PANW vs ZS: How Palo Alto Networks and Zscaler Compare (2026)
Last updated August 2026
Short answer
PANW is the larger of the two ($270.44B market cap): the incumbent the market prices for continued execution (80.44x forward earnings, beta 0.91). ZS is the smaller challenger ($24.45B), cheaper on forward earnings (32.89x): more room to run, but more to prove. The real question is which set of drivers you believe, and whether owning one (or both) leaves you over-concentrated.
PANW vs ZS: the tie-breaker metrics
Same yardstick, side by side (as of August 2026). Valuation lined up like this is most meaningful for two names in the same corner of the market, which these are. Figures are approximate; verify before investing.
| Metric | PANW | ZS | What it tells you |
|---|---|---|---|
| Market cap | $270.44B | $24.45B | Size. The larger name is the incumbent; the smaller has more room to grow and more to prove. |
| Forward P/E | 80.44 | 32.89 | Valuation on next year's expected earnings, the same yardstick for both. Lower is cheaper for that growth; higher means the market is paying up. |
| Beta | 0.91 | 0.96 | Volatility vs the market. Above 1 swings harder than the index; below 1 is steadier. Higher beta means bigger drawdowns to hold through. |
| Price vs 52-week range | 84% of range | 16% of range | Where today's price sits between the 52-week low and high. Near the high is momentum with less margin of safety; near the low is out of favor or a discount, depending on why. |
| Price / book | 9.75 | 10.33 | How much you pay over book value. Very high can signal an asset-light, high-return business or a rich price. |
Reading it: ZS is the cheaper of the two on forward earnings, but cheaper is not the same as better. Pair the valuation with growth (how far the forward P/E sits below the trailing P/E) and risk (beta) before you decide.
Before you buy: how PANW and ZS affect your concentration
The metrics above tell you which is the marginally better business. The bigger risk for most people is not picking the slightly worse stock, it is over-concentrating. PANW and ZS share themes, so owning both, or adding either to what you already hold, can quietly push a large share of your portfolio into one bet.
This is the part a generic comparison page cannot answer, because it depends on what you own. Connect your brokerage and Walnut shows your real, combined PANW and ZS exposure, flags overlap with your existing positions, and tells you if adding one would tip you past a concentration you are comfortable with, read-only by default, with your login staying at your broker. Walnut is not an investment adviser.
What does Palo Alto Networks (PANW) do?
Palo Alto Networks is one of the largest pure-play cybersecurity companies in the world. It protects organizations across three broad areas. Network security centers on its next-generation firewalls (hardware, virtual, and cloud-delivered) plus the Prisma Access secure-access service edge (SASE) for protecting remote and hybrid workforces. Cloud security, branded Prisma Cloud, secures applications and workloads running across public clouds. Security operations, branded Cortex, uses AI and automation to detect and respond to threats across an enterprise. Palo Alto sells mostly through subscriptions and support, increasingly bundled under a platform strategy it calls platformization, where customers consolidate multiple security tools onto its integrated stack in exchange for better pricing and tighter integration. Founded in 2005 and headquartered in Santa Clara, California, Palo Alto has grown organically and through many acquisitions into a broad platform spanning network, cloud, and operations security, positioned as a consolidator in a fragmented industry.
What does Zscaler (ZS) do?
Zscaler is a cloud-native cybersecurity company built around the zero trust security model. Instead of routing traffic through a traditional corporate network perimeter, Zscaler operates a globally distributed cloud platform that sits between users and the applications they access, inspecting traffic and enforcing security policy in real time. Its two flagship products are Zscaler Internet Access (ZIA), which secures connections to the public internet and SaaS apps, and Zscaler Private Access (ZPA), which connects users directly to private applications without exposing the corporate network.
PANW vs ZS: how do they differ?
Both fit overlapping themes, but they are not interchangeable. The useful comparison is which set of drivers and risks you want exposure to.
- PANW drivers: Platformization and consolidation; AI-driven security operations.
- ZS drivers: Zero trust replacing legacy perimeter; Platform expansion and upsell.
Which fits which kind of investor
A faster-growing, richer-valued name usually swings harder, so it suits a longer horizon and a higher tolerance for volatility; a steadier, more cash-generative business suits a more conservative or income-minded investor. The honest test is which set of risks you could hold through a drawdown: Cybersecurity is intensely competitive, with rivals like CrowdStrike, Zscaler, Fortinet, and Microsoft contesting different parts of Palo Alto's platform. For ZS, zscaler trades at a high revenue multiple, so any deceleration in growth or billings can compress the stock sharply.
PANW or ZS: which should you pick?
