Zscaler, Inc.

Previous wording

•servicing our debt may require a significant amount of cash, and we may not have sufficient cash flow from our business or the ability to raise funds to pay our substantial debt; and

Current wording

•repayment of our debt may require a significant amount of cash, and we may not have sufficient cash flow from our business or the ability to raise funds to pay our substantial debt; and

Previous wording

We have incurred net losses in all annual periods since our inception, and we expect we will continue to incur annual net losses for the foreseeable future. We experienced net losses of $41.5 million, $57.7 million and $202.3 million for fiscal 2025, fiscal 2024 and fiscal 2023, respectively. As of July 31, 2025, we had an accumulated deficit of $1,189.6 million. Because the market for our cloud platform is rapidly evolving and cloud-based security solutions have not yet reached widespread adoption, it is difficult for us to predict our future results of operations. We expect our operating expenses to increase significantly over the next several years as we continue to hire additional personnel, particularly in research and development and sales and marketing, expand our operations and infrastructure, both domestically and internationally, and continue to develop our platform. If we fail to increase our revenue to offset the increases in our operating expenses, we may not achieve or sustain profitability in the future.

Current wording

We have incurred net losses in all annual periods since our inception, and we expect we will continue to incur annual net losses for the foreseeable future. We experienced net losses of $63.2 million, $41.5 million and $57.7 million for fiscal 2026, fiscal 2025 and fiscal 2024, respectively. As of July 31, 2026, we had an accumulated deficit of $1,252.7 million. Because the market for our cloud platform is rapidly evolving and cloud-based security solutions are still in the process of being widely adopted, it is difficult for us to predict our future results of operations. We expect our operating expenses to increase significantly over the next several years as we continue to hire additional personnel, particularly in research and development and sales and marketing, expand our operations and infrastructure, both domestically and internationally, and continue to develop our platform. If we fail to increase our revenue to offset the increases in our operating expenses, we may not achieve or sustain profitability in the future.

Previous wording

Cloud security technologies are still evolving, and it remains difficult to predict customer demand and adoption rates for our solutions. We believe that our cloud platform offers superior protection to our customers, who are moving their applications and data to the cloud and embracing AI applications and agents. We also believe that our cloud platform represents a major shift from on-premises appliance-based security solutions. While cloud-based security solutions have seen increased adoption, traditional on-premises security appliances continue to be entrenched in the infrastructure of many of our potential customers, particularly large enterprises, because of their prior investment in and the familiarity of their IT personnel with on-premises appliance-based solutions. As a result, our sales process often involves extensive efforts to educate our customers on the benefits and capabilities of our cloud platform, particularly as we continue to pursue customer relationships with large organizations. Even with these efforts, we cannot predict long-term market acceptance of our cloud platform, or the adoption of competing products, services or technologies. If we fail to achieve broad market acceptance of our cloud platform or are unable to keep pace with industry changes, our ability to grow our business and our operating results will be materially and adversely affected.

Current wording

Cloud security technologies are still evolving, and it remains difficult to predict customer demand and adoption rates for our solutions. We believe that our cloud platform offers superior protection to our customers, who are moving their applications and data to the cloud and embracing AI applications and agents. We also believe that our cloud platform represents a major shift from on-premises appliance-based security solutions. While cloud-based security solutions have seen increased adoption, traditional on-premises security appliances continue to be entrenched in the infrastructure of many of our potential customers, particularly large enterprises, because of their prior investment in and the familiarity of their IT personnel with on-premises appliance-based solutions. As a result, our sales process often involves extensive efforts to educate our customers on the benefits and capabilities of our cloud platform, particularly as we continue to pursue customer relationships with large organizations. Even with these efforts, we cannot predict long-term market acceptance of our cloud platform, or the adoption of competing products, services or technologies. If we fail to achieve or maintain broad market acceptance of our cloud platform or are unable to keep pace with industry changes, particularly as a result of AI, our ability to grow our business and our operating results will be materially and adversely affected.

Previous wording

As a result of challenging or uncertain macroeconomic conditions, we have experienced and may experience in the future increased scrutiny and a longer approval process for initial purchases by new customers, particularly for larger transactions. We cannot predict how challenging or uncertain macroeconomic conditions will impact potential customers' purchasing decisions and whether potential customers may decide to delay purchases, decrease the size of purchases or entirely forego purchasing our services.

Current wording

As a result of challenging and uncertain macroeconomic conditions and the other challenges described in these risk factors, we have experienced, and may experience in the future, increased scrutiny and a longer approval process for initial purchases by new customers, particularly for larger transactions. We cannot predict how challenging and uncertain macroeconomic conditions or other challenges will impact potential customers' purchasing decisions and whether potential customers may decide to delay purchases, decrease the size of purchases or entirely forego purchasing our services.

Previous wording

In order for us to maintain or improve our results of operations, it is important that our customers renew their subscriptions for our services when existing contract terms expire, and that we expand our commercial relationships with our existing customers. Our customers have no obligation to renew their subscriptions for our services after the expiration of their contractual subscription period, which is typically one to three years, and in the normal course of business, some customers have elected not to renew. In addition, in certain cases, including under the new EU Data Act, customers may cancel their subscriptions without cause either at any time or upon advance written notice (commonly ranging from 30 days to 60 days), typically subject to an early termination penalty for unused services. In addition, our customers may renew for fewer users, renew for shorter contract lengths or switch to a lower-cost product suite. If our customers do not renew their subscription services, we could incur impairment losses related to our deferred contract acquisition costs. It is difficult to accurately predict long-term customer retention because of our varied customer base and given the length of our subscription contracts. Our customer retention and expansion may decline or fluctuate as a result of a number of factors, including our customers’ satisfaction with our services, our prices and pricing plans, our customers’ spending levels, decreases in the number of users to which our customers deploy our solutions, new laws and regulations impacting service contract terms, mergers and acquisitions involving our customers, competition and deteriorating or uncertain general economic conditions, which may result in reductions in IT budgets and lower employee headcounts.

