Zscaler Inc

NASDAQ:ZS

Earnings Call Analysis

Zscaler Reports Strong Q1 with Significant Revenue and Customer Growth

Zscaler’s Q1 results showcased a solid 26% increase in revenue year-over-year, reaching $628 million, with total billings growing 13%. The company expects Q2 revenue between $633-635 million and full-year revenue of $2.623 to $2.643 billion. Among its 585 customers exceeding $1 million in ARR, unscheduled billings surged over 20%. Operating margins improved to 21%, supporting a free cash flow margin of 46%. Zscaler is targeting $5 billion in ARR and emphasizes strong demand in cybersecurity, driven by Zero Trust solutions, bolstered by AI innovations.

Quarterly Revenue Growth Indicates Strong Demand

Zscaler reported a revenue of $628 million for Q1, reflecting a robust year-over-year growth of 26% and a sequential increase of 6%. This growth demonstrates strong demand for their Zero Trust Exchange platform, fortified by increasing customer commitments. The bookings growth accelerated to over 30%, significantly surpassing the average growth rate of legacy network security vendors, highlighting Zscaler's market share gains in a competitive landscape.

Impressive Billings and Customer Growth

Total calculated billings rose by 13% year-over-year, amounting to $517 million. Notably, unscheduled billings, related to new upsell and renewal agreements, showcased more than 20% year-over-year growth, which is a solid indicator of customer satisfaction and engagement. The company ended the quarter with 585 customers generating over $1 million in annual recurring revenue (ARR) and 3,165 customers contributing over $100,000 in ARR, marking a 25% year-over-year increase in high-value customers.

Profit Margins Reflect Operational Efficiency

Zscaler maintained a strong gross margin of 80.6%, slightly lower than the previous year's 80.7%. The operating margin increased by 330 basis points to around 21%, while free cash flow margin reached an impressive 46%. The strategic focus on operational discipline allowed Zscaler to achieve a significant operating profit of approximately $126 million to $128 million for Q2, suggesting a well-managed cost structure amidst growth.

Guidance for Continued Expansion

For Q2 and the full year of fiscal 2025, Zscaler expects revenues to be in the range of $633 million to $635 million, showcasing year-over-year growth of about 21%. The company anticipates a full-year revenue target between $2.623 billion to $2.643 billion, representing a growth of 21% to 22%. Additionally, the operating profit guidance for the full year is set between $549 million to $559 million, and earnings per share are projected to fall between $2.94 and $2.99, based on 163 million fully diluted shares.

Emerging Products Drive Future Growth

Zscaler's emergent products, particularly in AI and data protection, are gaining traction, with expected new business activity in these categories reaching the mid-20% range. The company highlighted successful engagement with key customers for AI application security, addressing concerns over data leakage amidst rising AI adoption. This proactive approach positions the company favorably to capitalize on the ongoing market transformation towards secure AI utilization.

Shift to Account-Centric Sales Boosts Performance

The transition to an account-centric selling model is yielding positive results, evidenced by stronger customer engagements and improved sales pipeline quality. This strategic change has allowed for higher close rates and increased revenue from existing accounts, contributing to a successful quarter amid increased competitive pressures in cybersecurity. Zscaler emphasizes its broad capabilities to replace legacy systems like firewalls, further driving customer interest in its solutions.

Strong Position in Federal Markets

Zscaler continued to build on its success in the federal market, having established relationships with 14 out of the 15 cabinet-level agencies in the U.S. The growing adoption of Zero Trust architecture by federal agencies offers substantial opportunities for Zscaler as government entities seek to enhance their security postures while reducing costs associated with traditional infrastructure.

Leadership Transition and Confidence in Strategy

As CFO Remo Canessa prepares for retirement after a significant tenure, his contributions are acknowledged as pivotal to the company's success. Zscaler's leadership team expresses confidence in its strategic roadmap and operational execution, with new hiring initiatives aimed at further strengthening their sales capabilities—the company is poised for continuous growth in an evolving cybersecurity landscape.

Earnings Call Transcript 2025-Q1

[Operator]

Good day and thank you for standing by. Welcome to the Zscaler First Quarter 2025 Earnings Call. [Operator Instructions] Please be advised that today's conference is being recorded. I would now like to hand the conference over to your speaker today, Ashwin Kesireddy, Vice President, Investor Relations and Strategic Finance. Please go ahead.

[Ashwin Kesireddy, executive]

Good afternoon, everyone, and welcome to the Zscaler First Quarter Fiscal Year 2025 Earnings Conference Call. On the call with me today are Jay Chaudhry, Chairman and CEO; Remo Canessa, CFO.

Please note we have posted our earnings release and a supplemental financial schedule to our Investor Relations website. Unless otherwise noted, all numbers we talk about today will be on an adjusted non-GAAP basis. You will find the reconciliation of GAAP to the non-GAAP financial measures in our earnings release.

I'd like to remind you that today's discussion will contain forward-looking statements, including, but not limited to, the company's anticipated future revenue, calculated billings, operating performance, gross margin, operating expenses, operating income, net income, free cash flow, dollar-based net retention rate, future hiring decisions, remaining performance obligations, income taxes earnings per share, our objectives and outlook, our customer response to our products and our market share and market opportunity. These statements and other comments are not guarantees of future performance but rather are subject to risks and uncertainties, some of which are beyond our control. These forward-looking statements apply as of today, and you should not rely on them as representing our views in the future. We undertake no obligation to update these statements after this call. For a more complete discussion of the risks and uncertainties, please see our filings with the SEC as well as in today's earnings release.

