shouldiuse.io

New check

Categories

VERDICT

Should I use Zscaler?

Leading cloud enterprise security provider for zero trust - zscaler.com

Depends. Buy if you're a large organization with security staff replacing VPNs, appliances, and legacy perimeter tools. Small teams without dedicated IT should pick a lighter, cheaper SSE tool.

Confidence

Medium. Based on 40+ public sources; snippets were truncated, so exact ratings and prices were not always visible.

Ratings

  • Value for money
  • Ease of use
  • Feature depth
  • Support quality
  • Security posture

Pricing

Quote-based, annual

Zscaler Internet Access (ZIA)

ModelQuote-based
Monthly feesNot disclosed
HardwareNot disclosed
Zscaler Private Access (ZPA)Quote-based, annual

Best for

  • Large distributed enterprises
  • Zero-trust / VPN-replacement projects
  • Regulated sectors like government
  • Orgs consolidating many point security tools

Not for

  • Small teams needing simple web filtering
  • Startups with no dedicated security admin
  • Buyers wanting published, transparent pricing
  • Anyone unwilling to manage a heavy client agent

Gotchas - check before you buy

high

Quote-based only; buyers report 2025 price hikes — negotiate multi-year terms hard

high

Deep platform lock-in: leaving means re-architecting all traffic policies and agents

medium

Validate post-sales support SLAs in the contract before signing

medium

Client Connector agent has shipped CVEs; keep endpoint patching disciplined

Pros and cons

Pros

  • Broad 28-solution portfolio on one cloud security platform
  • Strong ratings on G2 and Gartner Peer Insights
  • ZPA praised for streamlining government access vs legacy VPN
  • Cloud-native with no appliances to maintain
  • Proven at scale with named public-sector and enterprise customers

Cons

  • Recurring sysadmin complaints about day-to-day experience
  • Opaque quote-based pricing with 2025 increases
  • Client Connector agent flaws enabled remote attacks (2026)
  • 2025 supply-chain breach via Salesloft Drift exposed Salesforce data
  • Post-sales support quality openly questioned by prospective buyers

Sources & method

Analyzed 9/26/2026 - 14 sources - Active advisory program, but 2026 Client Connector CVEs and a 2025 Salesloft Drift supply-chain breach are on record.

official x2review x8security x2news x2
  • Client Connector DoS (CVE-2026-59565), Denial-of-service flaw in the Zscaler Client Connector endpoint agent.
  • Multiple Client Connector remote flaws, Improper input validation issues enabling remote attacks; patched via advisories.
  • 2025 Salesloft Drift supply-chain breach, Token-based attack via Salesloft Drift exposed Zscaler Salesforce customer data.

Key stats

  • Value for money: 2/5

    Rating

  • Quote-based, annual

    Starting price

  • 14

    Sources

  • Analyzed

  • Value for money: 2/5. Quote-based pricing; 2025 price hikes reported
  • Ease of use: 3/5. ZPA praised; sysadmins report complexity
  • Feature depth: 5/5. 28-solution platform spanning SSE, ZTNA, AI security
  • Support quality: 2/5. Buyers publicly question post-sales support
  • Security posture: 3/5. Zero-trust leader; agent CVEs and 2025 breach
  • 11,791+ Detected customer base companies detected using Zscaler (Bloomberry)
  • 783 G2 reviews seller profile, rated 4+
  • 2,553 Glassdoor employee reviews; 63% recommend figure
  • Quote-based Pricing model annual subscriptions; 2025 price increases reported

Pricing

Zscaler Internet Access (ZIA)

Quote-based, annual

  • Secure web gateway
  • Cloud firewall
  • Zero-trust internet access

Zscaler Private Access (ZPA)

Quote-based, annual

  • Zero-trust VPN replacement
  • Private app access
  • User-to-app segmentation

Security

Active advisory program, but 2026 Client Connector CVEs and a 2025 Salesloft Drift supply-chain breach are on record.

  • Client Connector DoS (CVE-2026-59565)Denial-of-service flaw in the Zscaler Client Connector endpoint agent.10
  • Multiple Client Connector remote flawsImproper input validation issues enabling remote attacks; patched via advisories.11
  • 2025 Salesloft Drift supply-chain breachToken-based attack via Salesloft Drift exposed Zscaler Salesforce customer data.

Alternatives

Compare Zscaler with each alternative.

  • Radware Cloud WAF

    Focused web-app protection if you only need WAF, not full SSE

Companies that use it

  • City of Los Angeles
  • University of South Carolina
  • Careem
Full analysis

Based on 40+ public sources; snippets were truncated, so exact ratings and prices were not always visible.

Enterprise-grade zero-trust security: powerful at scale, overkill and quote-priced for small teams.

Methodology

Based on 40+ public sources; snippets were truncated, so exact ratings and prices were not always visible.

Sources

  1. Zscaler homepagezscaler.com
    official
  2. Zscaler Pricing and Planszscaler.com
    official
  3. G2 — Zscaler seller reviewsg2.com
    review
  4. Gartner Peer Insights — Zscalergartner.com
    review
  5. Reddit r/sysadmin — How bad is Zscaler?reddit.com
    review
  6. Reddit r/Zscaler — So what's everyone paying?reddit.com
    review
  7. FedTech — ZPA for government reviewfedtechmagazine.com
    review
  8. Venn — Zscaler platform overview (28 solutions)venn.com
    review
  9. NPI — Zscaler price increase analysisnpifinancial.com
    news
  10. SentinelOne CVE-2026-59565sentinelone.com
    security
  11. GBHackers — Client Connector flawsgbhackers.com
    security
  12. Cybersecurity Dive — Salesloft Drift breachcybersecuritydive.com
    news
  13. Bloomberry — Zscaler customer listbloomberry.com
    review
  14. Glassdoor — Zscaler employee reviewsglassdoor.com
    review

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.