Current wording

In order for us to maintain or improve our results of operations, it is important that our customers renew their subscriptions for our services when existing contract terms expire, and that we expand our commercial relationships with our existing customers. Our customers have no obligation to renew their subscriptions for our services after the expiration of their contractual subscription period, which is typically one to five years, and in the normal course of business, some customers have elected not to renew. In addition, in certain cases, including under the EU Data Act, customers may cancel their subscriptions without cause either at any time or upon advance written notice (commonly ranging from 30 days to 60 days), typically subject to an early termination penalty for unused services. In addition, our customers may renew for fewer users, elect not to renew non-user-based services, renew for shorter contract lengths or switch to a lower-cost product suite. If our customers do not renew their subscriptions, we could incur impairment losses related to our deferred contract acquisition costs. It is difficult to accurately predict long-term customer retention because of our varied customer base and given the length of our subscription contracts. Our customer retention and expansion may decline or fluctuate as a result of a number of factors, including our customers’ satisfaction with our services, our prices and pricing plans, our customers’ spending levels, decreases in the number of services purchased and/or the users to which our customers deploy our solutions, new laws and regulations impacting service contract terms, mergers and acquisitions involving our customers, competition, our customers' increasing use of AI to automate tasks traditionally performed by human workers and deteriorating or uncertain general economic conditions. Any of these factors may result in our customers and potential customers reducing their IT budgets or lowering employee headcounts, which could negatively impact our business.

Previous wording

Our future success also depends in part on the rate at which our current customers add additional users or services to their subscriptions, which is driven by a number of factors, including customer satisfaction with our services, customer security and networking issues and requirements, general economic conditions and customer reaction to the price per additional user or of additional services. If our efforts to expand our relationships with our existing customers are not successful, our business may materially suffer.

Current wording

Our future success also depends in part on the rate at which our current customers add additional users or services to their subscriptions, which is driven by a number of factors, including customer satisfaction with our services, customer security and networking issues and requirements, general economic conditions and customer reaction to the price per additional user or of additional services. In addition, as our customers increasingly deploy AI agents, our success will increasingly depend on our ability to monetize the increasing prevalence of non-user-based traffic. If our efforts to expand our relationships with our existing customers are not successful, our business may materially suffer.

Previous wording

We have experienced rapid growth in revenue, operations and employee headcount in recent periods. In addition, the number of customers, users and internet traffic on our cloud platform has increased rapidly in recent years. Our growth may not be sustainable and may not be sufficient to achieve and sustain profitability, as we also expect our costs to increase in future periods as we expand our operations and significantly increase our headcount. In addition, we expect our recent revenue growth rates will decline in the future as the size of our revenue base increases. As a result, we believe that historical comparisons of our revenue may not be meaningful and should not be relied upon as an indication of future performance. Accordingly, you should not rely on our revenue and other growth for any prior quarter or fiscal year as an indication of our future revenue or revenue growth.

Current wording

We have experienced rapid growth in revenue, operations and employee headcount in recent periods. In addition, the number of customers, users, services and internet traffic on our cloud platform has increased rapidly in recent years, and we anticipate that the increasing adoption and deployment of AI technologies by our customers will result in significant increases in traffic on and usage of our platform. Our growth may not be sustainable and may not be sufficient to achieve and sustain profitability, as we also expect our costs to increase in future periods as we expand our operations and significantly increase our headcount. In addition, we expect our recent revenue growth rates will decline in the future as the size of our revenue base increases. As a result, we believe that historical comparisons of our revenue may not be meaningful and should not be relied upon as an indication of future performance. Accordingly, you should not rely on our revenue and other growth for any prior quarter or fiscal year as an indication of our future revenue or revenue growth.

Previous wording

Any one or more of the factors above may result in significant fluctuations in our results of operations. We also intend to continue to invest significantly to grow our business in the near future rather than optimizing for profitability or cash flows. In addition, we generally experience seasonality in terms of when we enter into agreements with customers. We typically enter into a higher percentage of agreements with new customers, as well as renewal agreements with existing customers, in the second half of our fiscal year. This seasonality is reflected to a much lesser extent, and sometimes is not immediately apparent, in revenue, due to the fact that we recognize subscription revenue ratably over the term of the subscription, which is generally one to three years. We expect that seasonality will continue to affect our operating results in the future and may reduce our ability to predict cash flow and optimize the timing of our operating expenses.

Current wording

Any one or more of the factors above may result in significant fluctuations in our results of operations. We also intend to continue to invest significantly to grow our business in the near future rather than optimizing for profitability or cash flows. In addition, we generally experience seasonality in terms of when we enter into agreements with customers. We typically enter into a higher percentage of agreements with new customers, as well as renewal agreements with existing customers, in the second half of our fiscal year. This seasonality is reflected to a much lesser extent, and sometimes is not immediately apparent, in revenue, due to the fact that we recognize subscription revenue ratably over the term of the subscription, which is generally one to five years. We expect that seasonality will continue to affect our operating results in the future and may reduce our ability to predict cash flow and optimize the timing of our operating expenses.

