Zscaler Internet Access (ZIA) helps secure your internet and SaaS connections by delivering a complete secure stack as a service from the cloud. By moving security to a globally distributed cloud, Zscaler brings the Internet gateway closer to the user for a faster more secure experience.
Zscaler Internet Access delivers a security stack as a service from the cloud, eliminating the cost and complexity of traditional gateway appliance approaches. By moving security to a globally distributed cloud, Zscaler brings the Internet gateway closer to the user for a faster experience. Organizations can easily scale protection, better than appliances, to all offices or users regardless of location. By delivering user security directly from the cloud, customers can minimize costly backhauling of traffic over MPLS links and reduce the costs associated with deploying, managing and operating on premises security appliances.
As part of the industry's most complete SSE platform, Zscaler Internet Access provides all the security services you need to protect your organization from advanced threats and data loss. Zscaler best in class cloud-native capabilities such as Sandbox, Firewall, DLP
Zscaler Internet Access is available on AWS Marketplace in Professional, Business, and Transformation Editions, for 12, 24, or 36 months contract terms.
For additional information on ZIA options and features, please contact Zscaler using one of the links on this page.
Highlights
FULL INLINE CONTENT INSPECTION Finally inspect ALL your traffic, with no compromises. Our patented ByteScan™ engine inspects each outbound and inbound byte, even including hard-to-inspect SSL traffic, with only microsecond delay.
CLOUD EFFECT Get millions of users working for you. Any threat detected anywhere in our cloud is immediately blocked for all customers. Zscaler also delivers more than 175,000 unique security updates to the cloud every day.
REAL-TIME THREAT CORRELATION Dynamically compute the risk of every web page object or the web page itself using content and domain analysis.
Access real-time vendor security and compliance information through their Trust Center powered by Drata or Vanta. Review certifications and security standards before purchase.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
This listing offers one pricing dimension: the ZIA Transformation Edition. You buy it as a contract priced per user, so your cost scales with the number of users you subscribe. There are no separate tiers or size options to choose from in this listing. You select the total user count you need, and billing follows that quantity under the contract term. This edition bundles secure internet and SaaS access capabilities into a single per-user subscription.
Top-of-mind questions for buyers
What counts as one user for the per-user billing on the Transformation Edition?
You are billed per subscribed user, meaning each individual account you enroll counts as one. Your total user count sets the contract quantity. Some included capabilities pool resources across your subscribed users, but the license itself meters the number of user accounts you subscribe under the contract.
What is included in the Transformation Edition per-user subscription?
The subscription bundles secure internet and SaaS access into one per-user price. This covers a cloud secure web gateway that inspects encrypted traffic, URL filtering, cloud firewall, threat protection, and data protection controls. All these capabilities apply across every subscribed user under the single per-user contract.
How does my cost change if I add more users during the term?
Cost scales directly with subscribed user count, since billing is per user. Adding users increases your contract quantity and total price proportionally. There are no separate tiers or size options, so each added user is priced the same way as your existing users under the contract.
Request a private offer to receive a custom quote.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Zscaler global support is available around the clock, with dedicated customer support engineers providing personalized assistance to ensure that customers are getting the most value from our products. Our support engineers have significant experience in networking and security, working closely with operations, sales, and engineering teams to ensure rapid response and resolution.
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Patented ByteScan engine inspects each outbound and inbound byte, including SSL traffic, with microsecond delay
Threat Detection and Blocking
Threat detected anywhere in the cloud is immediately blocked for all customers with delivery of more than 175,000 unique security updates to the cloud daily
Real-Time Threat Correlation
Dynamically computes risk of web page objects and web pages using content and domain analysis
Cloud-Native Security Services
Provides Sandbox, Firewall, and Data Loss Prevention capabilities as part of a complete Secure Service Edge platform
Globally Distributed Cloud Architecture
Delivers security services from a globally distributed cloud infrastructure to eliminate on-premises gateway appliances and reduce traffic backhauling
VPN Protocol
Built on WireGuard protocol for secure connectivity
Network Architecture
Mesh networking architecture that eliminates single points of failure and replaces legacy hub-and-spoke models
Identity-Based Access Control
Identity-based network access control enabling access decisions based on user identity, groups, services, and subnet ranges rather than IP addresses alone
Automatic Connection Management
Connection migration capability that maintains existing connections when switching between different network types (wired, cellular, Wi-Fi) and direct device-to-device connections without manual port forwarding configuration
DNS Resolution
MagicDNS feature enabling hostname-based access to devices, services, and resources without requiring IP address management
Zero Trust Network Access
Enforces least-privilege access based on user identity with continuous checks on device identity, device security, and user location
Intrusion Detection and Prevention
Built-in IDS/IPS that automatically filters and blocks malicious traffic based on threat priority or category
DNS-Based Content Filtering
Customizable, pre-emptive DNS filtering to block websites from 43 undesirable or unsafe categories
Application Domain-Based Routing
Routes traffic to applications using application domain names instead of IP addresses, efficiently handling overlapping IP address ranges across distributed private networks
Global Distributed Network Infrastructure
Cloud-delivered service from 30+ worldwide points of presence with full-mesh topology over high-speed internet access for redundancy and reduced latency
Secure, Reliable Internet Access with Simple Cloud-Based Security
Reviewed on Aug 13, 2026
Review provided by G2
What do you like best about the product?
