Zscaler, Inc.

The tectonic shift toward enterprise AI adoption is happening, and it’s happening fast. According to the Zscaler ThreatLabz 2026 AI Security Report, enterprise AI and ML transactions skyrocketed by 83% year-over-year. AI is no longer a nice-to-have tool. It is a persistent operating layer.As part of broader enterprise adoption trends, AI agents are moving quickly from experimentation to real-world deployments. Unlike traditional software, agents can reason, execute multi-step plans, call APIs, and take action across technology environments. That potential creates significant opportunity, but it also introduces a new governance challenge for organizations.The harsh reality is that cybersecurity teams are simply underprepared. Earlier this year, the Zscaler ThreatLabz red team conducted realistic adversarial testing on enterprise AI deployments. Every single enterprise AI system that was tested failed at least once under realistic adversarial pressure, with those failures surfacing quickly.Introducing the Blueprint AllianceCustomers need proactive guidance on how to adapt their technology stacks for the agentic era. But securing AI agents cannot be addressed by a single control point or a single vendor. It requires connected capabilities across identity, data, applications, cloud infrastructure, networks, endpoints, and security operations.That is why Zscaler is proud to join the Blueprint Alliance as a founding member.The Blueprint Alliance is a cross-industry coalition advancing an open, multi-vendor reference architecture to secure and govern AI agents at enterprise scale. It helps organizations implement a zero-trust, agentic control plane so they can continue to scale their AI deployments. AI agent security is an ecosystem challengeAI agents work across the enterprise stack. They may inherit human or agent identities and permissions, interact with cloud infrastructure, retrieve sensitive data, connect to SaaS apps and APIs, or operate through endpoints and networks. They can also act asynchronously, potentially continuing work after the human who initiated a task has logged off. This changes what customers need from their security and technology providers. Organizations need an integrated approach that can help them:Treat every agent as a first-class identityScope access to the task rather than granting standing accessKeep delegation traceableMonitor runtime behavior continuouslyEnable containment that’s instant and reversibleEnsure governance adapts at the speed AI movesGuided by these principles, the Blueprint Alliance aligned on a common framework for helping organizations answer four foundational questions:Where are my agents?What can they do?What are they doing?How do I respond? Let’s take a closer look at these foundational questions, including a sample of specific activities and capabilities security teams should consider to address each.  1. Where are my agents? (discovery and visibility) As the adage goes, you can’t protect what you can’t see. The first step toward securing agents and other AI tools or apps is to identify and assess every AI-related interaction traversing the corporate infrastructure—whether sanctioned or unapproved.   You must continuously scan and discover all AI integrations, APIs, and automated agents running in both development and production. This includes the ability to map out all connected dependencies such as LLMs, MCP servers, software libraries, data flows, and how the agents are imported into the enterprise environment. Once discovered, agents should be classified and audited according to their use. Are they employee-facing—deployed to automate internal workflows—or are they external-facing, designed to execute supply chain transactions or help deliver end-customer services? Identifying which components your agents are connecting to and classifying their use gives security teams an up-to-date, centralized inventory. Being able

Every manufacturer understands the cost of downtime. It’s why so many conversations revolve around resilience. But a new problem is beginning to surface: how quickly you can get a site operational in the first place, because delay before production even starts can be just as costly. If it’s all about speed, then you might point out that time to production is something manufacturers have always cared about. And you’d be right, of course. What’s new is that the pressure isn't simply to produce faster. It's to become operational faster. Manufacturers need to be able to open factories, warehouses and distribution operations wherever demand, supply chains or growth opportunities take them. This capability directly determines how fast revenue starts flowing.The bottleneck nobody planned forIf site-deployment speed is now a competitive advantage, what role does connectivity play? The answer is simple: connectivity is either the bottleneck or the enabler.Until recently, standing up a new site meant waiting for connectivity as part of the process. I've seen situations where a factory is ready to start producing, but terminating and procuring and shipping network equipment took far longer than they had planned for. And this problem is only going to intensify. Deployment environments are growing more complex and more demanding. Supply chains are more distributed, operations span more geographies, and sites