Previous wording

We currently derive most of our revenue from sales through our channel partner network, and we expect for the foreseeable future most of our future revenue growth will also be driven through this network. Not only does our joint sales approach require additional investment to grow and train our sales force, but we believe that continued growth in our business is dependent upon identifying, developing and maintaining strategic relationships with our existing and potential channel partners, including global systems integrators and regional telecommunications service providers that will in turn drive substantial revenue and provide additional value-added services to our customers. Our agreements with our channel partners are generally non-exclusive, meaning our channel partners may offer customers the products of several different companies, including products that compete with our cloud platform. Our channel partners may also cease marketing or reselling our platform with limited or no notice and without penalty. If our channel partners do not effectively market and sell subscriptions to our cloud platform, choose to promote our competitors’ products or fail to meet the needs of our customers, our ability to grow our business and sell subscriptions to our cloud platform may be adversely affected. For example, sales through our top five channel partners and their affiliates, in aggregate, represented 28% of our revenue for fiscal 2025, 25% of our revenue for fiscal 2024 and 26% of our revenue for fiscal 2023. In addition, our channel partner structure could subject us to lawsuits or reputational harm if, for example, a channel partner misrepresents the functionality of our cloud platform to customers or violates applicable laws or our corporate policies. Moreover, our channel partners' operations may be negatively impacted by events including pandemics, international conflicts, trade regulations including tariffs, inflation and other events affecting the global economy in general. For example, these events could increase credit risk of end customers and create uncertainty in credit markets. Our ability to achieve revenue growth in the future will depend in large part on our success in maintaining successful relationships with our channel partners, identifying additional channel partners and training our channel partners to independently sell and deploy our platform. If we are unable to maintain our relationships with our existing channel partners or develop successful relationships with new channel partners or if our channel partners fail to perform, our business, financial position and results of operations could be materially and adversely affected.

Current wording

We currently derive most of our revenue from sales through our channel partner network, and we expect for the foreseeable future most of our future revenue growth will also be driven through this network. Not only does our joint sales approach require additional investment to grow and train our sales force, but we believe that continued growth in our business is dependent upon identifying, developing and maintaining strategic relationships with our existing and potential channel partners, including global systems integrators and regional telecommunications service providers that will in turn drive substantial revenue and provide additional value-added services to our customers. Our agreements with our channel partners are generally non-exclusive, meaning our channel partners may offer customers the products of several different companies, including products that compete with our cloud platform. Our channel partners may also cease marketing or reselling our platform with limited or no notice and without penalty. If our channel partners do not effectively market and sell subscriptions to our cloud platform, choose to promote our competitors’ products or fail to meet the needs of our customers, our ability to grow our business and sell subscriptions to our cloud platform may be adversely affected. For example, sales through our top five channel partners and their affiliates, in aggregate, represented 31% of our revenue for fiscal 2026, 28% of our revenue for fiscal 2025 and 25% of our revenue for fiscal 2024. In addition, our channel partner structure could subject us to lawsuits or reputational harm if, for example, a channel partner misrepresents the functionality of our cloud platform to customers or violates applicable laws or our corporate policies. Moreover, our channel partners' operations may be negatively impacted by events including pandemics, international conflicts, changes to applicable trade laws and regulations (including tariffs), inflation and other events affecting the global economy in general. For example, these events could increase credit risk of end customers and create uncertainty in credit markets. Our ability to achieve revenue growth in the future will depend in large part on our success in maintaining successful relationships with our channel partners, identifying additional channel partners and training our channel partners to independently sell and deploy our platform. If we are unable to maintain our relationships with our existing channel partners or develop successful relationships with new channel partners or if our channel partners fail to perform, our business, financial position and results of operations could be materially and adversely affected.

Previous wording

•large networking and other vendors, which offer security appliances and/or incorporate security capabilities in their networking products and other services;

Current wording

•large networking, cloud service and other vendors, which offer security appliances and/or incorporate security capabilities in their products, platforms and other services;

Previous wording

•companies with point solutions that compete with some of the features of our cloud platform, such as proxy, firewall, CASB, sandboxing and advanced threat protection, AI security, data loss prevention, encryption, load balancing and VPN; and

Current wording

•companies with point solutions that compete with some of the features of our cloud platform, such as proxy, firewall, CASB, sandboxing and advanced threat protection, AI security, DLP, DSPM, browser security, MDR, SecOps, load balancing and VPN; and

Previous wording

•other providers of IT security services that offer, or may leverage related technologies to introduce, products that compete with or are alternatives to our cloud platform.

Current wording

•other providers of IT security services that offer, or may leverage related technologies, including AI, to introduce products that compete with or are alternatives to our cloud platform.

Previous wording

Our competitors may be successful in convincing IT decision makers that legacy appliance-based security products or hybrid security cloud solutions based on legacy technology are sufficient to meet their security needs and provide security performance that competes with our cloud platform. In addition, our competitors have and may develop cloud-based solutions with architectures similar to our products. Further, many organizations have invested substantial personnel and financial resources to design and operate their appliance-based networks and have established deep relationships with appliance vendors. As a result, these organizations may prefer to purchase from their existing suppliers rather than add or switch to a new supplier.

Current wording

Our competitors may be successful in convincing decision makers that legacy appliance-based security products, hybrid security cloud solutions based on outdated technology or newly developed cloud-delivered and/or AI-based security services are sufficient to meet their security needs and provide security performance that competes with our cloud platform. In addition, our competitors have and may develop cloud-based solutions with architectures similar to our products. Further, many organizations have invested substantial personnel and financial resources to design and operate their appliance-based networks and have established deep relationships with our competitors. As a result, these organizations may prefer to purchase from their existing suppliers rather than add or switch to a new supplier.

Previous wording

Conditions in our market change rapidly and significantly as a result of technological advancements, partnering or acquisitions by our competitors or continuing market consolidation. Start-up companies that innovate and large competitors that are making significant investments in research and development may introduce similar or superior products, services and technologies that compete with our cloud platform. In addition, large companies with substantial communications infrastructure, such as global telecommunications services provider partners or public cloud providers, have entered or could choose to enter the security solutions market. Some of our current or potential competitors have made or could make acquisitions of businesses or establish cooperative relationships that may allow them to offer more directly competitive and comprehensive solutions than were previously offered and adapt more quickly to new technologies and customer needs.

Current wording

Conditions in our market change rapidly and significantly as a result of technological advancements (particularly as a result of AI), partnering or acquisitions by our competitors or continuing market consolidation. Start-up companies that innovate and large competitors that are making significant investments in research and development may introduce similar or superior products, services and technologies that compete with our cloud platform. Large companies with substantial communications infrastructure, such as global telecommunications services providers or public cloud providers, have entered or could choose to enter the security solutions market. Some of our current or potential competitors have made or could make acquisitions of businesses or establish cooperative relationships that may allow them to offer more directly competitive and comprehensive solutions than were previously offered and adapt more quickly to new technologies and customer needs.

