https://cybertoolchain.io/tools/zscaler New releases and features in Zscaler, tracked by The Cyber Toolchain. en Thu, 13 Aug 2026 03:15:51 GMT https://www.zscaler.com/blogs/product-insights/introducing-zscaler-zero-trust-gateway-google-cloud https://www.zscaler.com/blogs/product-insights/introducing-zscaler-zero-trust-gateway-google-cloud Thu, 13 Aug 2026 03:15:51 GMT Zscaler launches Zero Trust Gateway for Google Cloud via native Network Security Integration, deployable in under 10 minutes. • Introduces Zscaler Zero Trust Gateway (ZTGW) for Google Cloud, integrating with Google Cloud's Network Security Integration (NSI) to transparently steer workload traffic to Zscaler for deep inspection without application changes, manual tunnels, or route table modifications. • Supports Single VPC, Multiple VPC, and Shared VPC Google Cloud topologies, fitting into existing GCP network architectures. • Uses Google Cloud Security Profiles and Profile Groups to control traffic steering to Zscaler, enabling policy-driven enforcement within GCP traffic flows. • Provides unified visibility across GCP, other clouds, and on-premises environments through the Zscaler Admin Portal. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/zscaler https://www.zscaler.com/blogs/product-insights/zscaler-integrates-claude-inference-hooks-scale-ai-while-addressing-risks https://www.zscaler.com/blogs/product-insights/zscaler-integrates-claude-inference-hooks-scale-ai-while-addressing-risks Wed, 05 Aug 2026 16:47:01 GMT Zscaler AI Guard integrates with Claude inference hooks to enforce Zero Trust DLP policy natively at the model layer across Claude Enterprise. • Integrates Zscaler AI Guard with Anthropic Claude inference hooks to enforce Zero Trust data-loss-prevention policy natively at the Claude model layer, evaluating full conversation context in real time rather than individual messages. • Extends existing Zscaler platform policies to Claude Enterprise touchpoints with no additional governance stack required — existing Zscaler customers can activate with their current policy configuration. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/zscaler https://www.zscaler.com/blogs/product-insights/zero-trust-branch-now-available-fedramp-moderate-and-high https://www.zscaler.com/blogs/product-insights/zero-trust-branch-now-available-fedramp-moderate-and-high Mon, 03 Aug 2026 06:01:23 GMT Zscaler Zero Trust Branch now available in FedRAMP Moderate and High, enabling secure distributed branch connectivity for civilian federal agencies. • Extends Zscaler Zero Trust Branch to FedRAMP Moderate and High environments, giving civilian federal agencies and public sector organizations a compliant path to zero trust branch security. • Supports CISA TIC 3.0 Branch Office Use Case with local breakout architecture, allowing branch users to access the web and agency-sanctioned CSPs directly without backhauling traffic. • Provides device segmentation using a /32 per-device network approach (with variable subnet length support), acting as a DHCP server to discover and isolate every device at a branch site. • Introduces a Ransomware Killswitch concept with color-coded policies, enabling teams to rapidly tighten enforcement during suspicious activity to limit lateral spread. • Enables OT and IoT device discovery, tagging, and least-privilege policy enforcement to isolate cameras, badge systems, building management, and other hard-to-patch devices from user networks. • Supports one-arm mode alongside existing SD-WAN or gateway mode to terminate multiple internet links and load balance traffic, with outbound-only tunnels to the Zero Trust Exchange eliminating publicly exposed routes. • Offers zero-touch provisioning via the integrated Branch Appliance — define a site, activate the appliance, and it establishes secure outbound connectivity automatically. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/zscaler https://www.zscaler.com/blogs/cxo-insights/zscaler-cxo-monthly-roundup-june-2026 https://www.zscaler.com/blogs/cxo-insights/zscaler-cxo-monthly-roundup-june-2026 Wed, 22 Jul 2026 22:56:38 GMT Zscaler adds Agentic SecOps with closed-loop remediation and ZDX Network Intelligence for per-hop ISP visibility. • Introduces Agentic SecOps solution (limited availability) — an AI-driven security operations layer that connects telemetry across the Zscaler platform, endpoints/EDR, identity, and cloud to detect threats and orchestrate automated closed-loop remediation. • Adds ZDX Network Intelligence dashboard with global route visualization color-coded by severity, enabling NetOps teams to pinpoint last-mile and transit ISP degradation across hybrid workforces. • Enables BGP Autonomous System Number (ASN)-level aggregation of probe telemetry within ZDX, surfacing per-ASN latency and packet loss to identify which carrier is responsible for user experience degradation. • Adds hop-level drill-down within BGP ASNs in ZDX, showing per-hop latency and packet loss to identify specific routers or peering points causing problems. • Introduces ZDX Peer Impact Analysis, providing cross-customer visibility into whether other Zscaler customers traversing the same ISP path are experiencing the same anomaly — confirming whether an issue is carrier-wide or organization-specific. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/zscaler https://www.zscaler.com/blogs/product-insights/extending-zero-trust-browser-new-frontier-enterprise-security https://www.zscaler.com/blogs/product-insights/extending-zero-trust-browser-new-frontier-enterprise-security Fri, 17 Jul 2026 16:57:36 GMT Zscaler launches Zero Trust Enterprise Browser and Browser Detection and Response (BDR) extension to bring Zero Trust into the browser itself. • Introduces Zero Trust Enterprise Browser: a purpose-built, fully managed Chromium browser with Zero Trust security integrated directly into the browsing experience. • Adds Browser Detection and Response (BDR) via the Zero Trust Browser Extension, delivering browser-native threat detection and response inside existing browsers for threats that evade upstream network and endpoint controls. • Delivers three Zero Trust Browser deployment form factors — Cloud Browser Isolation, Browser Extension, and Enterprise Browser — allowing organizations to mix and match based on user, device, and workflow requirements. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/zscaler https://www.zscaler.com/blogs/product-insights/patch-window-gone-your-applications-need-defend-themselves https://www.zscaler.com/blogs/product-insights/patch-window-gone-your-applications-need-defend-themselves Wed, 15 Jul 2026 20:36:44 GMT Zscaler launches Autonomous Application Shield to auto-apply app-specific protections in the patch gap via App Connectors and global threat intel. • New Autonomous Application Shield capability continuously assesses private application exposure via App Connectors and automatically applies per-app protections in the Zscaler cloud without requiring a patch. • Per-application protection reasoning: the Zscaler cloud evaluates each private application individually and applies only the controls that specific application needs, reducing false positives and performance impact. • Automatic protection adaptation when developers ship new releases — security policy updates without manual re-tuning, policy review meetings, or security team intervention. • Global threat intelligence integration feeds zero-day and emerging attack technique data from Zscaler's worldwide customer base into the protection engine, with ML continuously tuning policies per application. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/zscaler https://help.zscaler.com/workflow-automation/release-upgrade-summary-2026 https://help.zscaler.com/workflow-automation/release-upgrade-summary-2026 Fri, 26 Jun 2026 00:00:00 GMT Zscaler Workflow Automation adds Notify node configuration wizard and time zone selection for notifications (June 26, 2026) • Adds a conversation-based Configure Notify Node window on the custom workflow builder page to assist with configuring user or escalation notifications. • Enables time zone selection for time-related merge tags on notifications created via Incident Details page, custom workflow builder, Notification Template page, or Admin Assignment window (defaults to UTC+00:00 if not set). Full history on Cyber Toolchain: https://cybertoolchain.io/tools/zscaler https://help.zscaler.com/zia/release-upgrade-summary-2026 https://help.zscaler.com/zia/release-upgrade-summary-2026 Fri, 26 Jun 2026 00:00:00 GMT ZIA adds domain fronting exemptions and DLP log fields to NSS feeds. • Adds `URL Category Exemptions for Block Domain Fronting` option in Advanced Settings to exempt specific URL categories from blocking • Adds `Exempted Cloud Applications for Block Domain Fronting` option in Advanced Settings to exempt cloud app categories or apps • Adds `DLP Policy Action` filter and column to Web Insights Logs and Endpoint DLP Insights Logs • Adds `DLP Confirmation Message` filter and column to Web Insights Logs and Endpoint DLP Insights Logs • Adds `%s{dlp_policy_action}` field to NSS and Cloud NSS feed output formats for web logs • Adds `%s{dlp_confirm_justification_msg}` field to NSS and Cloud NSS feed output formats for web logs • Adds `%s{dlp_confirm_justification_msg}` field to NSS and Cloud NSS feed output formats for Endpoint DLP logs • Adds `Unclassified` and `Under Review` labels in SaaS Security Report for application classification • Displays certificate validity, WAF name, CVE ID, and breach URL in the SaaS Security Report for cloud applications Full