are being opened in locations where connectivity isn't always straightforward to provision.Agility is everything when the goal is to meet demand faster than the competition can. This is why manufacturers can’t put their sole focus on running long-established facilities anymore. Now, they need to consider standing up seasonal factories and temporary warehousing to respond to the market, for example supply-chain changes, as they happen. The shift some leaders are still missingWhen you’re chasing a strategic opportunity in a new market, it’s a real business differentiator to be able to stand up operations quickly. I saw this agility in action working with one of our customers, a global paints-and-coatings manufacturer. They were setting up a new factory in Morocco when their networking equipment got held up in customs. Not for days...for weeks. Potentially months. For most businesses, that's a delay you absorb and wait out. For this manufacturer, every day the factory sat dark was revenue they weren't generating, inventory that wouldn't be available, warehouse operations that couldn't start, and distribution that couldn't move. The cost wasn't technical. It was commercial, and it compounded every single day. So they didn't wait.For the in-limbo Moroccan factory, the fastest solution was a cellular-first deployment model. Using available smartphones, tablets and hand scanners on site, we were able to issue eSIMs to the devices to provide secure cellular connectivity to their cloud-based MES and ERP systems to stand up operations. They stood up a factory without a single piece of traditional connectivity infrastructure and the ROI was immediate.The most interesting part of this example isn't the technology itself, as cool as it is. The interesting part is that the manufacturer started treating connectivity as a business accelerator rather than another IT project; a business capability versus just an infrastructure cost and requirement. This is what sets them apart.Organisations that rethink connectivity today won't just gain an advantage. They'll define what the industry looks like tomorrow. If you're rethinking what connectivity means for your next site launch, explore how Zero Trust Branch and Zscaler Cellular are helping manufacturers stand up secure operations in hours, not months.

Security operations has always been overloaded with too many alerts, too many tools, and too little context. The traditional SOC model has focused on endpoint alerts and manual SIEM queries, fed by siloed tools and forcing human correlation and triage at nearly every step. High SIEM ingest costs limit the data organizations can afford to collect and retain, and many of today’s attacks are designed to evade the very controls legacy SOCs depend on.As a result, SOCs are challenged with:Limited scopeOperational complexitySlow response timesAI didn’t create these problems, but it has made solving them far more urgent, by expanding the attack surface and accelerating how attackers do recon, exploit gaps, and adapt in real time. Incremental improvements will not be enough; the SOC needs a new foundation.That foundation is Zscaler Agentic SecOps, launching today. Built to help security teams see, reduce, detect, respond, and remediate at machine speed.Everyone is pitching AI. The market is already overcrowded with agentic SOC providers. So why Zscaler? It comes down to four advantages:A single platform that unifies exposure management and threat responseUnmatched inline telemetry across 750 billion daily transactions – providing network, cloud, endpoint, identity, and AI insightsSpecialized AI agents trained on decades of frontline SOC, MDR, and threat hunting experienceClosed-loop inline remediation that contains threats at machine speedPut simply, Zscaler Agentic SecOps is not AI layered onto a broken workflow. It is a new operational foundation for the modern SOC.  What Zscaler Agentic SecOps Means for YouThe impact of Zscaler Agentic SecOps is straightforward: less noise, less manual work, faster decisions, and faster containment.Instead of forcing teams to swivel between siloed tools and stitch together fragmented signals, we bring exposure data, threat detections, investigation context, and response actions into one operational flow. Exposure and threat teams can see what matters sooner, understand it faster, and act with greater confidence.The outcome is a more effective SOC. Analysts spend less time triaging ambiguous alerts and more time focusing on confirmed risk. Security leaders gain broader visibility across endpoint, identity, cloud, SaaS, and AI activity without relying on incomplete, high-cost data pipelines. Organizations can respond to threats in real time, using automated, human-guided, or hybrid actions that help contain incidents before they spread. Faster response, lower risk, without growing headcount. Zscaler Agentic SecOps – Architected for Modern ThreatsZscaler Agentic SecOps unifies proactive exposure management, advanced detections, AI-powered investigation and response, and adaptive remediation in a single platform. This holistic approach gives security teams faster, more accurate analysis and response to active threats.Just as with zero trust, architecture matters, and Zscaler has built our Agentic SecOps from the ground up to meet the moment, with an architecture that:Unifies