Previous wording

These competitive pressures in our market or our failure to compete effectively may result in price reductions, fewer orders, reduced revenue and gross margins, increased net losses and loss of market share. Any failure to meet and address these factors could materially harm our business and operating results.

Current wording

In addition, AI technologies may lower barriers to entry for new competitors, including large AI providers and hyperscalers, and enable faster development of alternative solutions. These competitive pressures in our market or our failure to compete effectively may result in price reductions, fewer orders, reduced revenue and gross margins, increased net losses and loss of market share. Any failure to meet and address these factors could materially harm our business and operating results.

Previous wording

Any interruption or delay in the delivery of our services will negatively impact our customers. Our solutions enable secure connections to cloud-based applications and other destinations via the internet, by directing our customers’ internet traffic through our cloud platform. Our customers depend on the continuous availability of our cloud platform to access the internet, and our services are designed to operate without interruption in accordance with our service level commitments. However, our platform is complex and may contain defects or errors that are not detected until after deployment. If we fail to timely detect defects or errors before deployment, or if our entire platform were to fail, customers and users could lose access to critical services and applications until the disruption is resolved or customers deploy our disaster recovery solution that allows them to bypass our cloud platform to access the internet. The adverse effects of any service interruptions on our reputation and financial condition may be disproportionately heightened due to the nature of our business and the fact that our customers expect continuous and uninterrupted internet access and have a low tolerance for interruptions of any duration. While we do not consider them to have been material, we have experienced, and may in the future experience, service disruptions and other performance problems due to a variety of factors.

Current wording

Any interruption or delay in the delivery of our services will negatively impact our customers. Our solutions enable secure connections to cloud-based applications and other destinations via the internet, by directing our customers’ internet traffic through our cloud platform. In addition, in certain local jurisdictions, we enable select third parties to host our services and cloud platform via their owned and controlled data centers to align with local requirements. Our customers depend on the continuous availability of our cloud platform to access the internet, and our services are designed to operate without interruption in accordance with our service level commitments. However, our platform is complex and may contain defects or errors that are not detected until after deployment. If we fail to timely detect defects or errors before deployment, or if our entire platform were to fail, customers and users could lose access to critical services and applications until the disruption is resolved or customers deploy our disaster recovery solution that allows them to bypass our cloud platform to access the internet. The adverse effects of any service interruptions on our reputation and financial condition may be disproportionately heightened due to the nature of our business and the fact that our customers expect continuous and uninterrupted internet access and have a low tolerance for interruptions of any duration. While we do not consider them to have been material, we have experienced, and may in the future experience, service disruptions and other performance problems due to a variety of factors.

Previous wording

The following factors, many of which are beyond our control, can affect the delivery and availability of our services and the performance of our cloud:

Current wording

The following factors, many of which are beyond our control, can affect the delivery and availability of our services and the performance of our cloud, whether delivered by us or select third-party providers:

Previous wording

•the occurrence of earthquakes, floods, fires, pandemics, power loss, system failures, physical or electronic break-ins, acts of war, international conflicts (such as the current conflicts between Russia and Ukraine and in the Middle East) or terrorism, human error or interference (including by disgruntled or negligent, current or former employees or contractors) and other catastrophic events;

Current wording

•the occurrence of earthquakes, floods, fires, pandemics, power loss, system failures, physical or electronic break-ins, acts of war, international conflicts (such as the current conflicts between Russia and Ukraine and in the Middle East, including recent conflicts related to Iran) or terrorism, human error or interference (including by disgruntled or negligent, current or former employees or contractors) and other catastrophic events;

Previous wording

•government action to limit access to the internet;

Current wording

•government action to limit access to the internet or internet infrastructure;

Previous wording

•the potential implementation of export controls, tariffs or retaliatory measures on the sales of our products in countries where our customers or potential customers are located.

Current wording

•the actual or potential implementation of export controls or tariffs, or retaliatory measures in response to such actions, on the sales of our products in countries where our customers or potential customers are located.

Previous wording

The occurrence of any of these factors, or if we are unable to efficiently and cost-effectively fix such errors or other problems that may be identified, could damage our reputation, negatively impact our relationship with our customers or otherwise materially harm our business, results of operations and financial condition.

Current wording

The occurrence of any of these factors, or if we are unable to efficiently and cost-effectively fix such errors or other problems that may be identified, could damage our reputation, negatively impact our relationship with our customers or otherwise materially harm our business, results of operations and financial condition. In addition, powerful new AI models have accelerated our ability to discover vulnerabilities in our software and third-party components we incorporate into our software. As a result, we are identifying more vulnerabilities, and any failure to timely remediate any significant vulnerability may result in issues that could disrupt the continuity or security of our services.

Previous wording

In addition, we provide our services through a cloud-based inline proxy, and some governments, third-party products, websites or services may block proxy-based traffic under certain circumstances. For example, vendors may attempt to block traffic from our cloud platform or blacklist our IP addresses because they cannot identify the source of the proxy-based traffic. Our competitors may use this as an excuse to block traffic from their solutions or blacklist our IP addresses, which may result in our customers’ traffic being blocked from our platform. If our customers experience significant instances of traffic blockages, they will experience reduced functionality or other inefficiencies, which would reduce customer satisfaction with our services and likelihood of renewal.

Current wording

We provide our services through a cloud-based inline proxy, and some governments, third-party products, websites or services may block proxy-based traffic under certain circumstances. For example, vendors may attempt to block traffic from our cloud platform or blacklist our IP addresses because they cannot identify the source of the proxy-based traffic. Our competitors may use this as an excuse to block traffic from their solutions or blacklist our IP addresses, which may result in our customers’ traffic being blocked from our platform. If our customers experience significant instances of traffic blockages, they will experience reduced functionality or other inefficiencies, which would reduce customer satisfaction with our services and likelihood of renewal.

