Listing Thumbnail

    Zscaler Private Access (ZPA)

     Info
    Deployed on AWS
    Vendor Insights
    Zscaler Private Access (ZPA) applies the principles of least privilege to give users secure connectivity to private applications while eliminating unauthorized access and lateral movement. ZPA can be deployed in hours to replace legacy VPN and remote access tools with a holistic zero trust platform.
    4.5

    Overview

    Play video

    Zscaler Private Access enables businesses to achieve:

    Peerless Security, beyond legacy VPNs and firewalls Connect users directly to apps - not the network - minimizing the attack surface and eliminating lateral movement

    Unrivaled Security against compromised app or users First-of-its-kind app protection, with inline prevention, deception, and threat isolation, minimizes the risk of compromised users

    Superior productivity for today's hybrid workforce Lighting-fast access to private apps extends seamlessly across remote users, HQ, branch offices, and third party partners

    Unified ZTNA platform for users, workloads & OT/IoT Securely connect to private apps, services, and OT/IoT devices with the industry's most comprehensive ZTNA platform

    Highlights

    • Minimize the attack surface - Make apps invisible, impossible to breach
    • Eliminate lateral movement - Enforce least-privileged access without putting users on the network
    • Stop compromised users and mitigate risk - Prevent app exploitation, find, active attackers and threats, and prevent data loss

    Details

    Delivery method

    Deployed on AWS
    New

    Introducing multi-product solutions

    You can now purchase comprehensive solutions tailored to use cases and industries.

    Multi-product solutions

    Features and programs

    Vendor Insights

     Info
    Skip the manual risk assessment. Get verified and regularly updated security info on this product with Vendor Insights.
    Security credentials achieved
    (4)

    Buyer guide

    Gain valuable insights from real users who purchased this product, powered by PeerSpot.
    Buyer guide

    Financing for AWS Marketplace purchases

    AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
    Financing for AWS Marketplace purchases

    Pricing

    Zscaler Private Access (ZPA)

     Info
    Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
    Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator  to estimate your infrastructure costs.

    12-month contract (1)

     Info
    Dimension
    Description
    Cost/12 months
    ZPA_TFORM_500_ED
    ZPA Transformation Edition
    $155,000.00

    Custom pricing options

    Request a private offer to receive a custom quote.

    How can we make this page better?

    We'd like to hear your feedback and ideas on how to improve this page.
    We'd like to hear your feedback and ideas on how to improve this page.

    Legal

    Vendor terms and conditions

    Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .

    Content disclaimer

    Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.

    Usage information

     Info

    Delivery details

    Software as a Service (SaaS)

    SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.

    Support

    Vendor support

    Zscaler global support is available around the clock, with dedicated customer support engineers providing personalized assistance to ensure that customers are getting the most value from our products. Our support engineers have significant experience in networking and security, working closely with operations, sales, and engineering teams to ensure rapid response and resolution. support.zscaler.com

    AWS infrastructure support

    AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.

    Product comparison

     Info
    Updated weekly

    Accolades

     Info
    Top
    25
    In Business Intelligence & Advanced Analytics
    Top
    10
    In Network Infrastructure, Infrastructure as Code
    Top
    10
    In Device Connectivity

    Customer reviews

     Info
    Sentiment is AI generated from actual customer reviews on AWS and G2
    Reviews
    Functionality
    Ease of use
    Customer service
    Cost effectiveness
    6 reviews
    Insufficient data
    Positive reviews
    Mixed reviews
    Negative reviews

    Overview

     Info
    AI generated from product descriptions
    Zero Trust Network Access
    Applies least privilege principles to provide secure connectivity to private applications while eliminating unauthorized access and lateral movement through a zero trust architecture.
    Application-Centric Access Control
    Connects users directly to applications rather than the network, minimizing attack surface and preventing lateral movement across network infrastructure.
    Inline Threat Prevention and Isolation
    Implements inline prevention, deception techniques, and threat isolation capabilities to protect against compromised users and prevent application exploitation.
    Unified Zero Trust Platform
    Supports secure connectivity for users, workloads, and OT/IoT devices through a comprehensive zero trust network access platform.
    Legacy VPN Replacement
    Deploys as a modern alternative to traditional VPN and remote access tools, enabling rapid implementation in hours with support for hybrid workforce scenarios including remote users, branch offices, and third-party partners.
    VPN Protocol
    Built on WireGuard protocol for secure network connectivity
    Zero Trust Network Access
    Identity-based access control at network layer enabling user and group-based resource access policies
    Mesh Network Architecture
    Direct device-to-device connections with automatic connection migration across different network types
    DNS Resolution
    MagicDNS functionality enabling hostname-based resource access without manual IP address management
    Multi-Platform Support
    Compatible with iOS, tvOS, Android, Windows, Linux operating systems with 100+ technology integrations
    Zero Trust Network Access
    Enforces least-privilege access based on user identity with continuous checks on device identity, device security, and user location
    Intrusion Detection and Prevention
    Built-in IDS/IPS that automatically filters and blocks malicious traffic based on threat priority or category
    DNS-Based Content Filtering
    Customizable, pre-emptive DNS filtering to block websites from 43 undesirable or unsafe categories
    Application Domain-Based Routing
    Routes traffic to applications using application domain names instead of IP addresses, efficiently handling overlapping IP address ranges across distributed private networks
    Global Distributed Network Infrastructure
    Cloud-delivered service from 30+ worldwide points of presence with full-mesh topology over high-speed internet access for redundancy and reduced latency