your data: We combine Zscaler and third-party insights to assess risk more accurately. Zscaler sees 750 billion daily transactions across network, identity, endpoint, cloud, and AI activity. Because Zscaler operates inline on live traffic, it can observe threats as they happen—not just reconstruct them after the fact. We enrich that real-time visibility with critical third-party telemetry and context across identities, assets, exposures, and alerts.Applies advanced detections: We surface the threats that matter most with 7,500+ tuned analytics cultivated over a decade of ThreatLabz research and Red Canary MDR expertise. And we’re not sending you false alarms – we have validated those detections at 99.6% accuracy.Creates a security context graph: We use our Data Fabric for Security to harmonize, deduplicate, correlate, and enrich that data, creating the entity relationships that enable us to separate real risk from noise.Ac

The rise of frontier AI and the push for digital sovereignty are often treated as separate agendas. They are not. Let’s be crystal clear: the rapid emergence of powerful AI models makes the case for digital sovereignty more urgent, not less. In Europe and around the world, frontier AI should accelerate the operationalization of digital sovereignty.How Frontier AI Played into the Tech-Dependency discussionIn April and May 2026, frontier AI models Anthropic’s Claude Mythos Preview and OpenAI’s GPT-5.5-Cyber raised serious concerns in the cybersecurity community and among those responsible for enterprise security. While demonstrating the potential of embedding AI into defensive workflows, these models also expanded the attack surface and made clear that organizations and governments will soon face unprecedented and sophisticated attacks when these new capabilities are used by malign actors. Other frontier AI models will soon offer similar capabilities, making this a systemic challenge. For policymakers, that is not only a cybersecurity challenge, but a strategic one: it raises urgent questions about resilience, control, and digital sovereignty.Mythos and GPT-5.5-Cyber represent something fundamentally different from previous models. They can reason across attack paths, weigh exploitability, and generate security-relevant workflows. While malign intent may not have changed, the capabilities, speed, scale, and sophistication of attacks have increased, while the expertise required to deploy them has fallen. In Europe, the arrival of these frontier AI models was felt in two ways: first, as an inflection point in ensuring access to advanced cybersecurity capabilities needed to retain resilience; and second, as yet another reminder of Europe’s dependence on non-European technology providers. Both points were underscored in the European Parliament’s letter to Executive Vice-President Henna Virkkunen [here].Our colleague, Deepen Desai, wrote in a recent blog [here]: “The question isn't whether these models will impact your security posture; it's whether your team will harness them faster than your attackers.” In Europe, that question is not only about how quickly organizations can embed these tools into their defensive workflows, but also about how to ensure trusted access to them on terms that strengthen resilience, accountability, and strategic control.Why AI Is Also a Sovereignty IssueOn June 12, 2026, the U.S. administration imposed export controls suspending foreign access to Anthropic’s most advanced models, Claude Mythos 5 and Claude Fable 5, citing national security concerns. The controls were lifted later that month, and access was restored on July 1, 2026. The episode itself was brief. What it revealed was not: frontier AI is now being treated as a strategic asset, subject to the same instincts that have long governed semiconductors, satellites, and encryption. Those with access will be best positioned to shape, secure, and benefit from the next generation of cyber capabilities. That message was reinforced by a June 22 Five Eyes intelligence partners’ cyber agencies joint statement that was unusual in its directness: frontier AI models are advancing faster than public expectations, and the resulting shift in offensive and defensive cyber capability is now measured in months, not years. Their advice was strikingly unglamorous: patch faster, reduce unnecessary internet exposure, fix identity and access weaknesses, and put AI to work on defense before adversaries put it to work on offense.Europe’s Response Is Becoming OperationalAt roughly the same moment, after years of increasingly urgent debate, Europe took a significant step toward defining what technological sovereignty means in practice. Driven by geopolitical tensions and growing concern over access to critical digital capabilities on terms Europe does not fully control, the European Commission published its Tech Sovereignty Package on June 3, 2026, with the proposed C