Previous wording

If we fail to develop or introduce new enhancements to our cloud platform on a timely basis, our ability to attract and retain customers, remain competitive and grow our business could be impaired.

Current wording

If we fail to develop or introduce new enhancements to our cloud platform, including AI enhancements, on a timely basis, our ability to attract and retain customers, remain competitive and grow our business could be impaired.

Previous wording

We currently host our cloud platform and serve our customers from a global network of over 160 public exchanges globally and thousands of private exchanges at the edge. While we have electronic access to the components and infrastructure of our cloud platform that are hosted by third parties, we do not control the operation of these facilities. Consequently, we may be subject to service disruptions as well as a lack of adequate support for our data center operations due to reasons that are outside of our control. Our data centers are vulnerable to damage and connections to our data centers may be interrupted by a variety of sources, including earthquakes, floods, fires, power loss, system or infrastructure failures, computer viruses, physical or electronic break-ins, human error or interference (including by disgruntled or negligent, current or former employees or contractors) and other catastrophic events. Our data centers may also be subject to national or local administrative actions, changes in government regulations, including, for example, the impact of global economic and other sanctions like those levied in response to the current conflict between Russia and Ukraine, changes to legal or permitting requirements and litigation to stop, limit or delay operations. Despite precautions taken at these facilities, a decision to close the facilities without adequate notice or other unanticipated problems at these facilities could result in interruptions or delays in our services, impede our ability to scale our operations or have other adverse impacts upon our business. In addition, if we do not accurately plan for our infrastructure capacity requirements or experience significant strains on our data center capacity, we may experience delays and additional expenses in arranging new data centers, and our customers could experience performance degradation or service outages that may subject us to financial liabilities, result in customer losses and materially harm our business.

Current wording

We currently host our cloud platform and serve our customers from a global network of over 200 public data centers globally and thousands of private sites at the edge. While we have electronic access to the components and infrastructure of our cloud platform that are hosted by third parties, we do not control the operation of these facilities. Consequently, we may be subject to service disruptions as well as a lack of adequate support for our data center operations due to reasons that are outside of our control. Our data centers are hosted in third-party locations, which are vulnerable to damage and connections to our data centers may be interrupted by a variety of sources, including earthquakes, floods, fires, power loss, system or infrastructure failures, computer viruses, physical or electronic break-ins, human error or interference (including by disgruntled or negligent, current or former employees or contractors) and other catastrophic events. Our data centers may also be subject to national or local administrative actions, changes in government regulations, including, for example, the impact of global economic and other sanctions like those levied in response to the current conflict between Russia and Ukraine, changes to legal or permitting requirements and litigation to stop, limit or delay operations. Despite precautions taken at these facilities, a decision to close the facilities without adequate notice or other unanticipated problems at these facilities could result in interruptions or delays in our services, impede our ability to scale our operations or have other adverse impacts upon our business. In addition, if we do not accurately plan for our infrastructure capacity requirements or experience significant strains on our data center resources, or if data center capacity is unavailable or unavailable at acceptable terms, we may experience delays and additional expenses in establishing new data centers, and our customers could experience performance degradation or service outages that may subject us to financial liabilities, result in customer losses and materially harm our business.

Previous wording

It is virtually impossible for us to entirely mitigate the risk of breaches of our cloud platform or other security incidents affecting our cloud platform or our internal systems, networks or data. In addition, the functionality of our platform may be disrupted, either intentionally or due to negligence, including by disgruntled or negligent, current or former employees or contractors. The security measures we use internally and have integrated into our cloud platform, which are designed to detect unauthorized activity and prevent or minimize security breaches, may not function as expected or may not be sufficient to identify or protect against certain attacks. Enterprises are subject to a wide variety of attacks on their networks and systems, and techniques used to sabotage or to obtain unauthorized access to networks in which data is stored or through which data is transmitted change frequently and generally are not recognized until launched against a target. The growth in state sponsored cyber activity, including those actions taken in connection with the current conflict between Russia and Ukraine, showcase the increasing sophistication of cyber threats. As a result, we may be unable to anticipate these techniques or implement adequate measures to prevent an electronic intrusion into our customers through our cloud platform or to prevent breaches and other security incidents affecting our cloud platform, internal networks, systems or data. Further, once identified, we may be unable to remediate or otherwise respond to a breach or other incident in a timely manner. Actual, perceived or purported security breaches of our cloud platform could result in actual, perceived or purported breaches of our customers’ networks and systems.

Current wording

It is virtually impossible for us to entirely mitigate the risk of breaches of our cloud platform or other security incidents affecting our cloud platform or our internal systems, networks or data. In addition, the functionality of our platform may be disrupted, either intentionally or due to negligence, including by disgruntled or negligent, current or former employees or contractors. The security measures we use internally and have integrated into our cloud platform, which are designed to detect unauthorized activity and prevent or minimize security breaches, and include our own newly developed products and services, may not function as expected or may not be sufficient to identify or protect against certain attacks. Enterprises are subject to a wide variety of attacks on their networks and systems, and techniques used to sabotage or to obtain unauthorized access to networks in which data is stored or through which data is transmitted change frequently and generally are not recognized until launched against a target. Further, the development of AI and ML and the proliferation of AI and ML tools used to identify and exploit vulnerabilities create additional risks of attacks and of impactful security breaches and incidents. The growth in state sponsored cyber activity, including those actions taken in connection with recent global conflicts and geopolitical tensions, showcases the increasing sophistication of cyber threats. As a result, we may be unable to anticipate these techniques or implement adequate measures to prevent an electronic intrusion into our customers through our cloud platform or to prevent breaches and other security incidents affecting our cloud platform, internal networks, systems or data. Further, once identified, we may be unable to remediate or otherwise respond to a breach or other incident in a timely manner. Actual, perceived or purported security breaches of our cloud platform could result in actual, perceived or purported breaches of our customers’ networks and systems.