I also want to inform you that we'll be attending the following conferences: UBS Global Technology and AI Conference in Scottsdale on December 4, Scotia Bank, Global Technology Conference in San Francisco on December 10, Barclays Global Technology Conference in San Francisco on December 11, Needham Growth Conference on January 9 and 10.

Now I'll turn the call over to Jay.

[Jagtar Chaudhry, executive]

Thank you, Ashwin. We delivered a strong Q1 with all matrix once again exceeding the high end of our guidance. Revenue grew 26% year-over-year and bookings growth accelerated to over 30%, driven by increasing customer commitments to our Zero Trust Exchange platform and growing interest in our AI solutions.

Our billings growth of 13% far exceeded the recent average growth rate of publicly traded legacy network security vendors by over 10 percentage points demonstrating our continued market share gains in cybersecurity. We are making tremendous progress executing on our go-to-market plans and driving innovations that our customers are relying on us for with continued strong demand, I'm very pleased to increase our full year billings and revenue guidance. Q1 was a solid quarter for profitability as well with our operating discipline, we grew operating profit by 50% year-over-year and delivered new Q1 records for operating margin of 21% and free cash flow margin of 46%, while many successful SaaS companies strive for rule of 40 results, our revenue growth and free cash flow margin makes us a rare SaaS company that operates at rule of 70 or better. This places us in the top handful of the 145 largest public SaaS companies in my scores of customer conversations, CXOs are prioritizing Zero Trust security and AI for their IT spending. We are fighting AI with AI. We recently delivered several AI innovations and are continuing to expand our AI portfolio in the following 3 areas of high customer interest. First, securing use of AI applications for faster and safer adoption of public and private applications. We enable customers to securely adopt public AI apps such as ChatGPT, Microsoft CoPilot and Getacopilot with Zscaler for coal pilots. Zscaler for copilots provides granular visibility to find and classify on-prem or cloud data gives access control for only the right users to access data. Limits copilots discovery of data, fixes copilot misconfigurations and enforces policies to stop sensitive data from leaking. Our industry-leading capabilities in this area are driving large customer wins. For example, in a new logo win, a Global 2000 technology services customer purchased our AI-powered data protection solution, which accounted for 50% of the 7-figure ACV deal. Data protection enables this customer to securely roll out Microsoft CoPilot, the secure use of Office 365 was a huge opportunity for us. And I believe that secure use of Microsoft Copilot is a huge opportunity as well.

In addition to enabling secure adoption of core pilots, we provide visibility and control into public AI apps used by employees scored the risk level of AI apps and store prompt queries for logging or auditing purposes. With the widespread adoption of public AI apps, we are seeing growing demand for their security. Our innovations are expanding beyond securing public AI apps to customers' private AIFs including chatbots, LLM and SLM models and inference engines. We are expanding the functionality of our in-line proxy-based zero trust exchange with an LLM proxy to analyze prone queries and results to detect and prevent pump injections and other malicious activities. Second, AI-powered automated digital experience for operational efficiency and faster resolution of end-to-end user performance issues. Our already available automated digital experience products including ZDX copilot are contributing to large deal wins. For example, in a 7-figure ACV upsell deal, a large health care provider doubled the ZIA subscription to 60,000 seats and purchased ZDX Advances, which includes ZDX core pilot for all 60,000 seats. This customer plans to use ZDX copilot to automate IT operations and reduced resolution time for service tickets. With this deal, this customer's annual spend more than double with us. We are taking ZDX copilot to the next level with ZDX AI agent to automate root cause analysis, resulting in a further reduction in resolution time and provide automated recommendations to fix user performance issues. Third, AI-powered security products or better cyber and data protection and SecOps automation. We have delivered several AI-powered innovations for data and cyber protection such as automated data classification, Gen AI-based image classification, zero-day vulnerability detection and prevention, AI-powered app segmentation and ML-based IoT OT device discovery. For increased productivity and efficiency of security operations, we have introduced several innovations, including Risk360 and unified availability management by extending our Zero Trust platform with Data Fabric technology. We are developing other AI-powered innovations, including breach prediction, threat hunting and more. Our AI-powered solutions leverage the vast amount of proprietary enterprise data generated by 500 billion transactions per day processed by our Zero Trust Exchange. We will continue to leverage our data and combine it with new agent-based technologies to rapidly expand our AI portfolio. The combination of Zero Trust and AI is creating exciting new opportunities, which we are well positioned to capture with our large and expanding platform.

Moving on, hackers are finding new ways to exploit the limitations of legacy castle-and-moat security to launch an increasing number of sophisticated attacks, such attacks often start with exploitation of firewall or VPN architecture. These traditional security solutions enable threat actors to move laterally on the corporate network and compromise the entire organization to make up for the flawed architecture, legacy security vendors are offering disjointed point products under the pretext offer platform. This increases constant complexity for customers. A Fortune 50 retail customer recently told me that a legacy final vendor sold them a so-called platform. And when they try to implement it, they found that it was nothing more than consolidated billings. Complexity is the enemy of security and resilience. No wonder, so many enterprises are getting breached despite spending billions of dollars on so-called SASE Security, which is nothing more than virtual firewalls and VPNs in the cloud. Sooner organizations move away from these disjointed security solutions to Zero Trust, the sooner they will become secure and resilient. Zscaler customers modernized and future-proofed security with our platform for better security, operational simplicity and cost reduction.