A senior executive at a large international bank in London told me recently that AI wasn’t a risk to his firm. His people weren’t allowed to use it, it was against policy, and as far as he was concerned that closed the conversation. It didn’t. A policy describes what a company intends. It says nothing about what people actually do. In a firm full of capable people working against deadlines, the chance that not one of them had quietly opened an AI tool was close to zero. He was describing a control he had never tested. He’d mistaken a rule for a fact.That mistake is everywhere right now, and it reaches well past shadow AI. Most organizations can describe their security in exhaustive detail. Far fewer can show that it holds when something goes wrong. The distance between those two things is where leaders must turn their attention.Available is not the same as resilientThe costliest version of that mistake is quiet and almost universal: many leaders treat “the service is up” as proof that the service is resilient. This isn’t always the case. Well, at least for services that haven’t been stress-tested. A system that stays available only because no one has seriously come after it yet isn’t resilient, it’s an incident waiting for a start date. Resilience is what’s left when something does go wrong but your customers don’t feel the impact. Can the service take a hit, keep running or recover fast, and can you show that it has? Uptime isn’t that. Uptime is just the good weather you’ve had so far.Regulators need proof, not paperworkRisk isn’t new. What’s new is that regulators expect you to prove you can manage it, not just assert that you can. DORA entered into force in 2023, but the compliance deadline only landed in January 2025, and the technical standards underneath it have kept raising the bar since. The requirement is blunt: don’t describe your controls; show that they hold when a real threat scenario hits.DORA asks you to test secured services, govern them, measure how well the security held up, and show you’ve improved over time. That moves the question from “what is our control model?” to a much harder one: “can you show that your critical services stay operational under stress?”, and that accountability rests with the C-suite, not the security team.What proof actually looks likeBeyond the policy binder and tooling inventory is where we find our proof: knowing how a service behaves when something breaks. Take any critical service in the financial sector: retail payments, claims processing, trade settlement, customer onboarding. The questions are the same for all of them. When did you last test a real disruption to it? How did it perform? How long did recovery take? What decisions were made under pressure, and what did you change afterwards? These are the questions leadership should be asking well before regulators ever do.Leadership must get comfortable telling that story end to end: which services matter, what threatens them, how they were tested, what broke, and what got fixed. If you can’t tell that story, everything else you say about your security is just narration without substance. Frontier AI is what applies the pressureIf DORA raised the expectation, frontier AI is the reason the expectation is justified. As the newest generation of intelligent AI models, frontier systems are now finding vulnerabilities faster than security teams can triage them. Anthropic’s Project Glasswing, built on the Mythos frontier model, surfaced more than 10,000 high- and critical-severity vulnerabilities in systemically important software in its first month, much of it in code people viewed as well understood so “safe enough”. The bottleneck in security has moved from finding flaws to fixing them before someone else uses them against you.Mythos is the most capable offensive security model I’ve seen, and the results genuinely stopped me. It’s the clearest picture yet of what the next few years might look like. But the point isn’

The idea that a factory is secure because it's disconnected is, frankly, a 2005 mindset. Connectivity is now core to how manufacturing operates. It’s not bolted on, not optional, uptime depends on it. The air gap isn't a security strategy anymore, it's just a constraint waiting to be worked around.But if the factory floor has evolved from isolated to ‘always connected’, what does that mean for security?The problem isn't connectivity itself. Most factories need more of it, not less. The challenge is that many of the control models used to govern those environments were designed for a world that was easier to see, easier to predict, and easier to lock down. That world is gone.Why Workarounds Become the DefaultThe gap between connectivity and control creates real operational friction, and traditional security models, built for a more isolated era, are often the bottleneck. What we’re seeing is engineers waiting on manual approvals for urgent remote access. Third-party vendors needing to troubleshoot equipment with no secure mechanism to do so. Security teams making decisions without a complete picture of who's connecting, from where, and to what. When that's the reality, security teams default to restriction. Understandable, but when those decisions directly affect uptime, the factory floor finds its own solutions.I visited one of the world's biggest consumer-goods manufacturers and sat in on a conversation between their CISO and head of factory about exactly this problem. Their fix for a downed production line? Pull a SIM from a phone, stick it in a hotspot, connect it to the production controller, and let the remote specialist do their thing. It works. It also drives the CISO quietly mad. Nobody was trying to bypass security; they were just trying to keep the line moving. But the result is an unmanaged path straight into their production environment. That trade-off is precisely why this has become a leadership problem, not just a security one.            