Previous wording

Further, our vendors and service providers have been, and may in the future be, the targets of cyberattacks, and their systems and networks have been, and may in the future be, breached or may contain exploitable defects or bugs that could result in a breach of or disruption to their or our systems and networks. Our ability to monitor our vendors’ and service providers’ data security is limited, and, in any event, third parties may be able to circumvent their security measures, resulting in the unauthorized access to, misuse, disclosure, loss, alteration, or destruction of our data, including confidential, sensitive, and other information about individuals. Geo-political factors including international conflicts, such as between Russia and Ukraine and in the Middle East, may increase the risk of such cyberattacks.

Current wording

Further, our vendors and service providers have been, and may in the future be, the targets of cyberattacks, and their systems and networks have been, and may in the future be, breached or may contain exploitable defects or bugs that could result in a breach of or disruption to their or our systems and networks. Our ability to monitor our vendors’ and service providers’ data security is limited, and, in any event, third parties may be able to circumvent their security measures, resulting in the unauthorized access to, misuse, disclosure, loss, alteration, or destruction of our data, including confidential, sensitive, and other information about individuals. Geo-political factors including international conflicts, such as between Russia and Ukraine and in the Middle East, including recent conflicts related to Iran, may increase the risk of such cyberattacks.

Previous wording

To increase the number of customers and increase the market acceptance of our platform, we will need to expand our sales and marketing operations, including our domestic and international sales force. Although we have a channel sales model, our sales representatives typically engage in direct interaction with our prospective customers. Therefore, we continue to be substantially dependent on our sales force to obtain new customers. Increasing our customer base and achieving broader market acceptance of our cloud platform will depend, to a significant extent, on our ability to expand and further invest in our sales and marketing operations and activities. There is significant competition for sales personnel with the advanced sales skills and technical knowledge we need. We believe that selling a cloud-based security solution requires particularly talented sales personnel with the ability to communicate the transformative potential of our cloud platform. Our ability to achieve significant growth in revenue in the future will depend, in large part, on our success in recruiting, training and retaining enough talented sales personnel in both the U.S. and international markets.

Current wording

To increase the number of customers and increase the market acceptance of our platform, we will need to expand our sales and marketing operations, including our domestic and international sales force. Although we have a channel sales model, our sales representatives often engage in direct interaction with our prospective customers. Therefore, we continue to be substantially dependent on our sales force to obtain new customers. Increasing our customer base and achieving broader market acceptance of our cloud platform will depend, to a significant extent, on our ability to expand and further invest in our sales and marketing operations and activities. There is significant competition for sales personnel with the advanced sales skills and technical knowledge we need. We believe that selling a cloud-based security solution requires particularly talented sales personnel with the ability to communicate the transformative potential of our cloud platform. Our ability to achieve significant growth in revenue in the future will depend, in large part, on our success in recruiting, training and retaining enough talented sales personnel in both the U.S. and international markets.

Previous wording

New hires require significant training and may take significant time before they achieve full productivity. As a result, our new hires and planned hires may not become as productive as we would like, and we may be unable to hire or retain enough qualified individuals in the future. As a result of our rapid growth, a large percentage of our sales and marketing team is new to our company and selling our solutions, and therefore this team may be less effective than our more seasoned employees. Furthermore, hiring sales personnel in new countries, or expanding our existing presence, requires upfront and ongoing expenditures that we may not recover if the sales personnel fail to achieve full productivity. We cannot predict whether, or to what extent, our sales will increase as we expand our sales force or how long it will take for sales personnel to become productive. The effectiveness of our sales and marketing has also varied over time and, together with the effectiveness of any partners or resellers we may engage, may vary in the future. Our business and operating results may be harmed if our efforts do not generate a correspondingly significant increase in revenue. We may not achieve anticipated revenue growth from expanding our sales force if we are unable to hire, develop and retain talented sales personnel, if our new sales personnel are unable to achieve desired productivity levels in a reasonable period of time, or if our sales and marketing programs are not effective.

Current wording

New hires require significant training and may take significant time before they achieve full productivity. As a result, our new hires and planned hires may not become as productive as we would like, and we may be unable to hire or retain enough qualified individuals in the future. As a result of our rapid headcount growth, a large percentage of our sales and marketing team is new to our company and selling our solutions, and therefore this team may be less effective than our more seasoned employees. Furthermore, hiring sales personnel in new countries, or expanding our existing presence, requires upfront and ongoing expenditures that we may not recover if the sales personnel fail to achieve full productivity. We cannot predict whether, or to what extent, our sales will increase as we expand our sales force or how long it will take for sales personnel to become productive. The effectiveness of our sales and marketing has also varied over time and, together with the effectiveness of any partners or resellers we may engage, may vary in the future. Our business and operating results may be harmed if our efforts do not generate a correspondingly significant increase in revenue. We may not achieve anticipated revenue growth from expanding our sales force if we are unable to hire, develop and retain talented sales personnel, if our new sales personnel are unable to achieve desired productivity levels in a reasonable period of time, or if our sales and marketing programs are not effective.

Previous wording

Our sales force develops relationships directly with our customers, and together with our channel account teams, works with our channel partners on account penetration, account coordination, sales and overall market development. We spend substantial time and resources on our sales efforts without any assurance that our efforts will produce a sale. Platform purchases are frequently subject to budget constraints, multiple approvals and unanticipated administrative, processing and other delays. As a result, it is difficult to predict whether and when a sale will be completed and when revenue from a sale will be recognized.

Current wording

We spend substantial time and resources on our sales efforts without any assurance that our efforts will produce a sale. Platform purchases are frequently subject to budget constraints, multiple approvals and unanticipated administrative, processing and other delays. As a result, it is difficult to predict whether and when a sale will be completed and when revenue from a sale will be recognized.

