Overview
Zscaler Private Access (ZPA) is the ZTNA service of Zscaler, a cloud security company best known for its secure web gateway. ZPA brokers connections between authorised users and specific applications, so that users are never placed on the corporate network and applications are not exposed to the internet. Zscaler states that ZPA can replace VPNs and virtual desktop infrastructure in hours, and cites PTC turning off its legacy VPN and Siemens moving its global users in about two weeks[16].
Capabilities include AI-assisted application discovery and segmentation, workload-to-workload segmentation across AWS and Azure, clientless privileged remote access to RDP, SSH and VNC, browser access, a Private Service Edge for on-premises users, business-continuity mode, layer-7 inspection and data loss prevention[16]. For applications that still need a conventional tunnel, Zscaler’s plans include VPN Service Edge entitlements that scale with user count[17].
ZPA is sold as part of the Essentials or Zscaler platform bundles or as a standalone product, with add-ons such as AppProtection and a clientless platform[17]. No per-user prices are published; purchasing begins with a demo request. The product is aimed at large enterprises, and its scope and sales process make it a poor fit for small teams.
Zscaler features
- User-to-app brokering without network access
- Automatic app discovery and segmentation
- Clientless RDP, SSH and VNC access
- Private Service Edge for on-premises users
- Inline inspection and DLP
- VPN Service Edge for legacy apps
Zscaler pricing
Quote-based subscription. ZPA Standard is included in the Essentials platform bundle and ZPA Platform in the Zscaler platform bundle; ZPA is also sold standalone. VPN Service Edge entitlement: one edge up to 250 users, two up to 500, three above 500.
Zscaler strengths and limitations
Strengths
- Applications never exposed to the internet
- Mature segmentation for large estates
- Clientless access for third parties
- Integrates with Zscaler's web security
- Revenue growth of 25.4%
- Large security cloud
Limitations
- No published prices
- Built for enterprise budgets and procurement
- Several important capabilities are add-ons
- Overkill for teams needing only a static IP
- Net loss
- Competition from Palo Alto Networks
Appears in
Zscaler alternatives and competitors
Alternatives to Zscaler: companies ranked in the same lists.
- Palo Alto Networks
Fortinet
CrowdStrike- Okta
Check Point Software Technologies
Cloudflare One (Zero Trust)
Snowflake
Intuit
ServiceNow- Workday Human Capital Management
- Autodesk
Jira Service Management
Is this your company?
Update the description, logo, image and link through the submission form. Editors review every change.