sales.[1]

    • Sales-led

      Sales and marketing ran at 60% to 70% of revenue in fiscal 2015 to 2017, with account-based marketing aimed at new enterprise accounts, and FedRAMP authorization for ZPA-Government opened the U.S. federal market.[1],[11]

    • Owned events

      Zenith Live, Zscaler's own user conference, started in June 2018 and was named as a driver of higher sales and marketing spend in fiscal 2020.[11],[4]

  3. 2020 to 2023

    The Zero Trust Exchange reframing

    The FY2020 10-K is the first Zscaler 10-K to use the phrase zero trust. The platform became the Zero Trust Exchange, a third product joined, and net retention peaked at 128% in fiscal 2021.

    • Brand narrative

      Zscaler renamed its platform the Zero Trust Exchange and moved its public story onto zero trust and away from castle-and-moat security, with ThreatLabz reports supplying the data. Its own pages credit the term zero trust to Forrester and analyst John Kindervag in 2010.[4],[12],[13],[14],[19],[20]

    • Category creation

      Zscaler claims to have pioneered a cloud-delivered zero trust platform and the first cloud-delivered zero trust solution, not the zero trust term itself, which came from an analyst.[4],[20],[23]

    • Land and expand

      Zscaler Digital Experience (ZDX) joined ZIA and ZPA, and dollar-based net retention rose to 128% in fiscal 2021 before easing to 121% in fiscal 2023.[4],[5],[7]

    • Owned events

      Zenith Live ran as a virtual two-day summit across the Americas, Europe, and Asia Pacific in 2021, built around training sessions to help organizations adopt zero trust.[13]

    • Cloud marketplace

      Public cloud marketplaces first appear in the 10-K's list of channel partners in fiscal 2022.[6]

    • Sales-led

      Sales and marketing stayed the largest cost, at 68% of revenue in fiscal 2021 and 59% in fiscal 2023, and the 10-K says Zscaler sells to enterprises of all sizes.[5],[7]

  4. 2023 to now

    Platform, flexible spend, and AI security

    Net retention fell to 114% by fiscal 2025, and the FY2026 10-K switched to ARR as its key expansion figure while leaning on Z-Flex, non-seat products, and marketplaces.

    • Land and expand

      Expansion now runs through more products, non-seat pricing, and Z-Flex, a pre-committed spend pool customers draw on for new products. Net retention was 114% in fiscal 2025, and the FY2026 10-K reports ARR of $3,771M instead of a net retention rate.[9],[10],[17]

    • Partner channel

      Most revenue still comes through the channel. The top five partners went from 25% of revenue in fiscal 2024 to 31% in fiscal 2026, alongside joint go-to-market work with global systems integrators.[10]

    • Sales-led

      The sales organization is account-centric, with dedicated sales and customer success resources, and sales and marketing fell to 45% of revenue in fiscal 2026.[10]

    • Cloud marketplace

      AWS Marketplace passed $1B in cumulative Zscaler software sales, and public sector sales through it grew 68% in fiscal 2025.[21],[10]

    • Owned events

      The 10-K names Zenith Live and a Public Sector Summit as programs to build the brand and engage new enterprise accounts. Zenith Live 2026 launched AI agent security products and carried partner sponsorship tiers.[10],[22]

    • Brand narrative

      Annual ThreatLabz reports feature in earnings releases, and the FY2026 10-K points ThreatLabz research at risks from enterprise adoption of AI applications and AI agents.[15],[16],[10]