Today, we proudly secured over 35% of Global 2000 and about 45% of the Fortune 500. And we're seeing more and more large enterprises adopt our platform. To give you an example, in a new logo 7-figure ACV deal, a global 2,000 aerospace and defense company purchased ZIA for 100,000 users and workload protection for 5,000 workloads. This customer initiated a strategic shift towards the cloud first architecture and chose Zscaler as their partner for their security transformation. Additionally, we see significant opportunity for ZPA upsells. Let me share an example, an existing Fortune 500 insurance customer expanded the ZIA subscription from 45,000 to 70,000 users and purchased ZPA for all 70,000 users. In addition to securing access to private applications, rapid M&A integration for faster time to value realization was a key objective for this customer. ZPA expedites M&A integration by securely providing Zero Trust access to applications for the acquired entities, employees without having to connect the networks of 2 companies. This is not possible with a firewall-based SASE solution. With this upsell, this customer's annual spend with us almost doubled to over $5 million. We expect ZPA to continue to be one of our biggest growth drivers in fiscal '25.

Moving on to data protection. At Zenith Live, we outlined our broader vision of our data protection solution that our customers are increasingly adopting. For example, in a 7-figure ACV deal, a Fortune 500 pharma company purchased our data protection solution for over 23,000 users to eliminate multiple point products, including legacy data loss prevention, insider threat management, e-mail, data security and more. This purchase nearly double the annual spend of this customer with Zscaler. I'm thrilled with the innovations we are bringing to our data protection solution. For example, we recently introduced a unique offering, which combines the capabilities of CPA with our cloud browser product to bring Zero Trust access to third-party suppliers and partners. Traditionally, third-party application access was addressed either by VDIs that are expensive and complex all my third-party enterprise browsers that require yet another agent to be deployed on the endpoint. Third-party enterprise browsers are complex to deploy and manage, and their vulnerabilities are being exploited by attackers. Our solution uses standard browsers like home and provide superior security while eliminating VDIs and third-party browsers. To give you a few examples, a Global 2000 IT services company for 20,000 users, a U.S.-based shipping and packaging company for 7,000 users, a Global 2000 insurance company for over 5,000 users each purchased our cloud browser solution to eliminate legacy third-party access products. We will continue to invest to accelerate innovations in this area.

Next, our emerging products, including ZDX, Zero Trust for branch and cloud and AI analytics are increasingly contributing to our success. I'm excited to share that Emerging Products ARR is growing twice as fast as our core products. Combined with our account-centric go-to-market motion, our emerging products are driving large 7-figure deals.

Let me share 2 examples. First, in a 7-figure upsell deal, a Fortune 500 transportation customer purchased ZIA for workloads, eliminating virtual firewalls from the cloud environments. This upsell drove approximately 40% increase in the annual spend of this existing $5 million-plus ARR customer, driven by our continued innovations for workload protection and our account-centric go-to-market strategy. we are securing large workload footprints for increasing number of customers, which has accelerated workload protection ARR over the past couple of quarters. Second, in a new logo, 7-figure ACV win, a large U.S. automated supplier purchased our Zero Trust SD-WAN for all 45 of the branches and Zero Trust device segmentation for their 37 factories. A combination of 0 across SD-WAN with Zero Trust device segmentation will eliminate lateral threat movement among branches and factories, which is not possible to achieve with traditional SD-WAN. I believe, with our solutions, we will accelerate the decline of North-South and East-West firewalls. This deal is an example of a global system integrator or GSI, working closely with Zscaler to transform customers' legacy networks and security to Zero Trust architecture.

Next, in the federal vertical, we added a new cabinet level agency this quarter. And now we proudly serve 14 of the 15 cabinet-level agencies including the DoD Federal agencies are adopting the Zscaler platform to improve their security posture and reduce cost and complexity by eliminating firewalls and VPNs. Having landed these cabinet-level agencies we see significant upsell opportunities to grow ARR over time. We are also continuing expansion into other federal agencies. For example, in a new logo win, a large federal agency purchased ZPA and ZDX, for 22,000 users in a 7-figure ACV deal. Government investigations by multiple countries, including Australia, the European Union, Japan, Singapore, the United Kingdom and the United States concluded that nation state fiber attackers are successfully breaching the moat created by firewall-based solutions. And as a result, these governments are planning to adopt Zero Trust architecture. We see this as a huge opportunity, and we will leverage our success in U.S. federal to grow our business in these and other countries.

Next, let me share a few highlights of the progress we are making to up-level our go-to-market engine. I am pleased to share that we're making solid progress on hiring and attrition plans. We had a strong quarter of hiring highly experienced Kona caring account executives and had load attrition. We expect these trends to continue in Q2, strengthening our sales capacity heading into the second half of fiscal '25. Last year, we made the strategic decision to shift our sales motion from opportunity-based selling to account-centric selling. Our COO, Mike Rich and his team are executing on this strategy, and we are already seeing stronger customer engagements, higher quality pipeline, better close rates and more business with customers. Strong customer engagement and sales execution contributed to over 20% year-over-year growth in unscheduled billings in Q1. As a reminder, unscheduled billings is comprised of new upsell and renewal billings. We also grew $1 million cross ARR customers by 25% year-over-year to 585. We ended Q1 with over 65 customers spending $5 million plus annually with us.