Previous wording

Sales to larger customers involve risks that may not be present, or that are present to a lesser extent, with sales to smaller customers, which can act as a disincentive to our sales team to pursue these larger customers. These risks include:

Current wording

Sales to larger customers involve risks that may not be present, or that are present to a lesser extent, with sales to smaller customers. These risks include:

Previous wording

We generally recognize revenue from customers ratably over the terms of their subscriptions, which are typically one to three years. As a result, a substantial portion of the revenue we report in each period is attributable to the recognition of deferred revenue relating to agreements that we entered into during previous periods. Consequently, any increase or decline in new sales or renewals in any one period may not be immediately reflected in our revenue for that period. Any change, however, may affect our revenue in future periods. Additionally, subscriptions that are invoiced annually in advance or multi-year in advance contribute significantly to our short-term and long-term deferred revenue. Accordingly, the effect of downturns or upturns in new sales and potential changes in our rate of renewals may not be fully reflected in our results of operations until future periods. We may also be unable to reduce our cost structure in line with a significant deterioration in sales or renewals. Our subscription model also makes it difficult for us to rapidly increase our revenue through additional sales in any period, as revenue from new customers must be recognized over the applicable subscription term.

Current wording

We generally recognize revenue from customers ratably over the terms of their subscriptions, which are typically one to five years. As a result, a substantial portion of the revenue we report in each period is attributable to the recognition of deferred revenue relating to agreements that we entered into during previous periods. Consequently, any increase or decline in new sales or renewals in any one period may not be immediately reflected in our revenue for that period. Any change, however, may affect our revenue in future periods. Additionally, subscriptions that are invoiced annually in advance or multi-year in advance contribute significantly to our short-term and long-term deferred revenue. Accordingly, the effect of downturns or upturns in new sales and potential changes in our rate of renewals may not be fully reflected in our results of operations until future periods. We may also be unable to reduce our cost structure in line with a significant deterioration in sales or renewals. Our subscription model also makes it difficult for us to rapidly increase our revenue through additional sales in any period, as revenue from new customers must be recognized over the applicable subscription term.

Previous wording

Additionally, if our channel partners do not provide support to the satisfaction of our customers, we may be required to provide this level of support to those customers, which would require us to hire additional personnel and to invest in additional resources, including the possible use of AI support agents. We may not be able to hire or deploy such resources fast enough to keep up with demand, particularly if the sales of our platform exceed our internal forecasts. We may also not be successful in our efforts to fully onboard new hires and provide adequate training to our employees, many of whom continue to work remotely. To the extent that we or our channel partners are unsuccessful in hiring, training, retaining or deploying adequate support resources, our ability and the ability of our channel partners to provide adequate and timely support to our customers will be negatively impacted, and our customers’ satisfaction with our cloud platform could be adversely affected. We currently rely in part on contractors provided by third-party service providers internationally to provide support services to our customers, and we expect to expand our international customer service support team to other countries. Any failure to properly train or oversee such contractors could result in a poor customer experience and an adverse impact on our reputation and ability to renew subscriptions or engage new customers. Furthermore, as we sell our solutions internationally, our support organization faces additional challenges, including those associated with delivering support, training and documentation in languages other than English. Any failure to maintain high-quality customer support, or a market perception that we do not maintain high-quality support, could materially harm our reputation, adversely affect our ability to sell our solutions to existing and prospective customers and could harm our business, financial condition and results of operations.

Current wording

If we do not provide superior support to our customers, our ability to renew subscriptions, increase the number of users and sell additional services to customers may be adversely affected. We believe that successfully delivering our cloud solution requires a highly skilled level of customer support and engagement. We or our channel partners must assist our customers to deploy our cloud platform, resolve performance issues, address interoperability challenges with a customer’s existing network and security infrastructure and respond to security threats and cyberattacks. Many enterprises, particularly large organizations, have very complex networks and require high levels of focused support, including premium support offerings, to fully realize the benefits of our cloud platform. Any failure by us to maintain the expected level of support could reduce customer satisfaction and hurt our customer retention, particularly with respect to our large enterprise customers. Additionally, if our channel partners do not provide support to the satisfaction of our customers, we may be required to provide this level of support to those customers, which would require us to hire additional personnel and to invest in additional resources, including the possible use of AI support agents. To the extent that we or our channel partners are unsuccessful in hiring, training, retaining or deploying adequate support resources, our ability and the ability of our channel partners to provide adequate and timely support to our customers will be negatively impacted, and our customers’ satisfaction with our cloud platform could be adversely affected. We currently rely in part on contractors provided by third-party service providers internationally to provide support services to our customers, and we expect to expand our international customer service support team to other countries. Any failure to properly train or oversee such contractors could result in a poor customer experience and an adverse impact on our reputation and ability to renew subscriptions or engage new customers. Furthermore, as we sell our solutions internationally, our support organization faces additional challenges, including those associated with delivering support, training and documentation globally. Any failure to maintain high-quality customer support, or a market perception that we do not maintain high-quality support, could materially harm our reputation, adversely affect our ability to sell our solutions to existing and prospective customers and could harm our business, financial condition and results of operations.

Previous wording

Our future success is substantially dependent on our ability to attract, retain and motivate the members of our management team and other key employees throughout our organization. In particular, we are highly dependent on the services of Jay Chaudhry, our Chief Executive Officer and chairman of our board of directors, who is critical to our future vision and strategic direction. We rely on our leadership team in the areas of operations, security, marketing, sales, support and general and administrative functions, and on individual contributors on our research and development team. Although we have entered into employment agreements with our key personnel, these agreements have no specific duration and constitute at-will employment. We do not maintain key person life insurance policies on any of our employees. The loss of one or more of our executive officers or key employees could seriously harm our business. We have added several new senior management employees in recent years, including our Chief Financial Officer. Any significant leadership change or senior management transition involves risk, especially nearly simultaneous changes involving so many leaders and employees, and any failure to transition effectively or to retain these new leaders could hinder our strategic planning, business execution and future performance.

