Zscaler - where are the security giants?

Investment Analysis Clubs Saul’s Investing Discussions
1

In an off board discussion the question came up of why don’t the internet security giants do the same thing as Zscaler? If they could do it why didn’t they?

I don’t know anything about the technology, but I can’t help wondering if it was the legacy dinosaur’s dilemma. Developing a cloud-native solution would undermine all their legacy products, which must include a bunch of expensive hardware which would no longer be needed. Just a guess. And they’d have to start over, and tell their customers all that other stuff is obsolete now. How embarrassing!

My guess is that that held them back, and now Zscaler has a multi-year lead on them in development. But that’s just a guess and I’d love to hear from others on this.

Saul

7 Likes
2

Hmm,

Watched this video: https://www.youtube.com/watch?v=WMtIncM0a-w

The preposition from my side is that My Data is my business and my income.

This shows that how ZScaler works is by handing over they keys to my income … Would you dare to ?

Essentially ALL corporate data goes through ZScaler, all your IPO etc, this is the nastiest NSA CIA Whatever give keys over solution i have ever seen.

I’m staying away from this one already on these ground, no matter what the stock does. I don’t understand why any large company would buy this solution.

Currently you use multiple solutions to gain the same outcome, which come from different vendors, which means not everyone can see every piece of the puzzle.

This is Scary.

9 Likes
3

Funny … I had the complete opposite reaction. From my perspective it is a “Pick your poison” situation … each one of those products and devices require bodies and knowledge that are expensive to stay current and ahead of the trouble makers. If I can find someone who does this better than me and is talented at it … then I can focus on “my income” (to use your language). There are other ways to deal with your concern of being monitored… but are you going to stop talking on all phones because they can be tapped. Your solution as I understood was to simply ban phone calls and only allow face-to-face meetings? Zscaler is removing lots of expense and complexity… but you do have to trust them. Then I look at their CEO who has continually evolved through many technologies/companies … he is obviously an expert on the subject or at least able to attract such talent. I would trust him. I’m more worried about free services (which Zscaler isn’t) with my data because as we continue to learn from Google that “free isn’t free” as they give my data to everyone that has a chance of making money from my use of their free services.

BlowfishScrooge
Long ZS

10 Likes
4

In addition it looks like zscaler are a all eggs in one basket solution.

If it is broken, all components are broken. Reminds me of that time Azure DC burned down and everything in Europe that was hosted there was unavailable for an entire day.

2 Likes
5

Hi Saul,
I wrote a lot about ZS around their ipo but no one seemed interested and i didnt push it as the IPO’d and immediately went up 106% first day so seemed pricey. I do love the company though.

http://discussion.fool.com/ceo-interview-from-last-july-i-noted-…

https://www.marketwatch.com/story/zscaler-shares-rally-as-an…

"Zscaler is directly displacing legacy solutions in the $2 billion a year web security market while taking incremental share of the broader $18 billion in network security spending,” Franchi said.

Competitors that Zscaler has to reckon with are Symantec Corp.’s SYMC, -0.29% Blue Coat Systems, Raytheon Co.’s RTN, +0.48% ForcePoint, as well as broader security vendors like Cisco Systems Inc. CSCO, -0.78% and Palo Alto Networks Inc. PANW, -1.63% , Franchi said.

With Zscaler, the idea of a cloud-native security solution is basically a new thing…what we think of as cloud today (AWS, Azure) are all less than a decade old and really only became material starting in 2011-2012 or so. Blue Coat was a known player and got swallowed up by Symantec, a legacy security company. Cisco swallowed up OpenDNS in a similar fashion as it pivoted away from traditional route/switch to software and security. As the OpenDNS founder stated, this is pretty much currently a 3-horse race. So I think the value or perceived value of what zscaler can and should become in terms of a market leader is more easily envisioned.

Dreamer

10 Likes
6

Dreamer,

I followed it in the shadows but recommended your posts back then … so it didn’t go to waste :wink:

I also think you posted that CSCO tried to buy ZS days before the IPO but the CEO responded that he didn’t want to sell this one like he did with all the past companies… that he wanted to see this one all the way through. That is what motivated me to take more notice of it.

Thanks for bringing this company to us!

BlowfishScrooge
Long ZS

10 Likes
7

Marko,

The preposition from my side is that My Data is my business and my income.

This has always been the argument against the cloud. Now look how big the cloud has become. Almost all of my data is in the cloud.