Moving on to the channel. We are working closely with our strategic partners, including GSIs, strategic national and regional partners and hyperscalers to drive faster value realization for customers. An increasing number of strategic partners are embedding Zscaler's platform in their solutions for their customers. our joint partner offerings are expanding beyond ZIA, ZPA and ZDX, to now include our emerging products. Overall, with strong execution in our account-centric sales motion, we expect to continue to grow the number of $1 million plus and $5 million-plus customers at a strong pace. With a more mature pipeline, a stronger sales team and growing partner engagements. I believe we remain on track to increase sales productivity and achieve strong growth. In conclusion, our expanding portfolio that combines the power of Zero Trust and AI is resonating with customers. Our customer engagements are getting stronger as demonstrated by our Net Promoter Score or NPS of over 70, which is well over 2x the SaaS company average. I am proud of the progress we made in our go-to-market initiatives this quarter, and we will continue to make further progress towards achieving our next goal of $5 billion in ARR.

Now I'd like to turn over the call to Remo for our financial results.

[Remo Canessa, executive]

Thank you, Jay. Our Q1 results exceeded our guidance on growth and profitability, even with ongoing customer scrutiny of large deals.

Revenue was $628 million, up 26% year-over-year and up 6% sequentially. From a geographic perspective, Americas represented 54% of revenue, EMEA was 30% and APJ was 16%. Our total calculated billings in Q1 grew 13% year-over-year to $517 million. As Jay mentioned, our unscheduled billings comprised of new upsell and renewal billings grew over 20% year-over-year. Our calculated current billings grew 12% year-over-year. Our remaining performance obligations, or RPO, grew 26% from a year ago to $4.411 billion. Current RPO was approximately 49% of the total RPO. We ended Q1 with 585 customers with over $1 million in ARR and 3,165 customers with over $100,000 in ARR. This continued strong growth of large customers speaks to the strategic role we play in our customers' digital transformation journeys. Our 12-month trailing dollar-based net retention rate was 114%. While good for our business, our increased success in selling bigger bundles, selling multiple pillars from the start and faster sales within a year, can reduce our dollar-based net retention rate in the future. There could be variability in this metric on a quarterly basis due to the factors I just mentioned.

Turning to the rest of our Q1 financial performance. Total gross margin of 80.6% compared to 80.7% in the year ago quarter. Our total operating expenses increased 5% sequentially and 19% year-over-year to $372 million. We continue to generate significant leverage in our financial model with operating margin of approximately 21%, an increase of about 330 basis points year-over-year. Our free cash flow margin was 46%, including data center CapEx of approximately 3% of revenue. We ended the quarter with over $2.7 billion in cash, cash equivalents and short-term investments.

Now let me provide our guidance for Q2 and full year fiscal 2025. As a reminder, these numbers are all non-GAAP, for the second quarter, we expect revenue in the range of $633 million to $635 million, reflecting a year-over-year growth of approximately 21%, gross margins of approximately 80% and I would like to remind investors that we're reducing new products that are experiencing strong growth and are optimized for faster go-to-market rather than margins. This will continue to influence our gross margins. We plan to optimize new products for margins over time as they scale. Operating profit in the range of $126 million to $128 million, net other income of $18 million, earnings per share in the range of $0.68 to $0.69, assuming a 23% tax rate and 163 million fully diluted shares. For the full year fiscal 2025, we expect billings in the range of $3.124 billion to $3.149 billion, reflecting a year-over-year growth of 19% to 20%. We expect our first half mix to be approximately 39.3% to 39.5% of our full year billings guide. Revenue in the range of $2.623 billion to $2.643 billion, reflecting a year-over-year growth of 21% to 22%. Operating profit in the range of $549 million to $559 million. Earnings per share in the range of $2.94 to $2.99, assuming a 23% tax rate and approximately 164 million fully diluted shares. We expect our free cash flow margin to be approximately 23.5% to 24%. We expect our data center CapEx to be approximately 3 points higher as a percentage of revenue compared to fiscal 2024. And as we invest in upgrades to our cloud and AI infrastructure. With a large market opportunity and customers increasingly adopting the broader platform, we'll invest aggressively to position us for long-term growth and profitability.

On a personal note, I'd like to share that after 8 amazing years, I have decided to retire as Chief Financial Officer of scale. It has been my greatest pleasure to be a part of Zscaler's journey from less than $250 million to over $2.5 billion in ARR. I'd like to thank Jay for his confidence in me. He has been a true partnership, which for me personally has been very special. I'd also like to thank the employees of Zscaler and our Board of Directors for their support through the years and also thank our customers, partners, investors and analysts. I am confident that Zscaler will continue to shape the next several decades of cybersecurity with a Zero Trust Exchange platform. I look forward to following Zscaler's progress.

Now I'll turn the call over to Jay.

[Jagtar Chaudhry, executive]

I want to personally thank Remo for all his contributions to Zscaler. Remo has been a friend and a trusted business partner whose wisdom and judgment helped us make many critical decisions as we scaled our business at an unprecedented pace. He will be dearly missed. Remo will remain CFO until his successor appointed.

