Product Report: Zscaler Cloud Security

Zscaler is an integrated SaaS solution for web and e-mail security offered by the US-based company of the same name. It provides a cloud platform for anti-malware and anti-spam protection, application control, and data loss prevention.

What makes Zscaler stand out their competitors in SaaS security market is that their solution is entirely cloud-based and does not require any extra hardware or software installation. By utilizing a large global network with more than 40 datacenters around the world and optimized and hardened network architecture Zscaler is capable of providing high scalability and near-zero latency even for geographically distributed networks and mobile users.

Being an integrated solution for web and email security, Zscaler offers better protection against blended threats typical for modern Internet and also provides a single place for managing policies, single user directory for authentication and consolidated real-time reporting. This further reduces administration costs and ensures quicker response to security alerts.

Zscaler security model guarantees that sensitive customer data is not leaked even when components of the system are compromised. Combined with special user privacy features built into the administration interface, this ensures compliance with EU privacy regulations.

Since no additional hardware or software is required, no capital expenditures are required for deployment of Zscaler solution. Combined with a flexible pricing model this leads to significantly lower TCO (the company claims cost reduction up to 60% is typical).

We believe that in the near future integrated secure gateways will become a necessary component of organizational security infrastructure; and the combination of advanced underlying technologies and unique features like single policy for web and e-mail security and real-time reporting engine make Zscaler one of the first choices for that purpose.

We recommend to include Zscaler into your evaluation within strategic, layered web/email security approaches.