Zscaler, Inc.

Overview

Zscaler provides a cloud-native, multitenant security platform that enables Zero Trust security for users, clouds, networks, and AI agents. Its core platform, Zscaler Zero Trust Exchange, replaces traditional perimeters (firewalls, VPNs, SD-WAN) with policy-based, identity- and context-driven access. The product portfolio is organized into four solution families:

• Zero Trust Everywhere: global policy-based security across users, clouds, and branches
• Data Security Everywhere: data loss prevention and protection for data-in-use, in-flight, and at-rest
• Security for AI: visibility, control, and protection for public and private AI applications and AI-enabled workflows
• Agentic Operations: integrating AI to improve SecOps and ITOps efficiency

Platform architecture and coverage

• Three-tier cloud architecture: Central Authority (control plane), Enforcement Nodes (data plane with full proxy and in-memory processing), and Log Servers (lossless, in-memory logging with secure transmission).
• Global footprint: distributed across more than 160 public exchanges and thousands of private exchanges at the edge.
• Protection scope: Zero Trust Users, Zero Trust Cloud (workloads), and Zero Trust Branch (branches, factories, OT/IoT, campuses, and AI agents).

Key capabilities and components

• ZIA (Zscaler Internet Access): secure access to internet destinations and externally managed apps with inline threat prevention, TLS inspection, and policy-driven protection.
• ZPA (Zscaler Private Access): Zero Trust Network Access to internal apps without exposing them to the internet; uses app-to-user micro-tunnels for granular access control.
• ZDX (Zscaler Digital Experience): end-to-end user experience monitoring with AI-assisted root-cause analysis and predictive analytics.
• Data security: AI-based data classification, Enterprise DLP, Unified SaaS Security (CASB/SSPM), Email DLP, and DSPM.
• AI-focused offerings: GenAI security, AI Guard for Users, AI-SPM for AI services, AI Guard for Private LLMs, and AI Decoys for LLMs.

Market position and customers

• More than 9,400 customers across all major geographies, with an emphasis on large enterprises.
• Approximately 40% of the Forbes Global 2000 and over 45% of Fortune 500 companies are customers.
• International exposure: about 49% of revenue generated outside the United States; roughly 63% of full-time employees located outside the U.S.

Financial performance and growth

• Revenue by fiscal year:
  • 2023: $1,617.0 million
  • 2024: $2,167.8 million
  • 2025: $2,673.1 million
• Year-over-year revenue growth: 34% (2023→2024) and 23% (2024→2025).
• Net income (loss):
  • 2023: -$202.3 million
  • 2024: -$57.7 million
  • 2025: -$41.5 million
• As of July 31, 2025: 7,923 employees worldwide.
• Channel contributions: the top five channel partners represented 28% of revenue in fiscal 2025.

Scale and operations

• The cloud processes over 500 billion requests per day.
• Threat prevention and updates: blocks over 225 million threats daily and performs over 250,000 unique security updates daily.
• Data center strategy emphasizes resiliency and redundancy with locations in major interconnection hubs and partnerships with service providers.

Strategy and business model

• Primarily a channel-driven sales model, with a mix of direct engagements and channel partners, including global system integrators, telecoms, VARs, and cloud marketplaces.
• Growth strategy focuses on new customer acquisition, deeper penetration within existing customers, international expansion, broadening the solution set, and maintaining a strong partner ecosystem.

Intellectual property and integration

• Global cloud platform protected by a large patent portfolio (over 725 issued patents and pending applications as of 2025) and a suite of trademarks and domain registrations.
• Platform is designed to interoperate with identity providers, endpoint management, and SIEM vendors, supporting integrated security architectures.