With that, operator, you may now open the call for questions.

[Operator]

[Operator Instructions] Our first question will come from the line of Saket Kalia from Barclays.

[Saket Kalia, analyst]

First off, Remo congrats on your retirement. [indiscernible] on a Zscaler and all the companies before this as well.

[Remo Canessa, executive]

Thank you, Saket. I appreciate that.

[Saket Kalia, analyst]

Jay, maybe for you. Thanks for the detail on the unscheduled billings growth of 20% this quarter. Can you just maybe talk about how that did versus your expectation or maybe versus last quarter for some context? And as you look forward, do you still feel confident in sort of the accelerated billings growth as that contracted noncancelable billings pool sort of grows and normalizes back to what it was historically?

[Remo Canessa, executive]

So I'll start. So the 20% growth is what we expected and actually exceed our expectations also. As we talked about the scheduled contracted billings is 7% in the first half and 23% in the second half. So we do expect the unscheduled billings to be 20% plus also in the second half as we talked about in the last call.

[Jagtar Chaudhry, executive]

Good. And in addition to that, let me add a few comments. Our Q1 was very strong. There are 3 factors that I believe will keep on helping us the second half. One, we're seeing strong demand for Zscaler platform, including solid signs of interest for AI security offerings we have, that wasn't there before. Two, we have a strong and growing pipeline. Three, our ramp sales capacity has strengthened as we have lower sales attrition in Q1. So I feel very good about our guidance for the second half.

[Operator]

Our next question will come from the line of Andrew Nowinski from Wells Fargo.

[Andrew Nowinski, analyst]

Remo, sorry to hear you retiring. It's certainly been a pleasure working with you over the last decade. I guess -- I guess I'd like to ask a question on the data security. The ZDX copilot certainly sounds like an interesting opportunity. Given your prior partnership with Microsoft and our ability to securely deliver traffic to Office 365, I would imagine Microsoft is supporting you in this endeavor, but just wondering maybe if you could provide some more color on how you're helping -- how they're helping you bring more customers and help more customers roll out copilot and whether you are seeing Zscaler beat Varonis in that space?

[Jagtar Chaudhry, executive]

Sure. It's a good question. Yes. What we're building is essentially leveraging a lot of work we did with Microsoft over the years. we've done tons of integration, including integration for data discovery and classification while it's talking of one drive our SharePoint and others. What gives us unique advantages that we are sitting in line for all the traffic for Office 365. We can also go what's known as out-of-band using API for some of the classification discovery and the like. And but this is as big of opportunity for us as it was actually for Office365, maybe bigger in some ways. We are here -- the customers have already embraced Office 365. Customers are actually beginning to use Microsoft Copilot and now they are concerned about the data leakage and privacy as well. We're seeing real deals. I briefly mentioned during our earnings release, a key 2000 company, they wanted to secure Microsoft Copilot. So they did a deal with us. This was a 7-figure deal and is really driven by our data protection solution that's AI-powered, which identifies and make sure only the right amount of data can be accessed by the right user when they're using Microson Copilot. So while many companies out there will try to do AI security, but not very many of them are sitting in the traffic path. They may be able to do one piece of it, but we can do both in line as well as data sitting at us. So I'm very excited with the opportunity. And you'll see more coming with us. We are already working with the field with many of the Microsoft organizations to make sure we help our customers as customers have the same common interest.

[Operator]

Our next question comes from the line of Gabriela Borges from Goldman Sachs.

[Gabriela Borges, analyst]

Jay, I want to follow up on your comments on ZPA being a particularly meaningful driver of growth in FY '25. Maybe just remind us how far long do you think we are in the VPN replacement cycle. How is the competitive environment changing? And what are some of the catalysts that might close metaprice to reevaluate their VPN and your trust VPA strategy now versus maybe call it during COVID?

[Jagtar Chaudhry, executive]

Yes, Gabriela, I thought VPNs will be gone a long time ago. There are lots of lots in setting out to you. Similar to, we used to wonder how long the Blue Coat proxies be here. We're still discovering lots of them and replacing them. But the opportunity is not just VPN. VPN is the starting point. It's a kind of big hit for us. we are the entire inbound DMZ that it places the whole stack, starting with lorbalancers, DDoS protection, external firewalls, VPN and all that kind of stuff. So that's a big opportunity. And the next phase of this opportunity ends up being zero trust segmentation out there. So 3 VPN replacement, entire inbound DMC and segmentation of Zero Trust. If you look at what we've done with ZPA, it turns our numbers, it's a remarkable growth at the current IPO, ZPA was about a single-digit percent of new and upsell business. Today, ZPA is over 40% of the mix of new and upsell generated by ZIA and ZPA combined. I believe it's a matter of time when all of our customers will buy ZIA, ZPA and ZDX for every employee, that's where our customers are headed. We see more and more wins out to and the so-called competition. They're still trying to spin up virtual VPN in the cloud and call it Zero Trust. So we think we have a big advantage say for quite some time.

[Operator]

Our next question will come from the line of Brad Zelnick from Deutsche Bank.

[Brad Zelnick, analyst]

So much information you've shared Remo, fantastic run congrats and nice strong bookings start to the year guys. Jay, I was surprised to hear you compare your growth this quarter to that of the firewall players out there, just given how differentiated you are. And some of those folks are talking about significant hardware refresh opportunities ahead as they have boxes that go end of life. If you look backwards, to what extent are those events opportunities for Zscaler to go in and totally rearchitect and transform and displace a set of branch firewalls, for example, and bring them onto your platform?

