Zscaler Expands Zero-Trust SASE Platform with AI-Powered Automation

Security firm Zscaler has unveiled a major expansion of its zero-trust Secure Access Service Edge (SASE) platform, introducing an agentic framework that streamlines management through natural-language prompts and extends protection to unmanaged devices, business partners, and multicloud workloads.

The company made the announcement at its Zenith Live 2026 conference in Las Vegas, where it also introduced a set of products for securing autonomous AI agents. The releases mark Zscaler's push to integrate AI into both security operations and defense strategies for enterprises.

At the heart of the SASE expansion is the ZAgent Framework, which orchestrates various platform agents to automate configuration, troubleshooting, and policy work. Administrators interact with ZAgent through natural-language prompts in the Zscaler Experience Center rather than legacy management consoles.

One of the first agents built on the framework is a Zscaler Digital Experience agent that diagnoses end-user problems such as Wi-Fi or device issues and remediates them before they escalate.

Zscaler has also developed a zero-trust browser extension and a full Chromium-based enterprise browser, which deliver localized data controls and browser detection and response on any device. The company positions these tools as replacements for costly virtual desktop infrastructure and VPN setups.

The move builds on Zscaler's February acquisition of browser security firm SquareX Ltd., whose technology turned standard browsers into secured environments without a separate corporate browser.

Other additions extend the platform across supply chains and clouds, including zero-trust business-to-business connectivity offering that allows two-way application access between customers and their partners. This eliminates the need for site-to-site VPNs and MPLS links.

The company has also developed an endpoint sandbox to protect against malicious files introduced from offline sources such as flash drives. Additionally, a Zero Trust Gateway for Google Cloud brings uniform protection to Google's cloud alongside existing Amazon Web Services support.

Zscaler founder and CEO Jay Chaudhry stated that legacy SASE was built on outdated models of network perimeters that no longer exist in today's world of AI and distributed users.