Growth-minded investors who believe the theme has years to run tend to accept the richer multiple for more upside; value-minded investors lean toward the cheaper forward earnings and steadier profile. Pick PANW if you believe its drivers more; ZS if you believe its. Many investors hold both, but since they share themes, that is a concentrated bet, not diversification. Decide deliberately and check overlap. For the full detail, see the PANW and ZS guides.
PANW vs ZS: the full fundamentals
PANW. Palo Alto is a large, profitable, cash-generative security platform with strong free cash flow and a big backlog. Its premium valuation reflects scale, consolidation strategy, and AI-security positioning, balanced against intense competition, the optics of platformization on near-term growth, and macro sensitivity in enterprise security budgets.
ZS. Zscaler trades at a premium price-to-sales multiple typical of high-growth cloud security names, reflecting durable subscription revenue and strong free cash flow despite thin GAAP profitability. The valuation is sensitive to billings and net retention trends; a slowdown in growth or rising competitive pressure would compress the multiple quickly.
Headline figures (approximate, early 2026): PANW shows revenue (ttm) ~$9 billion, revenue growth mid-teens %, non-gaap operating margin ~28%+, gaap profitability profitable, improving; ZS shows revenue (ttm) ~$2.7 billion, revenue growth ~20% year over year, operating margin (gaap) ~low single digits or near breakeven, operating margin (non-gaap) ~20%.
The bottom line: PANW vs ZS
PANW and ZS are related but distinct: same themes, different businesses and risks. Neither wins in the abstract; the right pick is whichever thesis you actually believe, sized so you are not over-concentrated in one theme. Walnut can show your combined PANW and ZS exposure against your real portfolio. It is not an investment adviser.
Wondering how PANW or ZS fits the portfolio you already own? Walnut is an AI investing app that connects your brokerage read-only and answers questions like that about your actual holdings: overlap, concentration, and how each position tracks the S&P 500. Compare the best AI portfolio analyzers or see the best AI investing apps in 2026.
Investing in Palo Alto Networks with AI
Connect the broker you already use and ask Walnut's AI how PANW fits what you actually hold: whether you own it already through a fund, what it would do to your concentration, and how it has tracked the S&P 500. Read-only by default, and you approve anything before it reaches your broker.
FAQ
What is the difference between PANW and ZS?
+
Palo Alto Networks is one of the largest pure-play cybersecurity companies in the world. Zscaler is a cloud-native cybersecurity company built around the zero trust security model. They show up together because they share investment themes, but they are different businesses, so the better fit depends on which thesis you are expressing.
Is PANW or ZS the better stock?
+
Neither is universally better. PANW is the larger incumbent; ZS is the smaller challenger and looks cheaper on forward earnings. Walnut is informational, not investment advice. Compare what each does, the tie-breaker metrics above, and the risks, then decide which fits your thesis and what you already own.
Which is cheaper, PANW or ZS?
+
On forward P/E (as of August 2026), PANW trades at 80.44x and ZS at 32.89x, so ZS is the cheaper of the two on next year's expected earnings. A lower multiple is not automatically the better buy: a richer valuation can be justified by faster growth, and a lower one can reflect real risk. Weigh the multiple against how fast each business is compounding.
Should you own both PANW and ZS?
+
Because they share themes, owning both concentrates you in that theme. That can be intentional (a focused bet) or accidental (less diversification than it looks). Walnut can show your combined exposure across both, and whether adding either over-concentrates you, before you buy.
What are the risks of PANW vs ZS?
+
PANW: Cybersecurity is intensely competitive, with rivals like CrowdStrike, Zscaler, Fortinet, and Microsoft contesting different parts of Palo Alto's platform. The platformization strategy can pressure near-term billings and revenue as customers are offered incentives and deferred ramps to consolidate, complicating growth optics. Palo Alto's valuation is rich, so any slowdown in growth or margins can drive sharp share-price swings. Enterprise security spending is somewhat macro-sensitive, and a heavy acquisition history brings integration and goodwill risk. Microsoft's bundling of security into its broader stack is a persistent competitive threat, and a major product failure or breach would be especially damaging for a security vendor. ZS: Zscaler trades at a high revenue multiple, so any deceleration in growth or billings can compress the stock sharply. Competition is intensifying: Palo Alto Networks, Cisco, Cloudflare, and Microsoft all push secure access service edge (SASE) offerings, and Microsoft can bundle security into existing enterprise agreements at aggressive prices. Sales cycles for large deals can lengthen in tighter IT budget environments. The company has historically run GAAP losses due to heavy stock-based compensation, which dilutes shareholders even as free cash flow is positive. Founder-CEO concentration and a premium valuation amplify volatility around quarterly results.
Related comparisons
Browse all stock comparisons.
Walnut is informational, not investment advice. This page is descriptive and not a recommendation to buy or sell PANW or ZS; figures are approximate and dated (as of August 2026). Verify current data before investing.