[Jagtar Chaudhry, executive]

Yes. I agree with this statement. I was wondering should we ever talk about comparing our billings growth to firewalls, you shouldn't, but the delta was so big that we thought it's worth highlighting it. But moving on to that's the other question you had about a fresh next year. When people used to ask me 3 years ago, are you replacing firewall directly. And I used, I would say, no, we are not focused on firewalls. But where we are sitting today, firewall refresh is a good opportunity for us. And we are planning to target customers with our cost takeout programs. till about a year ago, we have limited impact on firewalls, but now with a combination of our Zero Trust SD-WAN and Zero Trust device segmentation. We're able to replace most of the firewalls north south firewalls, east west firewalls in data center in branches as well in the cloud as well. So I'm seeing tremendous customer interest to reduce or eliminate firewalls with our platform. So it's a good opportunity that we'll be pursuing.

[Brad Zelnick, analyst]

If I could just sneak in a quick follow-up, I don't know for you or Remo, but 20% plus bookings growth, I mean that is really strong. I think by my math, current bookings using CRPO even is strong as well. So it's not as if this is driven by duration. Can you maybe unpack that for us just to help us to understand I understand the scheduled versus unscheduled billings dynamic, but we're looking at a pretty significant delta. And I just -- I feel like that bookings number is so strong. It's worth highlighting and maybe just drilling into a bit for everyone.

[Remo Canessa, executive]

Yes. I mean it's a great number, Brad. 30% bookings growth are really proud of that. One thing to call out is that -- is that our unscheduled fillings of 20-plus percent growth, basically, both in the first half and second half is helping that. So -- but 30% bookings growth is, again, a really good number. CRPO, strong growth in CRPO with 22% RPO growth year-over-year 26%. So all good metrics. And again, we're well positioned with our customers. Our new and upsell is 65% with upsell in Q1 again, selling into accounts with the new go-to-market organization is taking hold. A lot of good things really -- really happen for Zscaler as we go into the second half -- into Q2 and also the second half of this year.

[Operator]

Our next question comes from the line of Mike Cikos from Needham.

[Unknown Analyst]

And I just really wanted to come back to the 20%-plus year-to-year unscheduled billings in the quarter. So congrats on that. Just wanted to see, can you tie that into the disclosure that we have today on that emerging products. Is most of that on scheduled billings growth being sustained by those emerging products to see or hear that, that ARR base is growing twice as fast as core? I wanted to get some more color around if that's the driver on which products would that emerging products class is seeing the most traction? Anything that would be incremental.

[Jagtar Chaudhry, executive]

Yes. I mean it's -- Mike, it's across the board. It's both emergent products as well as our core products. The emerging products include AI, workflow protection, ZDX and our branch solutions. ZDX is doing very well, what we called out also workloads is doing well for us. Going forward, we beat the comment that we'd be in the mid-20s percentage of new and upsell for the emerging products, and we still feel that. But to answer your question, it's across the board, our entire platform. Yes. Maybe I can add a couple of more comments about it. Yes. The emerging products ARR growing at 2x or core products. We're very excited about it. So what's driving it? The branch is one part of it. I highlight some of the deals for the branch. We talked about a 7-figure ACV for the branch for this automotive suppliers. We set zero trust SD-WAN securing 45 branches. We airgap doing 0 segmentation of devices for 37 branches. So that thing is taking on, we believe this is going to disrupt the SD-WAN, which enables lateral at movement and a transfer attacks is especially pleased with the progress of making on cloud workload protection. We have been selling workload protection. We did a grade 7-figure deal in a workload that is very interesting because a lot of these customers in the past have started small with us. early on in smaller footprints. Now they're expanding those footprints with bigger deals, and that's what's going to accelerate our opportunity here. And then there will be zero trust workload segmentation the next opportunity. That's why we are excited because the only competition in the workload space for us for communication is all school had walls, and we are excited.

[Operator]

Our next question will come from the line of Ittai Kidron from Oppenheimer.

[Ittai Kidron, analyst]

Remo, so congratulations and enjoy retirement, you earned it. A couple of small ones for me. First of all, if I may. Remo, last earnings call, you give an ARR number and an ARR target for the end of the fiscal year. I was wondering if you can give us an update on ARR here now in the target for year end. And then secondly, on the emerging products, can you remind us what are the 2 or 3 biggest pieces within the emerging products category, number one? But number two, also, what percent of new business activity do they represent for you right here right now? I'm just trying to get a better sense of the change in mix there contribution-wise?

[Remo Canessa, executive]

I'll start then let -- let Jay finish up. So our ARR target for the end of the year is $3 billion. And so we are on track for that $3 billion. Net retention rate is 114%, which again, we think is outstanding. As we talked about, that net retention rate is influenced with customers buying more upfront. But because of the new emerging products and the strength of the emerging products, that has a positive effect to that related to what makes up the part of vision products. I'll turn it over to Jay.