I liked that it provides secure, reliable internet access without feeling overly complex. The cloud-based security approach also makes it straightforward to apply consistent security policies across different users and locations.
I used it regularly to access the internet from various places, and the cloud-based security model meant I didn’t have to depend as much on traditional network infrastructure or spend time manually managing security settings.
The biggest workflow improvement for me was the consistency. Security policies were enforced no matter where I was working, which made remote work easier and more predictable.
One unexpected benefit was how much simpler it was to maintain a consistent security experience across users and devices. Overall, it strikes a good balance between security, flexibility and ease of management.
What do you dislike about the product?
One area that could be improved is the troubleshooting experience when access to a website or application is blocked. At times, it’s hard to tell exactly what triggered the block or what specific steps are needed to fix it. More detailed, user-friendly explanations, along with clearer guidance on next actions, would make troubleshooting much faster.
I’ve also noticed that policy changes and configuration updates can occasionally take some digging before their impact is fully clear.
Lastly, the reporting and dashboard experience could be more intuitive. More customizable dashboards, plus an easier way to drill down from a high-level alert into the underlying traffic, would make the platform more efficient to use.
What problems is the product solving and how is that benefiting you?
One area that could be improved is the troubleshooting experience when access to a website or application is blocked. At times, it’s hard to tell exactly what triggered the block or what steps are needed to fix it. More detailed, user-friendly explanations, along with clearer guidance for next steps, would make troubleshooting faster.
I’ve also noticed that policy changes and configuration updates can sometimes take some digging around before their impact is fully clear.
Lastly, the reporting and dashboard experience could be more intuitive. More customizable dashboards, plus an easier way to drill down from a high-level alert into the underlying traffic, would make the platform more efficient to use.
Automotive
Secure Zero-Trust Internet Access Anywhere—No VPN Needed
Reviewed on Aug 12, 2026
Review provided by G2
What do you like best about the product?
It’s a cloud-native, zero-trust architecture that provides secure internet access from anywhere, without relying on traditional VPNs or on-premises security appliances.
What do you dislike about the product?
Internet speed overhead is noticeable. Because of traffic, I routinely see a drop in both download and upload speeds. It also seems tied to the distance to the point of presence, and there are occasional outages on the shared node.
What problems is the product solving and how is that benefiting you?
Provides critical benefits by reducing corporate risk, cutting infrastructure costs and improving employee mobility. Zero hardware upkeep. Elimitaes complex hardware.
Yostyn C.
The safe way to access the internet
Reviewed on Aug 11, 2026
Review provided by G2
What do you like best about the product?
What I like most about Zscaler Internet Access is that it facilitates a secure Internet connection from anywhere, without depending on the user's location or the network. It also stands out for its ease of management, traffic visibility, and ability to apply security policies centrally.
What do you dislike about the product?
What I like least about Zscaler Internet Access are the incorrect blocking of sites and applications. On some occasions, they interrupt daily work and affect productivity. I would like ZIA to improve the accuracy of its policies to reduce false positives and avoid unnecessary blockages.
What problems is the product solving and how is that benefiting you?
Zscaler Internet Access helps protect Internet access and control the sites and applications that can be used within the organization. This improves security, reduces the risk of accessing malicious content, and facilitates the enforcement of security policies. As a benefit, it allows for safer work and greater control over Internet access.
Hospital & Health Care
Easy to Troubleshoot, but Frequent Repair Needed After Updates
Reviewed on Aug 11, 2026
Review provided by G2
What do you like best about the product?
This tool was implemented on my work device and I've have found it to be easy to troubleshoot and repair with IT. This is important for remote workers like me.
What do you dislike about the product?
Usually the tool is very easy and runs its software updates as designed by IT. But we frequently need to "repair the app" in the tool when it updates incorrectly. This causes site blockages that shouldn't be.
What problems is the product solving and how is that benefiting you?
The Zscaler tool was implemented on my computer for me by IT. From my understanding, it helps block and allow certain websites for employees in the enterprise.
Financial Services
Easy-to-Use ZIA Console with Strong Granular Access and SSL Inspection
Reviewed on Aug 11, 2026
Review provided by G2
What do you like best about the product?
I like the ZIA console, which is very easy to use for beginners administrator. ZIA provide granular control level access which make this product very effective. SSL inception is very good in ZIA.
What do you dislike about the product?
I dislike the troubleshooting part because it’s a bit complex, especially when trying to figure out whether the issue is with the ZCC agent or at the network level. Also, the reporting could be improved, particularly the dashboard section.
What problems is the product solving and how is that benefiting you?
Internet access is much easier now, and I don’t need to rely on a traditional firewall. Since this is a cloud solution, we also get redundant networking and support from this product best.