About Zscaler
Zscaler sells a unified cybersecurity platform built on the Zero Trust Exchange. Zscaler's platform sits inline on every connection and connects each entity only to what it is authorized to reach. Zscaler states that it can unify access, data protection, security for AI, and security operations on a zero trust architecture.[3]
Zscaler offers secure remote access to business applications with zero trust for a hybrid workforce. Zscaler extends zero trust access to private applications for users in headquarters and branch offices. Zscaler AppProtection protects private apps from web- and identity-based attacks and streamlines private access management. Zscaler Identity Protection is offered to protect organizations from identity based attacks. Zscaler China Premium Access delivers secure connectivity for China-based employees as a SaaS-delivered solution. Zscaler offers the Zero Trust Exchange platform of solutions on the CIS CyberMarket at discounted prices for members of MS-ISAC and EI-ISAC.[5]
Zscaler Zero Trust Browser extends Zero Trust to the browser. Zscaler combines AI-based isolation of web threats with Browser Detection and Response (BDR) capabilities. Zscaler provides cloud-delivered and in-browser data loss prevention, including screenshot and keystroke logger protection. Zscaler enforces real-time posture checks so that app access is allowed only from compliant devices. Zscaler integrates with ZPA for secure app access and ZIA for web threat protection. Zscaler enforces browser security through an extension, an enterprise browser, or cloud browser isolation. Zscaler uses cloud-based threat isolation to contain web threats away from the endpoint. Zscaler monitors browser telemetry such as DOM changes, browser APIs, permissions, network requests, file activity, clipboard activity, and extension behavior. Zscaler detects and blocks in-browser threats across sites, files, extensions, identity, and clipboard activity. Zscaler protects sensitive data in the browser with controls for copy/paste, uploads, downloads, screenshots, and other high-risk user actions. Zscaler states that it has a FedRAMP Moderate and High authorized solution.[5]
Amex GBT uses Zscaler Deception to detect machine-speed attacker behavior. Zscaler's Deception offering plants hidden decoy paths that only automated agents are likely to find and follow. Deception decoys from Zscaler are placed in the production environment across endpoints, cloud, applications, identity, and AI infrastructure. Zscaler zero trust policies or third-party tooling can automatically limit or revoke access when a decoy fires. Zscaler uses ZPA decoys and ZCC endpoint lures to redirect unauthorized access attempts. Zscaler Agentic SecOps unifies alerts, prioritizes risk with business context, and guides threat containment.[6]
Zscaler securely connects users to applications regardless of device, location, or network for government and federal cybersecurity. Zscaler offers cybersecurity solutions for state and local government operations. Zscaler offers zero trust AI security for retail operations from storefront to supply chain. Zscaler offers cybersecurity for manufacturing and for IT/OT systems. Zscaler helps UK healthcare organisations like the NHS securely modernize IT and adopt the cloud. Zscaler describes its zero trust platform as compliant with FedRAMP, IL5, and CMMC for aerospace and defense. GHD is a professional services provider in the global markets of water, energy and resources, environment, property and buildings, and transportation. GHD uses Zscaler Cloud Sandbox to provide further protection from threats not detectable using traditional security techniques. All internet traffic for GHD was routed to the nearest Zscaler node. For GHD, Zscaler handled day-to-day platform maintenance and management of the solution, and the GHD Information Security team monitored exceptions.[7]
The AI Guard dashboard provides a high-level overview of all the users and AI applications AI Guard manages. Zscaler lets administrators create customized dashboards to focus on the metrics most important to them. The Zscaler service can be configured to email specific individuals when certain events occur. Zscaler lets customers create alerts for events such as incoming or outgoing malware or a policy violation.[6][7][8][9][10][11]
Zscaler on the record