Currently you use multiple solutions to gain the same outcome, which come from different vendors, which means not everyone can see every piece of the puzzle.

They are not looking at all your data, Just the portion that tells where it is going and who you are, this will be in the very first part of the package, the rest of the package will not be seen. Could they open the whole package up? I suppose they could, and if they were bad actors it could be a problem. Now I do not know if they are doing this, but if I was invested in the company I would check into it, If I was a company I would just encrypt all of my data going across my network. That should solve that problem.

Andy

7 Likes
8

The video that MarkoKrus posted the link to, was very helpful to get basic understanding.

It seems to me that ZS if offering a more integrated service that addresses networking, authentication, connectivity and security, all in one package… so in a way it competes with not only PANW and CSCO of the world for networking, it also competes with OKTA of the world for authentication and many others.

Though this was one piece of it, I have seen enterprises spend a large sum of money connecting their remote offices to HQ through a WAN… just this piece of saving can be substantial, if ZS is truly offering a replaceable mechanism. So in this case, it will allow a remote office to connect through a low cost ISP through internet (few $100s per month) vs a dedicated WAN line with VPN etc. that can cost $1000s per month. Though I think this is not a universal solution, quite likely it will make ZS attractive enough to many enterprise to move needle for ZS.

All in all, I see ZS is offering attractive solutions in multiple counts… it is a bit early to tell if they can be the “all things to all people” or they box themselves into a niche play where someone uses ZS only if they are willing to take entire solution…
It is interesting enough for me to take a small position.

4 Likes
9

The more i think about this, the more I get Saul’s question - why haven’t other guys thought about this before…

To me it seems that the most logical company that should have gone down this path would be Cisco. Yet, it makes sense that Cisco didn’t go down this path in the past because it has been a hardware company at its core… and everything ZS is doing is really replacing specialized HW by specialized SW running on commodity HW… exactly same as Arista and Nutanix approach…

Given that Cisco is still trying to become SW company, I would not be surprised to see them go after ZS at some point… although, Cisco would easily have pieces to put this puzzle together, it would be extremely difficult for Cisco to do so just because how they are organize and operate… may be it will be easier for Cisco to buy ZS at some point.

All in all, I think these guys are trying to disrupt multiple companies / domains / industries with a single stroke… I still worry that this may stay as niche play for a while (even then it will be substantial for such a small company, just that they may not get into $B revenue for a long time)…

However, if these guys are little more successful, this can be a true Cisco killer and also hurt whole host of other companies like PANWs of the world, OKTAs of the world and also telecom companies like CenturyLink and AT&T etc

Lets see how it evolves

2 Likes
10

Following this thread, I saw it mentioned if Zscaler competes with OKTA. The way I read it, is that yes, it could and Bert mentions OKTA in his ZS article on SA. https://seekingalpha.com/article/4184749-zscaler-can-scale-h…

they have 2 main products. You can get a lot from the first ER conf call notes: https://seekingalpha.com/article/4179895-zscaler-inc-zs-ceo-…

"First, Zscaler Internet Access or ZIA for secure and fast access to SaaS applications and the internet. ZIA is designed to ensure malware doesn’t reach the user and valuable corporate data does not leak out. "
This competes against the Symantec-BlueCoat and Cisco-OpenDNS types, and is the main revenue driver right now.

“Second, we have Zscaler Private Access or ZPA for secure access to internal applications in enterprise data centers or the public cloud. ZPA connects a specific user to a specific application based on business policy, without bringing the user on the network, resulting in better security while delivering the best user experience.”
Note the comment below from CEO that, while small now, ZPA is growing very fast.

From Q&A
"Alex Henderson

I was hoping you could talk a little bit about the mix of business in the current quarter in terms of revenue. You said that came in from ZIA versus ZPA, and how that might look different relative to the contracts that you’re winning today for future business. How much of a shift towards ZPA or we seeing in the current flow?

Remo Canessa

So, Alex, I’ll take that question. Our ZPA still represents less than 5% of our revenue. However, our third quarter was our largest quarter for ZPA, and it is increasing fairly substantially. Now, the revenue is less than 5%. We recognize business – we recognized revenue on rapidly basis. So, when you take a look at the actual business coming in, it’s doing well. And the increase in ZPA for new business and upsell this last quarter was the highest that it’s been in the Company’s history.

