Palo Alto's Cash Flow Edge Shows Up in the Tape, Zscaler's Doesn't
Two cybersecurity heavyweights beat estimates in the same week. Only one of them was rewarded: Palo Alto edged higher on Sept. 4 while Zscaler dropped 4.48%.
Palo Alto Networks and Zscaler both beat earnings estimates in the same week, but Palo Alto posted faster growth and stronger free cash flow, and its shares closed up 0.41% at 333.30 on Sept. 4 while Zscaler fell 4.48% to 169.83.
Two of the largest names in enterprise cybersecurity reported in the same week, and both cleared the bar Wall Street had set for them. Palo Alto Networks (PANW) and Zscaler (ZS) each beat earnings estimates. Only one of them left the week with the market's approval.
The distinction, as laid out by MarketBeat, comes down to two things that beats alone do not capture: the pace of growth and the quality of the cash behind it. Palo Alto grew faster and generated stronger free cash flow — the money left after a company pays for its operations and its capital spending — and on that basis holds the edge over its rival.
What the tape did with two beats
The share reaction told the story more bluntly than the headlines did. In the most recent session before this was written — the close on Friday, Sept. 4, 2026 — Palo Alto finished at 333.30, up 0.41% from a prior close of 331.94, having traded between 328.00 and 339.10 on the day. Zscaler closed at 169.83, down 4.48% from 177.80, with an intraday range of 165.06 to 177.14. That is a swing of 7.97 points from the previous close, and Zscaler spent the session at or near the bottom of its range.
Context matters here. The broad market was soft but not disorderly: the S&P 500 tracker (SPY) closed at $770.23, down 0.38%, and the Dow tracker (DIA) at $534.12, down 0.52%. The Nasdaq 100 tracker (QQQ) actually finished higher, up 0.19% at $719.00. So a growth-software name shedding nearly 4.5% on a day when its home index rose was not a market problem. It was a Zscaler problem.
This is the pattern that has defined software earnings season repeatedly: beating the consensus is table stakes. What moves a stock is whether the beat was of the kind investors were already paying for. A revenue and earnings line that clears estimates while growth decelerates or cash conversion softens gets sold. A comparable beat with cash flow underneath it gets held.
Why free cash flow decides the argument
Free cash flow has become the referee in cybersecurity for a specific structural reason. These businesses bill customers up front for multi-year subscriptions, which means cash arrives ahead of the revenue that accounting rules let them recognize. Deferred revenue and billings therefore act as a forward signal, and free cash flow is where the health of that motion shows up first — before it reaches the income statement.
It is also the number that supports everything else a mature security platform wants to do: fund acquisitions of adjacent products, buy back stock, absorb the cost of stock-based compensation, and build out inference capacity for AI-driven detection features without going to the debt market. A company generating strong free cash flow can consolidate; a company that isn't has to choose.
That is why the comparison drawn after this week's prints — faster growth and stronger free cash flow at Palo Alto — is not a cosmetic distinction between two similar beats. It is a statement about which of the two has more optionality over the next several quarters.
Two different bets on the same threat
The two companies are not doing the same thing, and the divergence in their shares partly reflects that. Palo Alto's pitch is consolidation: persuade a customer running a dozen point products from a dozen vendors to buy a single platform covering network, cloud and security operations. That strategy trades near-term revenue optics for stickier, larger, longer contracts.
The two companies are not doing the same thing, and the divergence in their shares partly reflects that.
Zscaler's pitch is architectural. It routes enterprise traffic through its own cloud rather than through hardware sitting in a corporate data center, and sells the zero-trust model in which no user or device is trusted by default. It is a purer growth story, less diversified, and priced accordingly — which is exactly why the market punishes any hint of slowdown more severely there than at a broader platform.
Both are beneficiaries of the same demand backdrop. Security budgets have been among the last line items enterprises cut, and the spread of AI agents inside corporate networks has created new attack surfaces that neither vendor had to defend three years ago. The disagreement is not about whether the sector grows. It is about which balance sheet and which growth rate you want to own while it does.
What to watch from here
Three things will determine whether the post-earnings verdict holds.
- Whether Zscaler's decline extends or reverses. A single 4.48% session after a beat can be positioning unwinding rather than a change of thesis. If the stock keeps making lower closes over the following weeks, the market has repriced the growth rate, not just the quarter.
- Free cash flow margin direction, not the absolute number. The question at both companies is whether cash conversion is improving each quarter or being flattered by billings timing.
- Platform attach rates. Palo Alto's advantage only compounds if customers keep adding modules. If consolidation stalls, faster growth today becomes an ordinary growth rate tomorrow.
For now, the market has issued its ruling in the plainest form available. Two beats, one week, one stock up and one down almost five percent. The gap between them is what investors were already paying for, and what each company delivered against it.
Investors should note that share prices cited here reflect the last completed session and not live trading, and that a single day's move is a weak guide to a multi-quarter thesis.
Key facts
- PANW last close: 333.30, +0.41% (Sept. 4, 2026, 20:00 GMT)
- ZS last close: 169.83, -4.48% (Sept. 4, 2026, 20:00 GMT)
- Earnings outcome: Both companies beat estimates; Palo Alto grew faster with stronger free cash flow
- Market backdrop: S&P 500 tracker SPY -0.38% at $770.23; Nasdaq 100 tracker QQQ +0.19% at $719.00
Frequently asked questions
Did both Palo Alto Networks and Zscaler beat earnings estimates?
Yes. Both cybersecurity companies reported results in the same week and both came in ahead of Wall Street's earnings estimates. The difference was in the underlying quality of the quarters: Palo Alto Networks showed faster growth and stronger free cash flow, which is why it is generally viewed as holding the edge over Zscaler after the prints.
How did the two stocks trade after the reports?
In the last completed session before this article, the close on Sept. 4, 2026, Palo Alto Networks finished at 333.30, up 0.41% from a prior close of 331.94. Zscaler closed at 169.83, down 4.48% from 177.80, and traded as low as 165.06 during the day. Markets are currently closed.
Why does free cash flow matter so much for cybersecurity companies?
Security vendors bill customers up front for multi-year subscriptions, so cash often arrives before revenue can be recognized under accounting rules. Free cash flow — cash left after operating costs and capital spending — therefore signals the health of new business earlier than the income statement does, and it funds acquisitions, buybacks and product investment without new debt.
Was Zscaler's drop caused by a weak overall market?
No. On Sept. 4, 2026, the Nasdaq 100 tracker QQQ actually closed higher, up 0.19% at $719.00. The S&P 500 tracker SPY was down 0.38% and the Dow tracker DIA down 0.52%. A 4.48% decline against that backdrop reflects company-specific repricing rather than a broad selloff in technology shares.
What is the difference between the two companies' strategies?
Palo Alto Networks sells a consolidated platform, aiming to replace many separate security products a customer runs with one integrated suite spanning network, cloud and operations. Zscaler routes enterprise traffic through its own cloud instead of on-premise hardware and sells a zero-trust model, in which no user or device is trusted by default. It is the more concentrated growth story.
What should investors watch next in this comparison?
Three things: whether Zscaler's post-earnings decline extends over subsequent sessions or reverses, whether free cash flow margins at both companies are genuinely improving rather than being flattered by billings timing, and whether Palo Alto keeps adding platform modules at existing customers. A stall in that consolidation would erode its growth advantage.
Sources
Photo: Tima Miroshnichenko · Pexels Licence — source