history on Cyber Toolchain: https://cybertoolchain.io/tools/zscaler https://help.zscaler.com/zia/release-upgrade-summary-2026 https://help.zscaler.com/zia/release-upgrade-summary-2026 Thu, 25 Jun 2026 00:00:00 GMT ZIA adds per-template Caution Interval setting to Browser End User Notifications • Adds a `Caution Interval` drop-down menu to the Administration > End User Notifications > Browser > EUN Templates > Add Custom Message window for configurable intervals per template Full history on Cyber Toolchain: https://cybertoolchain.io/tools/zscaler https://help.zscaler.com/ai-asset-mgmt/release-upgrade-summary-2026 https://help.zscaler.com/ai-asset-mgmt/release-upgrade-summary-2026 Wed, 24 Jun 2026 00:00:00 GMT AI Asset Management adds GitHub integration for code repos, embedded AI app visibility, and new dashboard widgets. • `Administration > Account Onboarding` flow added to connect GitHub as a Code Repository provider for automated discovery of AI models and workflows in source code • Automated discovery capability now maps all discovered repositories to the `Default Business Unit` by default, with post-discovery reassignment support • Granular scan rule configuration available to control which connected repositories are scanned for embedded AI components • Public AI Overview page adds `Upload Volume`, `Download Volume`, and `Embedded AI Apps` widgets while removing `Sensitive Data` and `Sensitive Data Transactions` widgets • `Locations` tab introduced on the `Usage Insights` page to drill down into AI usage data by geographic location Breaking changes: • The `Sensitive Data` and `Sensitive Data Transactions` widgets are removed from the Public AI Overview page Full history on Cyber Toolchain: https://cybertoolchain.io/tools/zscaler https://help.zscaler.com/zia/release-upgrade-summary-2026 https://help.zscaler.com/zia/release-upgrade-summary-2026 Wed, 24 Jun 2026 00:00:00 GMT ZIA adds 'Unclassified' and 'Under Review' application status labels and enriched security attributes to the SaaS Security Report. • Adds `Unclassified` and `Under Review` values for Application Status in the SaaS Security Report instead of defaulting to `Unsanctioned` • Expands SaaS Security Report to display certificate validity, WAF name, CVE ID, and breach URL next to Yes/No signals • Adds a Caution Interval drop-down menu to Browser EUN Template configuration for custom caution timing Full history on Cyber Toolchain: https://cybertoolchain.io/tools/zscaler https://help.zscaler.com/zpa/release-upgrade-summary-2026 https://help.zscaler.com/zpa/release-upgrade-summary-2026 Tue, 23 Jun 2026 00:00:00 GMT ZPA adds Device Posture failure notifications, App Connector health API, and new VPN diagnostics dashboards • Adds `Device Posture Profile Failure Notification` configuration via the `Manage Notifications` button in the Add Access Policy UI • Adds a new Event Monitoring & Notification API service to monitor App Connector health diagnostics (CPU, memory, disk, bandwidth, etc.) • Adds an `Access Policy Data Diagnostics` page for viewing VPN access policy logs and diagnostic data • Adds a `Traffic Flow Logs Diagnostics` page for viewing VPN connection traffic flow logs • Adds a `User Logs Diagnostics` page for viewing VPN user connection logs • Adds a `VPN Service Edges Dashboard` showing connector counts and total data transfer Full history on Cyber Toolchain: https://cybertoolchain.io/tools/zscaler https://help.zscaler.com/zia/release-upgrade-summary-2026 https://help.zscaler.com/zia/release-upgrade-summary-2026 Tue, 23 Jun 2026 00:00:00 GMT ZIA adds custom application service groups, new UI columns, and associated REST API endpoints. • Adds `GET /apps-services`, `POST /apps-services`, `GET /apps-services/{appServiceId}`, `PUT /apps-services/{appServiceId}`, and `DELETE /apps-services/{appServiceId}` to the cloud service API for managing custom application service groups • Adds Definition column and filter controls to the Application Services page UI for viewing, editing, and filtering custom groups • Expands Forwarding policy, IPS Control policy, and Firewall Filtering policy configurations to select custom (CU) application service groups Full history on Cyber Toolchain: https://cybertoolchain.io/tools/zscaler https://help.zscaler.com/zia/release-upgrade-summary-2026 https://help.zscaler.com/zia/release-upgrade-summary-2026 Mon, 22 Jun 2026 00:00:00 GMT ZIA introduces custom application service groups with API endpoints and policy integration • Adds ability to create custom Application Service Groups in the UI via the Definition column when Advanced Firewall is enabled • Allows Forwarding, IPS Control, and Firewall Filtering policies to select custom (CU) application service groups • Adds REST endpoints `GET`, `POST`, `PUT`, `DELETE /apps-services` for managing custom application