Why Control Is Getting HarderMore connectivity means more devices, more access paths, more remote users, more third-party maintenance windows, and more machine-to-machine interactions. That's not inherently a problem, it's often what keeps operations running. The harder question is whether anyone can still see the web of connections, govern them, and understand the dependencies that come with them.This is where traditional approaches break down. Production teams optimise for uptime. Warehouse teams optimise for throughput. Factory teams optimise for output. And legacy security models? Well, they weren't designed to keep pace with these pressures, and the friction shows up in unexpected places. Take handheld scanners used for warehouse logistics. Credentials required, security box ticked. That’s great, except half the floor is wearing gloves or has oil on their hands from the machinery. Logging in is a hassle; logging out so a colleague can use the same device feels like unnecessary admin when a line is waiting. The result: one device, one login, twelve people on shift. Identity becomes meaningless. Visibility evaporates. That's not a technology failure. That's a governance model that never accounted for the reality of the shop floor.Questions Every Leadership Team Should Be AskingSecurity must be frictionless to be effective. If it's complicated, people will route around it, not out of recklessness, but out of operational necessity. And that’s when every workaround becomes a visibility gap. And, if governance and control models are still rooted in the air-gap era, more tooling won't solve this problem. The better starting point is an honest assessment of where the gaps actually are. Where are operations genuinely dependent on connectivity, and where have workarounds quietly filled the gaps? Where are third parties accessing operational systems, and through what mechanisms? And, critically,

I'm incredibly proud that Zscaler has been named a Leader in the 2026 Gartner® Magic Quadrant™ reports for SASE and SSE.This recognition means a great deal to our team, and more importantly, to the thousands of enterprise customers who have placed their trust in Zscaler to secure and connect their organizations. This is the fifth year in a row that we have been recognized as a Leader in the SSE Magic Quadrant, and we’re thrilled to also be recognized as a Leader in the SASE Magic Quadrant this year. We believe this reflects the significant progress our team has made in executing on our Zero Trust SASE Everywhere vision, and our rapid customer adoption.    The Zero Trust SASE DifferenceGartner defines SASE platforms as “offerings that deliver converged network and security capabilities. This includes software-defined WAN (SD-WAN) and secure access to the web, cloud services and private applications regardless of the user’s location, the device used or where that application is hosted. These offerings primarily use a cloud-centric architecture delivered as a platform by one vendor". Delivered via a cloud-native platform, customers that embrace this model expect to see significant security and operational benefits by consolidating onto a converged platform.We see that while other vendors bolted on traditional SD-WAN to their SSE offerings, at Zscaler we took a different approach. We have long maintained that legacy networking has too much implicit trust, which inevitably expands the attack surface and facilitates lateral movement of threats. This risk is further amplified today in the age of frontier AI models that can launch exploits at machine speed. If you’re reachable, you’re breachable!Zscaler’s Zero Trust SASE solution is designed from the ground up with an entirely different architecture: one that intentionally does not extend the same network connectivity to every branch and IoT device. Rooted in zero trust foundations, it securely connects users, IoT/OT devices and AI agents to the applications they need, while continuously enforced adaptive access, and without the exposed ports and lateral movement inherent to traditional networking. Branches become as simple as coffee shops, eliminating firewall complexity. The Zero Trust Exchange: Built for ScaleZscaler’s AI-powered Zero Trust Exchange platform processes over 750B daily transactions and is relied upon by over 40% of Global 2000 customers to secure their organizations. The insight derived from this enormous volume of data creates a virtuous circle by training our AI fabric, strengthening our ability to counter dynamic online threats. Over 160 data centers around the world keep policy decisions as close to the user as possible, minimizing latency for a better experience.By pairing the Zero Trust Exchange with our innovative Zero Trust Branch solution, Zscaler delivers unparalleled security, performance, and scale for global organizations. Additionally, our unified Experience Center and ZAgent Framework streamline operations, providing all the benefits of SASE without the heavy cost and complexity associated with traditional networking and SD-WAN. Moving Towards The FutureWe are not slowing down. We announced many more innovations on the Zero Trust SASE platform recently.ZAgent Framework: Automates security and network operations, reduces response times, and surfaces insights that were previously buried in noise.Zero Trust Browser: Integrates Zero Trust SASE natively into a cross-browser extension or full Chromium-based browser, replacing expensive VDI and VPN setups for unmanaged and BYOD devices. Zscaler B2B Exchange: Enables bi-directional application access for Zscaler customers and their partners without ever exposing networks or managing complex firewall rules.Together, we believe these innovations make Zero Trust SASE the industry’s only comprehensive platform to connect and secure everything. Read the ReportsIn our opinion, this recognition from Ga