Current wording

Our future success is substantially dependent on our ability to attract, retain and motivate the members of our management team and other key employees throughout our organization. In particular, we are highly dependent on the services of Jay Chaudhry, our Chief Executive Officer and chairman of our board of directors, who is critical to our future vision and strategic direction. We rely on our leadership team in the areas of operations, security, marketing, sales, support and general and administrative functions, and on individual contributors on our research and development team. Although we have entered into employment agreements with our key personnel, these agreements have no specific duration and constitute at-will employment. We do not maintain key person life insurance policies on any of our employees. The loss of one or more of our executive officers or key employees could seriously harm our business. We have experienced, and may in the future experience, significant change in senior management. For example, two sales leaders recently departed the Company. Any significant leadership change or senior management transition involves risk and any failure to transition effectively or to retain new leaders could hinder our strategic planning, business execution and future performance.

Previous wording

To execute our growth plan, we must attract and retain highly qualified personnel. Competition for these personnel in the San Francisco Bay Area, where our headquarters are located, and in other locations where we operate, is often intense, especially for experienced sales professionals and for engineers experienced in designing and developing cloud applications, security software and AI and ML solutions. In addition, the United States and other regions in which we operate have in the past and may again in the future experience acute workforce shortages for highly skilled workers, which in turn, can create hyper-competitive wage environments that may impact our ability to attract and retain employees. We have from time to time experienced, and we may continue to experience, difficulty in hiring and retaining employees with appropriate qualifications. For example, in recent years, recruiting, hiring and retaining employees with expertise in the cybersecurity industry has become increasingly difficult as the demand for cybersecurity professionals has increased as a result of the ongoing cybersecurity attacks on global corporations and governments. Many of the companies with which we compete for experienced personnel have greater resources than we have. In addition, job candidates and existing employees often consider the value of the equity awards they receive in connection with their employment. Volatility or lack of performance in our stock price may also affect our ability to attract and retain our key employees.

Current wording

To execute our growth plan, we must attract and retain highly qualified personnel. Competition for these personnel in the San Francisco Bay Area, where our headquarters are located, and in other locations where we operate, is often intense, especially for experienced sales professionals and for engineers experienced in designing and developing cloud applications, security software and AI and ML solutions. In addition, the United States and other regions in which we operate have in the past and may again in the future experience acute workforce shortages for highly skilled workers, which in turn, can create hyper-competitive wage environments that may impact our ability to attract and retain employees. We have from time to time experienced, and we may continue to experience, difficulty in hiring and retaining employees with appropriate qualifications. For example, in recent years, recruiting, hiring and retaining employees with expertise in cybersecurity and AI/ML has become increasingly difficult as the demand for cybersecurity and AI/ML professionals has increased. Many of the companies with which we compete for experienced personnel have greater resources than we have. In addition, job candidates and existing employees often consider the value of the equity awards they receive in connection with their employment. Volatility or lack of performance in our stock price may also affect our ability to attract and retain our key employees.

Previous wording

•U.S. or other government requirements relating to the formation, administration and performance of contracts with the public sector affect how we and our channel partners do business with governmental agencies;

Current wording

•U.S. or other government requirements relating to the formation, administration and performance of contracts with the public sector, including the requirement to maintain facilities and other security clearances, affect how we and our channel partners do business with governmental agencies;

Previous wording

•U.S. or other government certification requirements applicable to our cloud platform, including the Federal Risk and Authorization Management Program (FedRAMP), are often difficult and costly to obtain and maintain and failure to do so will restrict our ability to sell to government customers;

Current wording

•U.S. or other government certification requirements applicable to our cloud platform, including the Federal Risk and Authorization Management Program, are often difficult and costly to obtain and maintain and failure to do so will restrict our ability to sell to government customers;

Previous wording

•changes in government policy positions, including tariffs and other trade regulations, or the threat of such changes; spending priorities or reductions in government employees or programs, which result in a reduction of government spending in general or on technology and cybersecurity products in particular.

Current wording

•changes in government policy positions, including applicable tariffs and other trade regulations, or the threat of such changes; spending priorities or reductions in government employees or programs, which result in a reduction of government spending in general or on technology and cybersecurity products in particular.

Previous wording

Historically, we have derived a significant portion of our revenue from outside the United States. We derived approximately 49%, 50% and 50% of our revenue from our international customers in fiscal 2025, fiscal 2024 and fiscal 2023, respectively. As of July 31, 2025, approximately 63% of our full-time employees were located outside of the United States. We are continuing to adapt to and develop strategies to address international markets and our growth strategy includes continued expansion into target geographies, but there is no guarantee that such efforts will be successful. We expect that our international activities will continue to grow in the future, as we continue to pursue opportunities in international markets. These international operations will require significant management attention and financial resources and are subject to substantial risks, including:

Current wording

Historically, we have derived a significant portion of our revenue from outside the United States. We derived approximately 47%, 49% and 50% of our revenue from our international customers in fiscal 2026, fiscal 2025 and fiscal 2024, respectively. As of July 31, 2026, approximately 60% of our full-time employees were located outside of the United States. We are continuing to adapt to, and develop strategies to address, international markets and our growth strategy includes continued expansion into target geographies, but there is no guarantee that such efforts will be successful. We expect that our international activities will continue to grow in the future, as we continue to pursue opportunities in international markets. These international operations will require significant management attention and financial resources and are subject to substantial risks, including:

Previous wording

•political, economic and social uncertainty or international conflict, such as the current conflicts between Russia and Ukraine and in the Middle East;

Current wording

•political, economic and social uncertainty or international conflict, such as the current conflicts between Russia and Ukraine and in the Middle East, including recent conflicts related to Iran;

Previous wording

•greater risk of unexpected changes in regulatory practices or enforcement policies, trade regulations including tariffs and tax laws and treaties;

Current wording

•greater risk of unexpected changes in, or increased costs associated with, regulatory practices or enforcement policies, trade regulations including tariffs and tax laws and treaties;