Zscaler

Zscaler is a SASE and zero trust access platform for large enterprises, covering web security, private app access, data protection and branches, sold by quote.

Zscaler sends user traffic through its own cloud, where security policy is applied before anything reaches an application. Unlike a VPN, it connects a user to one approved application at a time, so the corporate network itself is never exposed. The platform is called the Zero Trust Exchange and comes from Zscaler, Inc., an independent company in Santa Clara, California, founded in 2007. Inspection happens inline, including full TLS and SSL inspection, rather than on appliances at each office. Secure Internet Access is the web gateway, with content filtering, file type control, bandwidth control and TLS inspection. Zscaler Private Access (ZPA) reaches private apps in data centers and clouds through App Connectors, with clientless browser access for guests and unmanaged devices. Threat protection adds the Zero Trust Firewall, Cloud IPS, Sandbox and Cyber Isolation for unknown destinations. Data Security applies inline controls across web, GenAI and private apps, and Email DLP and Endpoint DLP extend it. Zero Trust Branch connects offices, and Zscaler Digital Experience (ZDX) traces latency and packet loss hop by hop. Privileged Remote Access, Deception and Unified Vulnerability Management complete the set. Zscaler is built for large organisations whose staff, offices and applications are spread across many locations and clouds. Security teams use it to retire remote-access VPNs and on-premises web proxies. It suits companies that already run identity through SAML providers and want access tied to users, groups and device posture. IT departments that admit contractors and guests to internal apps, without installing software on their machines, are another fit. Remote employees run Client Connector on their devices, while branch routers forward traffic over GRE or IPsec tunnels. Each private application sits behind an App Connector, and policy decides which users and devices may reach it. Device posture for browser-based sessions can be verified with Google Chrome Enterprise. Security events stream to an on-premises SIEM through the Nanolog Streaming Service, so analysts keep working in the tools they already use. Zscaler fits enterprises that want every user, branch and workload to reach applications through one security cloud instead of the network.