More eligible customers can now access Risk360 to turn Zscaler-native telemetry into clearer, more actionable cyber risk insights—without the complexity of additional data collection or integrations.Security leaders are under growing pressure to reduce cyber risk, demonstrate the value of security investments, and communicate security posture in terms the business can understand. But as environments become more distributed and threats more sophisticated, getting a clear view of risk has become increasingly difficult.That’s why Zscaler is expanding the availability of Risk360, helping more eligible customers access foundational, data-driven risk insights built from the telemetry they already have in the Zscaler Zero Trust Exchange platform. Risk360 is now included in most ZIA and platform SKUs for organizations with more than 500 users.Built on Zscaler-native telemetry, Risk360 helps customers turn existing platform data into clearer, more actionable cyber risk insight. Why deeper risk insight mattersOrganizations today are managing risk across users, devices, applications, and cloud environments while facing growing expectations from executives, boards, and regulators. Security teams often have no shortage of data, but turning that data into clear, actionable insight is another matter.Fragmented signals can make it harder to identify priorities, measure progress, and communicate outcomes. What many organizations need is not more data, but a better way to understand the risk signals already available to them.Risk360 helps organizations track risk over time and benchmark their posture against peers. Turn Zscaler telemetry into actionable insightRisk360 helps organizations better understand and prioritize cyber risk using data already available in the Zscaler platform. It analyzes Zscaler-native telemetry across users, devices, applications, and policy signals together with telemetry from Zscaler’s External Attack Surface Management (EASM) engine. This gives security teams a more precise view of where risks are concentrated and where corrective actions are most critically required.There is nothing additional to deploy, so customers can immediately derive more value from their Zscaler investment.Risk360 includes guided investigations to reduce riskBetter risk insight matters because it supports better decisions. Risk360 helps organizations move beyond isolated signals to more focused prioritization, making it easier to identify important risks, improve visibility, and take action faster.Customers like Inter, Gray Media, Rodgers, NHS, Guaranteed Rate, and AkzoNobel are using risk quantification to strengthen their organizations' cybersecurity preparedness.“The key risk indicators that Zscaler provides have been essential to improving our risk posture. It's taking us many steps forward in our cybersecurity maturity.” - Raffaele Maresca, CISO, AkzoNobelWatch this 2 minute video to see how Risk360 helps organizations quantify and reduce cyber risk. Helping more organizations gain a clearer view of riskSecurity teams already have access to enormous amounts of data. The challenge is turning that data into clarity, prioritization, and measurable progress.By expanding the availability of Risk360, Zscaler is helping more customers access foundational risk insights based on the telemetry already available in the platform. For organizations looking to better understand cyber risk, improve posture, and communicate security value more effectively, Risk360 offers a practical starting point.With Risk360, organizations can:Gain clearer visibility into risk across their Zscaler environmentSurface configuration or control gaps that may affect risk postureMap Zscaler controls and configurations to common compliance frameworksFollow guided investigations to reduce risk Communicate risk posture and reduction progress more clearly to executives If you’d like to learn whether your organization