Jay Chaudhry

If I may additional, Remo, ZPA is the fastest growing new product in Zscaler’s history. And also, we’re pleased we had our first 7-figure annualized revenue deal from ZPA this past quarter."

Dreamer

6 Likes
11

thanks Dreamer…
i will look to learn more about this company… will post here if / when i have something to share.

12

…why don’t the internet security giants do the same thing as Zscaler? If they could do it why didn’t they?

Why didn’t Baldwin Locomotive Works switch from steam engines to diesel in a timely manner?
How did the Japanese car makers take so much share away from the US car companies in N. America?
Why Didn’t Kodak better exploit digital photography?
Why did Xerox allow so much of their business to get stripped away from them by competitors?

This list of once high flying and now bankrupt or downtrodden businesses could go on for pages. The answer inevitably comes down to bad management. In every case it was the company’s success that allowed management to ignore or not even notice the changing world around them.

Baldwin management was in charge of the premier locomotive company in the world, they could not conceive that a diesel engine spinning a generator to produce electricity to drive and electric motor would be a better system.

American auto makers were building gas hogs that fell apart in a few years (planned obsolescence). Then the mid-70s OPEC oil embargo suddenly made cars getting 8 - 12 MPG undesirable. The small, efficient Japanese cars took over the bottom of the market. But then people noticed that the cars were much better made and lasted longer with fewer repairs than the American cars. The Japanese moved up the value curve.

Kodak took some half-hearted attempts at digital, but the entire company was wrapped around their film, chemistry and paper business. By the time anyone could buy a cheap digital camera for a few dollars and the computer and internet made prints non essential, it was too late for them to recover.

Xerox was making the bulk of their revenue from paper and supplies rather than new machines. They pretty much stopped investing in R&D. And worse, they failed to exploit some of their best research coming out of PARC (Palo Alto Research Center). The pointing device (mouse) was exploited by Apple. OO code (Smalltalk), originally developed by Adele Goldberg, Alan Kay, Dan Ingalls and other at PARC was never commercialized by Xerox. Apple used much of the technology. Adele left Xerox and founded ParcPlace Systems which provided visual Smalltalk development tools.

I always try and learn about the management when I make an investment (not always easy). Quality management is among the top of the list of things that I think important. Technology changes at a blistering pace. Disruption is par for the course. I want management with a history of being disruptors as opposed to disruptees.

9 Likes
13

…why don’t the internet security giants do the same thing as Zscaler? If they could do it why didn’t they?

Why didn’t Baldwin Locomotive Works switch from steam engines to diesel in a timely manner?
How did the Japanese car makers take so much share away from the US car companies in N. America?
Why Didn’t Kodak better exploit digital photography?
Why did Xerox allow so much of their business to get stripped away from them by competitors?

Thanks Brittlerock for that nice review.

I don’t know what the TAM for PVTL might be, but presently I don’t care. For now and the “long term” I have high confidence in this position.

And for this post you just made too. You must be in China now.

Best,

Saul

1 Like
14

Quality Management is why I have stuck with ANET when many are selling!!!

1 Like
15

Still in the US, leaving for China in September.

16

I notice Zscaler hasn’t pulled back but Carbon Black has of late in case that is of any interest in the category (I don’t hold either but am interested in Zscaler).
https://seekingalpha.com/article/4186366-carbon-black-recent…
Ant

17

Anyone still on the fence about Zscaler might find the following video helpful…

Scott Guthrie - EVP of the Microsoft Cloud + AI Group
https://www.zscaler.com/zenithlive-2018-live-stream-watch?wv…

Take care,

VR_Robear

12 Likes
18

Anyone still on the fence about Zscaler might find the following video helpful…

Scott Guthrie - EVP of the Microsoft Cloud + AI Group
https://www.zscaler.com/zenithlive-2018-live-stream-watch?wv……

That was an awesome find, Robear, thanks so much. It sure sounds as if Microsoft has based all their Azure and cloud security on Zscaler. Nice video and not too long.

Saul

9 Likes
19

After viewing this ZS video and onsidering the recent OKTA acquisition of ScaleFT, is there someone on the board with security expertise who can accurately describe the difference or gap between the targeted solutions of ZS and OKTA?

It has been my understanding in the past that ZS was a more comprehensive solution than OKTA. The ScaleFT acquisition by OKTA appears to narrow the gap.

Thank you in advance.

sjo

20

https://www.zscaler.com/solutions/cloud-security
what Zscaler does and how

3 Likes