[Jagtar Chaudhry, executive]

Yes. Let me expand upon that. You can put them in a few buckets. ZDX started out. It has done very well. It's a biggest piece of it. Zero Trust branch started out the Branch Connect Group with our Zero Trust appliance. Zero Trust SD-WAN. It's a great area for us. Zero Trust workload cloud, I shared a couple of examples, good opportunities. And now the AI products is becoming actually pretty good for us as well. So we are excited. In the past, we had talked about a part of AI products for AI analytics. This solution bundle was up 90% year-over-year. It's coming from a small base, but we're very pleased with the traction, other various emerging products are taking. In the new business and upsell opportunity, as we called out, we expect it to be in the mid-20% range, up from, I believe, it was 22% last year. So we do see emerging products increasing in strength as we go forward.

[Operator]

Our next question will come from the line of Rob Owens from Piper Sandler.

[Robbie Owens, analyst]

And I guess while I have the opportunity, I'll pick on Remo and something he said because Remo in your prepared remarks, you talked about ongoing customer scrutiny and large deals. And I don't know if that's just a general economic comment or there's something else covering your opinion. A lot of the script is around adding AI in some of these transformational solutions that you guys are rolling out. Just curious if there's something else that might be lending to longer sales cycles as deals are getting bigger or if that was just more of a general economic comment?

[Remo Canessa, executive]

Yes. Robbie, it was just a general economic comments, which basically, we haven't really seen any change for a while.

[Jagtar Chaudhry, executive]

Yes. But that in ways helps us. We are seeing interest in cyber, especially cyber that can really reduce the chance of ransom ware attacks and the like. So that's where Zero Trust comes in. And then the CIO offer will say, and that hasn't changed. I like your cyber method. But if you got to use my cost and complexity to doubly motivated. So we have combined the need for Zero Trust and now AI becomes a further catalyst with cost and complexity reduction, which is helping us because most companies can do cost reduction. Legacy final vendor is not going to cannibalize that large installed base of firewalls. We can.

[Operator]

Our next question will come from the line of Brian Essex from JPMorgan.

[Brian Essex, analyst]

Remo, congratulations. We're certainly going to be working with you. I would maybe want to hit on the SecOps side of the equation. Jay, can you help us understand where you are in terms of progress with Avalor and I noticed in the press release, you noted that you surpass the [ 0.5 trillion ] daily transactions, which is huge. How are your customers evaluating your ability to scale over the volume of data and traffic that you have given all the changes we're seeing in the SecOps side of the market in the current environment?

[Jagtar Chaudhry, executive]

SecOps market is ready for disruption. It's a big market. We have taken very thoughtful approach of starting by building the data fabric so that all queries and all the stuff doesn't need to come to the massive data link, which can take forever. So Avalor acquisition has done that for us. Now building upon Avalor, we have done a few things already that are in the market. We started with Risk360 that's powered by the back end the Avalor. We have unified value management that actually helps customers being sure they can properly prioritize vulnerabilities in that space. And then running on the same platform, some of the digital experience offerings are getting bigger and better as well. In the seconds, the biggest thing we're doing that others can't easily do is -- is essentially scoring and prioritization of what needs to be done. But the next phase that the power will be the products we're building, it's called reach prediction and [indiscernible] hunting. They're working with some of the early stage design win customers are seeing some very good results. So what the point we want to make was, you can go and build technology, but if you don't have the kind of private enterprise data you need, you can't do much with it. Let me contrast it, ChatGPT, took the public data of the whole world, trained it on LLS, they're able to do it well, but the logs are private. Zscaler having those lots available, we can actually train the stuff. But based on the collected learning, this thing can be applied to a specific customers, so each customer gets benefit. So we are increasing our investment in this area. And over time, you're going to start seeing some more meaningful results in this area.

[Operator]

The next question will come from the line of Joel Fishbein from Truist.

[Joel Fishbein, analyst]

Remo, big shoes to fill and you'll be sorely missed Jay, you talked a little bit about the public sector and U.S. Federal. Just curious if there's been any update on DoD and ThunderDome and any other projects there. They've been looking at doing a realization and you seem to be primed for that. I would love to hear where that stands.

[Jagtar Chaudhry, executive]

So we continue to gain share in federal market across the board. One other thing roofs now we reached 14 of the 15 Abney Lab agencies as our customers. across defense, too, we have a number of initiatives. We had talked about some of them in our past. We think we have very, very big opportunity out there -- and with the new administration coming on board, we are all reading about the push for cost reduction. I believe that's a positive for us, for our federal business. This is because we reduce cost and complexity. We eliminate North-South, East West, VPN, NAC, we segmentation, all of those kind of products. So I'm excited about the federal opportunities, and it's not just the U.S. They're taking the same kind of solutions to some of the western friendly, narrow friendly countries as well.

[Operator]

Our next question will come from the line of Fatima Boolani from Citi.

[Fatima Boolani, analyst]

I appreciate it and Remo, congratulations on an illustrious career. I wanted to ask you a question with regards to the updated billings guidance and some of the implied second quarter billings based on some of the seasonality commentary you shared Remo. Is there anything that we should think about Visa transactions that maybe landed early. Just trying to get a better sense of, hey, first quarter was really strong out of the gate, certainly relative to expectations. But why would we see some of that pay down in the second quarter -- second fiscal quarter. If you can give us some color around that.