Zscaler is redefining what’s possible for security in the AI era. Visit booth #2557 at Black Hat 2026 August 4-6 to discover the AI Security Platform built on Zero Trust.Meet with Zscaler at Black Hat 2026: Schedule a meeting | Explore Zscaler at Black HatAI isn’t just changing workflows—it’s changing the attacker’s playbook. When copilots and autonomous agents can move data, call tools, and trigger actions in seconds, the blast radius of a single compromise grows exponentially. Now, the hard truth for defenders is that you can’t “detect later” what happens at machine speed.At Black Hat 2026, Zscaler will showcase the AI Security Platform built on Zero Trust. Come see how to secure every AI interaction, broker every agent action, and hunt at machine speed—so you can stop threats before they become incidents. What to expect at Black Hat 2026 with ZscalerHere is what you will see:Live demos on how to extend zero trust to AI agents and their actions Proven strategies on how to discover AI usage across the enterprise Expert insights on protecting data used by (and exposed to) AI across prompts, models, clouds and endpoints In-depth theater presentations on the latest Zscaler solutionsDon’t miss these sessions:Weds, Aug 5 10:15am: ThreatLabz Insights Into the Latest Attack Trends with Diana Shtil from ThreatLabzWeds, Aug 5 11:25am: 90 Days with Frontier AI. What We Learned with Emily Laufer, Director, Product Marketing Weds, Aug 5 1:30pm: Securing the Enterprise in the Age of AI Agents: From Zero Trust to Agentic Security with Dhawal Sharma, EVP - AI Security and Strategic Initiatives Zscaler: The AI Security Platform Built on Zero TrustAt Black Hat 2026, we’ll showcase how Zscaler helps security teams:Secure every AI interaction with visibility and control across AI apps and copilotsBroker every agent action by governing agent behavior and tool use in agentic workflowsHunt at machine speed to surface risk earlier and accelerate responseStop every threat by reducing attack surface and applying consistent policies across users, apps, branches, and AI agents Join us at Black Hat 2026 Zscaler is shaping the future of security for the AI era. Visit booth #2557 at Black Hat 2026 to see how the AI Security Platform built on Zero Trust protects data, reduces risk, and helps teams act fast and stay secure.Meet our experts, get a live demo, and learn how leading enterprises are extending zero trust to AI apps, copilots, and autonomous agents—while simplifying operations and strengthening protection across the organization.Schedule a meeting | Explore the Platform | Customer Success Stories 

Zscaler has joined the Hiroshima AI Process (HAIP) Friends Group Partners’ Community, reinforcing our commitment to advancing secure, transparent, and trustworthy AI adoption.Launched under Japan’s 2023 G7 Presidency, the HAIP advances international discussion on safe, secure, and trustworthy AI. Its Partners Community brings together organizations committed to supporting practical progress on AI governance and responsible adoption.As AI adoption accelerates, organizations are not only deploying AI more broadly but also confronting a growing range of AI-powered attacks. Zscaler AI helps them use AI safely for productivity, protect their AI initiatives, and improve their security outcomes with AI-driven defenses and controls.Zscaler will contribute to the HAIP our lessons from this real-world experience securing AI and defending against AI-enabled attacks. Importantly, the HAIP already provides a framework for this through its International Guiding Principles and Code of Conduct for advanced AI systems, which emphasize risk assessment, security testing, transparency, incident response, and safeguards against misuse.This focus aligns with Zscaler’s approach to AI security. Alongside support for international governance efforts, Zscaler is actively engaged in frontier AI security initiatives including Anthropic’s Project Glasswing and OpenAI’s Trusted Access for Cyber program. Participation in these efforts strengthens understanding of advanced AI capabilities in cybersecurity and supports more rigorous security testing and evaluation. Why transparency mattersTrust in AI cannot rest on broad assurances alone. It depends on evidence, visibility, and candid reporting.That principle is reflected in Zscaler’s approach to AI security research and threat intelligence publications. Our ThreatLabz team regularly publishes AI security findings, including an annual AI Security Report. The 2026 report found that AI adoption is creating critical security gaps across global enterprises.Zscaler has also moved quickly to share its frontier model security research. In “When the Scanner Starts Thinking: Learnings from Mythos and GPT 5.5 Cyber Security,” Zscaler shared a structured evaluation of frontier models in cybersecurity, outlining our testing methodology, assessment of model capabilities, and practical security recommendations.Zscaler has also been transparent about the company’s internal AI governance, including its commitment not to use proprietary customer data or personal information to train AI models. Sam Curry, Zscaler’s Global CISO, has explained this commitment and our data containment architecture and use of anonymized, aggregated signals to improve security while protecting privacy. These actions reflect Zscaler’s commitment to using AI in a way that is governed, transparent, and responsible. A global commitmentJoining the Hiroshima AI Process Partners Community is an important milestone in Zscaler’s broader commitment to supporting secure digital transformation worldwide.As AI policy and practice continue to evolve, Zscaler looks forward to contributing its perspective on how security, transparency, and practical governance can help organizations securely adopt AI and defend against its malicious uses.Zscaler also looks forward to working with governments, industry partners, and the broader Hiroshima AI Process community to help ensure that AI adoption is matched by practical safeguards, stronger transparency, and security by design.