Zscaler must translate agentic-cyber hype into billings, not just demos

Investors can hear plenty about AI security roadmaps in any cybersecurity earnings call. The harder—and rarer—proof is whether new AI-oriented capabilities convert into faster contract starts, upgrades, and renewals that show up in quarterly revenue plus billings-linked metrics like deferred revenue and remaining performance obligations.

For Zscaler, the “billings” question matters because its business model is contract-driven and recognition is lumpy: deferred revenue captures prepayments and billed fees that will be recognized later. Remaining performance obligations (RPO) is the forward backlog that can become future revenue as customers consume the service. When investors say “AI security should show up in billings,” they’re really asking whether these mechanics accelerate after customers decide they need AI-grade protections.

The “agentic cyber” discussion moved from marketing to measurable pull-through when CrowdStrike showed strength in its most contract-sensitive reporting sections, including deferred revenue behavior tied to billing/prepayment mechanics.

On CrowdStrike’s most recent disclosures in this window, the company reports deferred revenue totals and discusses that billed fees/prepayments sit in deferred revenue until revenue recognition criteria are satisfied. The practical investor takeaway: if “agentic cyber” is real demand, the billing motion should appear as sustained deferred revenue and supportive recognition patterns rather than just conference-call language.

Zscaler’s deferred revenue base is already substantial, which means the bar is not “will deferred revenue exist?” It’s whether the next filing shows an improving billings-to-revenue bridge (deferred revenue sustaining while revenue continues to grow). If Zscaler’s AI-oriented products are converting faster, you’d expect supportive revenue growth alongside stable or strengthening deferred revenue dynamics.

In the most recent quarter-end disclosure available here, Zscaler reported deferred revenue of $2.4772B as of Apr 30, 2026, with $2.0971B current and $0.3801B noncurrent. That’s the baseline contract liability investors use to judge how much future work is already paid-in vs. yet to be recognized.

Even though “AI security” sounds like a standalone product category, the billings conversion typically depends on three supply-chain layers that Zscaler participates in: (1) the telemetry/control plane that sees risky behavior, (2) identity and policy enforcement that stops it, and (3) workload-to-workload segmentation for modern deployments. If those layers get adopted as part of a broader customer rollout, AI capabilities ride along as upgrades or add-ons.

That’s why deferred revenue and RPO are the investor’s shortcut. They compress time: contract signing and billed usage arrive before revenue recognition. If agentic-cyber demand is truly converting to spend, it should show up as more contract starts and upgrades that increase the future recognition pipeline—exactly what deferred revenue and RPO are designed to reflect.

From the quarterly income statement data available for the latest three quarters in this window, Zscaler reported revenue of $788.1M (fiscal Q1’26), $815.8M (fiscal Q2’26), and $850.5M (fiscal Q3’26). That progression implies continued demand, but it also sets the benchmark: the late-August report needs to show whether AI security conversion is lifting growth rate or simply sustaining it.

Short-term (days to the next quarter): Zscaler will likely move the stock on whether its revenue growth and billings-linked indicators (deferred revenue movement, RPO) confirm AI/security conversion speed. Long-term (1–3 years): the market will care whether AI-oriented upgrades become embedded in renewal cycles—meaning customer retention and contract expansion show up in consistently strengthening forward backlog.

The core question isn’t whether Zscaler can describe AI risk controls. It’s whether, after the market’s agentic-cyber proof point from CrowdStrike, Zscaler’s next disclosures show faster conversion from billed contracts into revenue visibility. The late-August quarter is where “narratives” must translate into the mechanics investors can model.