    Security credentials

     Info
    Validated by AWS Marketplace
    FedRAMP
    GDPR
    HIPAA
    ISO/IEC 27001
    PCI DSS
    SOC 2 Type 2
    -
    -
    -
    No security profile
    No security profile

    Contract

     Info
    Standard contract
    No
    No

    Customer reviews

    Ratings and reviews

     Info
    4.5
    139 ratings
    5 star
    4 star
    3 star
    2 star
    1 star
    68%
    29%
    2%
    0%
    0%
    6 AWS reviews
    |
    133 external reviews
    External reviews are from G2  and PeerSpot .
    Mario M.

    Convenient, Always-On Access with Room for Speed Improvement

    Reviewed on Mar 03, 2026
    Review provided by G2
    What do you like best about the product?
    I really like that Zscaler Private Access is automated. It's turned on by default, which is a very interesting feature because when I'm using different software, I usually have to connect and disconnect, which can be a hassle. But with Zscaler Private Access, it's automatically opened and it never turns off for any reason. So it's always turned on automatically, which is great. I don't have to do anything.
    What do you dislike about the product?
    One thing I don't like about Zscaler Private Access is how much it affects my Internet speed. Normally my speed is about 30 to 35 megabits per second, but when using this, it drops to about 5 megabits per second. So, the speed is downgraded significantly.
    What problems is the product solving and how is that benefiting you?
    Zscaler Private Access solves the problem of having to physically visit the site every day. With this VPN, I can access the required websites from home, and the connection is set up automatically.
    Tayel T.

    Easy to Use, Quick Updates with Minor Sync Delays

    Reviewed on Feb 06, 2026
    Review provided by G2
    What do you like best about the product?
    I like that Zscaler Private Access is easy to use and understood. Once I assign the profile for the user, it's updated and responds quickly. The initial setup was simple for my team.
    What do you dislike about the product?
    Sometimes it takes a lot of time to sync the profile rules.
    What problems is the product solving and how is that benefiting you?
    Zscaler Private Access resolves many company issues, is easy to use, and allows for quick profile updates, improving response speed.
    Mohamed G.

    Fast Whitelisting with Room for Improvement

    Reviewed on Feb 05, 2026
    Review provided by G2
    What do you like best about the product?
    I like the fast reflection in whitelisting and blacklisting and controlling user URLs access. It helps solve the issue of controlling what end-users can access, making them more productive. The setup was pretty easy to initiate too.
    What do you dislike about the product?
    In whitelisting, sometimes it requires whitelisting another sub links to work, which I think needs to be improved. Applying sub categories or suggestions when whitelisting URLs to make things work would be helpful.
    What problems is the product solving and how is that benefiting you?
    I use Zscaler Private Access for controlling end-user traffic and logging for incident analysis. It solves controlling what end-users can access, making them more productive.
    Mahmoud S.

    Fast Whitelisting, Efficient Security

    Reviewed on Feb 04, 2026
    Review provided by G2
    What do you like best about the product?
    I like that Zscaler Private Access is fast and reliable. Whenever I whitelist or blacklist a link, it reflects right away. I also appreciate the logging review features that let me check on user activity. It doesn't affect production, and if there's an urgent action like whitelisting a tool or URL related to the client, it doesn't take time.
    What do you dislike about the product?
    I don't like when you whitelist a URL, it doesn't fully work. You still need to whitelist other sublinks to make the URL or tool fully loaded or productive.
    What problems is the product solving and how is that benefiting you?
    I use Zscaler Private Access for controlling and securing traffic, addressing security and productivity concerns, and preventing access to non-work URLs. It updates whitelists/blacklists quickly, ensuring that urgent actions don't impact production.
    Mahmoud A.

    Secure, Scalable, and Effortless to Use

    Reviewed on Feb 03, 2026
    Review provided by G2
    What do you like best about the product?
    I really like the scalability and reliability of Zscaler Private Access. It's pretty fast when you blacklist or whitelist a link, and the changes reflect on all devices or users, even for those working from home. This makes it really convenient. The setup was easy, too, with no issues during configuration. I just had to push the configuration and profiles on our production floor, and it worked smoothly.
    What do you dislike about the product?
    Currently i dont have any dislikes
    What problems is the product solving and how is that benefiting you?
    I use Zscaler Private Access to prevent users from accessing unauthorized or unrelated work links, addressing security concerns and blocking non-work related websites like social media and suspicious links.
    View all reviews