[Remo Canessa, executive]

Yes, our guide for the second quarter for billings is actually up the 39% to -- 39.3% to 39.5% would indicate that for the second quarter. The key thing is that we had a great first quarter. And if you take a look, we're passing the beat for the entire year. Really fundamentally, nothing's changed what we talked about on the prior call, the key dynamic, which is occurring is the scheduled billings at 7% in the first half and 23% in the second half. So nothing's really fundamentally changed. What I can say is that our pipeline supports our guidance. What I can say also is that hiring has been very good in our sales organization. Attrition is down the go-to-market organization really is becoming very, very strong. SIs as we go forward, will become a more important part to Zscaler. So the second half, basically, as we talked about and you have our guidance, we brought up guidance for the full year, and we feel comfortable with that. Absolutely, also the same thing, the go-to-market execution up Mike Bridge, our leadership team has been outstanding.

[Operator]

Our next question will come from the line of Shrenik Kothari from Baird.

[Unknown Analyst]

Congrats on the retirement, Remo. It's great working with you and good luck for the next chapter. So the shift to account-centric selling, of course, is yielding benefits already as Jay mentioned, with the pipeline quality. Just a follow-up to [indiscernible] question on the bookings growth and I'd say, Remo, and Jay, you mentioned about the partnership with GSI facilitating significant [indiscernible] you mentioned about the sound figure SD-WAN. Can you let us help provide some more quantify or color in terms of incremental type GSI-led deals? And any more examples that highlight success with GSI of that is leading to larger, bigger deals or also longer sales cycles? And how should we think of the billings going forward?

[Jagtar Chaudhry, executive]

Right. A very good question. we are actually seeing increasing contribution of GSIs, especially in large accounts. I highlighted 2 Bs actually this time that driven by GSIs as phone partners. And auto supply parts company, this was a combination of zero trust segmentation and zero trust branch, eliminating the need for firewalls and in lots and lots of factories and branches. They also -- GSI also helped us with a key U.K. service company where we sold protection for Microsoft and copier type of stuff. I think the difference we're seeing is that GSIs are now working more closely with customers starting early stage, and they are standardizing on some of our solution used to be ZIA, ZPA, ZDX, now there's standard solutions on, including emerging products as well. So good momentum and also think of it when we talk about eliminating a bunch of products generally, those products end up being what they are firewalls, their VPN, the SD-WAN, the NAC, the VDIs, the advice segmentation. It creates an opportunity for GSI partners to get services to replace take those products out. Over time, we'll start giving you more and more data about it. But I'd say we're very pleased with the results. And this is because of the leadership we added to drive GSI that's making a big difference.

[Operator]

Next question come from the line of Matt Hedberg from RBC.

[Matthew Hedberg, analyst]

Lots of really good things to think about in this quarter. I guess I wanted to go back to data protection solution. It seems like it's really contributing to large deals. And it's not the first thing you talked about I look back, I think, in Q4 of '23, fiscal '22, you talked about approaching $250 million of ARR. I think at the time it was growing about 60%. Any update on the scale of that business? I think it was maybe about 12% of ARR back then. I have to imagine it's been growing faster than the base business. But that feels like it's a really, really contributor to new and emerging product growth. .

[Jagtar Chaudhry, executive]

Yes. Data protection keeps on growing faster than our overall business. We are doing some big deals. And I think with the emergence of AI, one of the biggest thing that's going to really help drive data protection is AI because companies are worried about their data leasing out there as they start using more and more public AI services like ChatGPT, when Copilot falls under that area. And then there will be worry about private VI application that our customers are building to. So we have built probably the most comprehensive platform over data protection, not just in line, data and end point data for SaaS applications, data in the cloud with DSPM of the world and even data security for e-mails as well. I think you keep on seeing us and the other comment I made was for as all largely data protection, exfiltration happens to Internet, we are sitting in line. We're naturally there. We're doing SSL totes inspection. So it's natural for expect to grow this business, and we're doing a good job with it.

[Operator]

And our last question for today will be from the line of Roger Boyd from UBS.

[Roger Boyd, analyst]

Great. Remo has said to see you go, but I'll echo my congrats on your retirement here. It's been a pleasure. Jay, just to follow up on data security. It seems like you're having a lot of traction upselling that data security portfolio. But I'm wondering to what extent that you've seen that holistic view that really only in-line vendors can do start to influence new ZPA, ZIA deals? And how big of a competitive differentiator do you see that being going forward?

[Jagtar Chaudhry, executive]

So Data protection, majority of the time, it comes with ZIA ZPA. There is such a large installed base, our customer started on data protection side and no or small data protection. So it's easy and natural for us to start that way. We are seeing some of the customers who -- some of the prospects starting with interest on the data protection side as well. Those numbers are relatively small. The biggest products that are actually helping us with new logos without ZIA, ZPA. on products like air gaps, Zero Trust device segmentation or Avalor, unified Villiger management. Look, a company like Zscaler that has a large platform. We can sell a lot in installed base. We can also sell out of the new logo opportunities because they're a big market for us there. That's why we don't really push for one or the other. We think both are important for us and what we are doing well in both areas.

[Operator]

And with that, I would now like to turn it back over to Jay Chaudhry for any closing remarks.

[Jagtar Chaudhry, executive]

Okay. Well, thank you all for your interest in Zscaler We look forward to seeing you in one of the many conferences that we'll be participating in. See you then. Thank you.

[Unknown Executive]

Goodbye.

[Operator]

Thank you for your participation in today's conference. This does conclude the program. You may now disconnect. Everyone, have a great day.