02The numbers

Revenue by fiscal year
$0$1B$2B$3B$4BFY2015: $53.7M$53.7MFY2015FY2017: $125.7M$125.7MFY2017FY2018: $190.2M$190.2MFY2018FY2019: $302.8M$302.8MFY2019FY2021: $673.1M$673.1MFY2021FY2023: $1.62B$1.62BFY2023FY2025: $2.67B$2.67BFY2025FY2026: $3.35B$3.35BFY2026
Fiscal years end July 31. Snapshots from filings, not consecutive years (fiscal 2016, 2020, 2022, and 2024 are omitted).[1],[2],[3],[5],[7],[10]
Show the data
FY2015$53.7MFrom a filing
FY2017$125.7MFrom a filing
FY2018$190.2MFrom a filing
FY2019$302.8MFrom a filing
FY2021$673.1MFrom a filing
FY2023$1.62BFrom a filing
FY2025$2.67BFrom a filing
FY2026$3.35BFrom a filing
Dollar-based net retention rate, %
0%50%150%100%FY2015: 116%116%FY2015FY2017: 115%115%FY2017FY2019: 118%118%FY2019FY2020: 120%120%FY2020FY2021: 128%128%FY2021FY2023: 121%121%FY2023FY2024: 115%115%FY2024FY2025: 114%114%FY2025
Trailing 12 months to July 31, each figure as first filed in that year's filing (the FY2025 10-K restates FY2024 as 116%). Not consecutive years. The FY2026 10-K reports ARR instead of a net retention rate.[1],[3],[4],[5],[7],[8],[9]
Show the data
FY2015116%From a filing
FY2017115%From a filing
FY2019118%From a filing
FY2020120%From a filing
FY2021128%From a filing
FY2023121%From a filing
FY2024115%From a filing
FY2025114%From a filing
MetricValueAs ofBasis
Revenue, fiscal 2015 to 2017$53.7M, $80.3M, $125.7M[1]July 31, 2017From a filing
Customers, fiscal 2015 to 2017Over 2,050 to over 2,800[1]July 31, 2017From a filing
Sales and marketing as a share of revenue, fiscal 2015 to 201760%, 70%, 63%[1]July 31, 2017From a filing
Revenue through the top five channel partners, fiscal 2015 to 201740%, 46%, 47%[1]July 31, 2017From a filing
IPO first dayPriced at $16, closed at $34, raised $192M[24]March 16, 2018Reported
Revenue, fiscal 2021$673.1M, up 56%[5]July 31, 2021From a filing
Dollar-based net retention rate, fiscal 2021128%[5]July 31, 2021From a filing
Revenue, fiscal 2026$3,352.5M, up 25%[10]July 31, 2026From a filing
ARR$3,771M, from $3,015M a year earlier[10]July 31, 2026From a filing
Customers, fiscal 2026About 11,000, including over 40% of the Forbes Global 2000[10]July 31, 2026From a filing
Customers among organizations with over 1,500 employeesOver 4,600 of an estimated 20,000[10]July 31, 2026Company-stated
Sales and marketing as a share of revenue, fiscal 202645%, from 51% in fiscal 2024[10]July 31, 2026From a filing
Revenue through the top five channel partners, fiscal 202631%[10]July 31, 2026From a filing
AWS Marketplace cumulative salesOver $1B[21]November 6, 2025Company-stated

“Reported” figures come from trade press, not the company, and are shown with their date.

03Myth checks

  • “Zscaler invented zero trust.”

    Not supported

    Zscaler's own pages credit the term to Forrester Research in 2010 and analyst John Kindervag. Its 2018 S-1 never uses the phrase zero trust; it sold security as a service replacing appliances, and the phrase enters its 10-K only in fiscal 2020 with the Zero Trust Exchange. What Zscaler claims is narrower: it pioneered a cloud-delivered zero trust platform and introduced the first cloud-delivered zero trust solution.[19],[20],[1],[4],[23]

  • “Zscaler sells only to the largest enterprises.”

    Partly true

    The focus on large organizations is filed: the S-1 stresses larger organizations and senior IT buyers, and over 40% of the Forbes Global 2000 are customers. But resellers were used to reach mid-market customers, every 10-K from fiscal 2021 says Zscaler sells to enterprises of all sizes, and only over 4,600 of about 11,000 customers are organizations with more than 1,500 employees.[1],[5],[10]

On the record

  • “Our sales team is focused on increasing sales through our channel partners and not through direct sales to customers.”

    Zscaler, S-1 registration statement[1]

    Management's Discussion and Analysis

  • “285 of the CXOs had bought Zscaler two times. Company A, then they went to company B, 84 had bought it three times”

    Jay Chaudhry, Founder, chairman and CEO, Zscaler[23]

    Answer to Tom Gardner's question on partnering with Zscaler to align with the CEO

  • “When I looked at the world of IT, I said, applications are changing, but nothing has changed the world of cybersecurity. Same old 30-year-old firewall technology. We need to do things differently.”

    Jay Chaudhry, Founder, chairman and CEO, Zscaler[23]

    Answer on why he started Zscaler

04What other companies can take from it

05 · GTM Now

What changes in the AI era, and what to do now

Analysis by Deepak Gupta. This is opinion built on the sourced record above, not part of it.[10],[23],[19],[17],[22]

Still works

  • Channel attachment to big transformation projects. The FY2026 10-K frames the platform around connecting AI agents to applications; treating AI rollouts as the next such project is analysis.
  • Repeat-buying security leaders still carry a vendor between jobs; Chaudhry counts 285 who bought Zscaler at two companies.
  • Analysis: marketplace buying against committed cloud spend still shortens procurement.

Breaks

  • A borrowed category name loses pull once every vendor uses it, which Zscaler's own blog says happened to zero trust.
  • Seat-based expansion weakens when headcount growth slows and agents do work people did; Zscaler's CFO already points to non-seat-based solutions.
  • Analysis: threat research as content is easier to copy and summarize in AI answers, so the report alone carries less distinction than the telemetry behind it.

What replaces it

  • Securing AI agents and models, launched at Zenith Live 2026 with AI Broker for Agents, which is Zscaler's own move.
  • Z-Flex spend pools that let customers try new products inside an existing commitment.
  • Analysis: live, data-backed research from your own telemetry rather than annual PDFs. How much revenue any of these produce is not sourced.

Apply it now

If you are

A Series A to C infrastructure security company selling $100K-plus deals to enterprises, replacing appliances or legacy on-premises tools

  1. Map the two or three partner types already selling the larger project your product fits into, and build a joint motion where your rep owns the customer relationship and the partner transacts.
  2. Write the architecture argument in plain buyer language first, and adopt the analyst or government term only where your product implements it fully.
  3. Publish research from your own telemetry on a fixed annual cadence, and reuse it in every earnings or customer update.
  4. Track every champion who changes companies and give sales a play for their new employer.

You will know it works when: The share of new logos sourced or co-sold by partners, and the count of new logos whose buyer had bought you before (Chaudhry's figure: 285 security leaders bought Zscaler at two companies).

Based on Zscaler's Cloud security instead of appliances, sold with carriers, Cloud security instead of appliances, sold with carriers, The Zero Trust Exchange reframing

If you are

A later-stage multi-product security platform whose net retention is sliding toward the low 110s

  1. Add a pre-committed spend pool that lets customers adopt new products without a new contract, as Z-Flex does.
  2. Price at least one new product on something other than users, such as workloads, data volume, or agents.
  3. List on the cloud marketplaces where your largest customers hold committed spend, and report marketplace sales as a tracked number.
  4. Use your owned flagship event to launch the new products and give partners sponsorship roles.

You will know it works when: The share of net new ARR from non-seat products and from customers adding a product within an existing commitment.

Based on Zscaler's Platform, flexible spend, and AI security, Platform, flexible spend, and AI security, Platform, flexible spend, and AI security

Motions in this record

Share the visuals

Every card is drawn from the sourced record above and sized 1080 by 1350 for LinkedIn and X. Free to share with a link back to this page.

Sources

  1. [1]SEC filingZscaler, Inc. Form S-1 Registration Statement (February 16, 2018)
  2. [2]SEC filingForm 10-K, fiscal year ended July 31, 2018 (September 13, 2018)
  3. [3]SEC filingForm 10-K, fiscal year ended July 31, 2019 (September 18, 2019)
  4. [4]SEC filingForm 10-K, fiscal year ended July 31, 2020 (September 17, 2020)
  5. [5]SEC filingForm 10-K, fiscal year ended July 31, 2021 (September 16, 2021)
  6. [6]SEC filingForm 10-K, fiscal year ended July 31, 2022 (September 15, 2022)
  7. [7]SEC filingForm 10-K, fiscal year ended July 31, 2023 (September 14, 2023)
  8. [8]SEC filingForm 10-K, fiscal year ended July 31, 2024 (September 12, 2024)
  9. [9]SEC filingForm 10-K, fiscal year ended July 31, 2025 (September 11, 2025)
  10. [10]SEC filingForm 10-K, fiscal year ended July 31, 2026 (September 3, 2026)
  11. [11]EarningsZscaler Reports Fourth Quarter and Fiscal 2018 Financial Results (8-K exhibit) (September 5, 2018)
  12. [12]EarningsZscaler Reports Fourth Quarter and Fiscal 2020 Financial Results (8-K exhibit) (September 9, 2020)
  13. [13]EarningsZscaler Reports Fourth Quarter and Fiscal 2021 Financial Results (8-K exhibit) (September 9, 2021)
  14. [14]EarningsZscaler fourth quarter and fiscal 2023 results press release (8-K exhibit) (September 5, 2023)
  15. [15]EarningsZscaler Reports Fourth Quarter and Fiscal 2024 Financial Results (8-K exhibit) (September 3, 2024)
  16. [16]EarningsZscaler Reports Fourth Quarter and Fiscal 2025 Financial Results (8-K exhibit) (September 2, 2025)
  17. [17]EarningsZscaler Announces Strong Fourth Quarter and Fiscal 2026 Financial Results (8-K exhibit) (September 3, 2026)
  18. [18]CompanyZscaler Private Access: Remote Access without the Security Risks of VPNs (April 26, 2016)
  19. [19]CompanyWhy Is Zero Trust Cybersecurity So Essential Today? (Jacob Serpa) (September 16, 2024)
  20. [20]CompanyA brief history of zero trust from the whiteboard to the White House (infographic) (2022)
  21. [21]CompanyZscaler surpasses $1B in AWS Marketplace sales (David Garcia) (November 6, 2025)
  22. [22]CompanyZenith Live 2026 Recap (2026)
  23. [23]Founder interviewThe Motley Fool Interviews Zscaler Founder and CEO Jay Chaudhry (transcript, interviewer Tom Gardner) (Jay Chaudhry, January 22, 2026, at text transcript: answers on why he started Zscaler, on partnering with the CEO, and on AI threats)
  24. [24]Trade pressZscaler soars 106% on first day of trading (TechCrunch, March 16, 2018)

Every phase, motion, and myth verdict cites a filing, the company's own pages, or a founder speaking on the record. See the methodology.