service groups Full history on Cyber Toolchain: https://cybertoolchain.io/tools/zscaler https://help.zscaler.com/zia/release-upgrade-summary-2026 https://help.zscaler.com/zia/release-upgrade-summary-2026 Fri, 19 Jun 2026 00:00:00 GMT ZIA adds Snowflake SSPM integration, DLP channel selection, domain profile API endpoints, and browser EUN caution intervals • Adds `GET /domainProfiles`, `POST /domainProfiles`, `GET /domainProfiles/{id}`, `PUT /domainProfiles/{id}`, and `DELETE /domainProfiles/{id}` to the Cloud Service API for domain profile management • Adds support for Snowflake as an API-Based Platform in Advanced SSPM, including visibility into posture misconfigurations via the `SSPM Scan` checkbox during tenant onboarding • Adds ability to select specific channels (e.g., Endpoint DLP, DSPM) for custom and predefined DLP engines to reduce unnecessary noise • Adds a `Caution Interval` drop-down menu in the Administration > End User Notifications > Browser > EUN Templates > Add Custom Message window to configure per-browser caution intervals Full history on Cyber Toolchain: https://cybertoolchain.io/tools/zscaler https://help.zscaler.com/zdx/release-upgrade-summary-2026 https://help.zscaler.com/zdx/release-upgrade-summary-2026 Thu, 18 Jun 2026 00:00:00 GMT ZDX now allows rescheduling device remediation jobs directly from the UI for targeted devices. • ZDX now allows rescheduling device remediation jobs directly from the UI for targeted devices. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/zscaler https://help.zscaler.com/zia/release-upgrade-summary-2026 https://help.zscaler.com/zia/release-upgrade-summary-2026 Thu, 18 Jun 2026 00:00:00 GMT ZIA adds per-browser EUN template caution interval configuration • Adds `Caution Interval` drop-down menu in Administration > End User Notifications > Browser > EUN Templates > Add Custom Message window to configure different caution intervals for different browser EUNs Full history on Cyber Toolchain: https://cybertoolchain.io/tools/zscaler https://help.zscaler.com/zpa/release-upgrade-summary-2026 https://help.zscaler.com/zpa/release-upgrade-summary-2026 Wed, 17 Jun 2026 00:00:00 GMT ZPA adds LSS log receiver configuration at the Microtenant level in Limited Availability • Adds ability to configure and manage Log Streaming Service (LSS) receivers directly within Microtenants on both private.zscaler.com and zpatwo.net platforms Full history on Cyber Toolchain: https://cybertoolchain.io/tools/zscaler https://help.zscaler.com/zdx/release-upgrade-summary-2026 https://help.zscaler.com/zdx/release-upgrade-summary-2026 Wed, 17 Jun 2026 00:00:00 GMT ZDX adds Device Remediation capability for Standard and Advanced subscriptions. • Adds Device Remediation capability for Standard and Advanced ZDX subscription levels. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/zscaler https://help.zscaler.com/zia/release-upgrade-summary-2026 https://help.zscaler.com/zia/release-upgrade-summary-2026 Wed, 17 Jun 2026 00:00:00 GMT ZIA adds per-template Caution Interval drop-down for Browser EUN Templates • Adds a 'Caution Interval' drop-down menu to the `Administration > End User Notifications > Browser > EUN Templates > Add Custom Message` window, enabling configurable caution intervals per browser EUN template. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/zscaler https://help.zscaler.com/uvm/release-upgrade-summary-2026 https://help.zscaler.com/uvm/release-upgrade-summary-2026 Mon, 15 Jun 2026 00:00:00 GMT New auth method for the GitHub connector reduces exposure via short-lived, org-scoped tokens. • New auth method for the GitHub connector reduces exposure via short-lived, org-scoped tokens. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/zscaler https://help.zscaler.com/aem/release-upgrade-summary-2026 https://help.zscaler.com/aem/release-upgrade-summary-2026 Mon, 15 Jun 2026 00:00:00 GMT AEM adds GitHub App installation token auth for central, scoped repo access • Adds `GitHub App installation token` authentication to the GitHub Repositories connector, enabling centralized, least-privilege org-level access with short-lived tokens. • Enables scope-specific repository access via the new GitHub App integration method. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/zscaler https://help.zscaler.com/zpa/release-upgrade-summary-2026 https://help.zscaler.com/zpa/release-upgrade-summary-2026 Fri, 12 Jun 2026 00:00:00 GMT ZPA Resource Policy rules now support Application Catalog port selection and manual TCP port ranges for microsegmentation • Adds the `Application Port Template` option in Resource Policy rules to select destination ports directly from the Application Catalog. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/zscaler https://help.zscaler.com/ai-asset-mgmt/release-upgrade-summary-2026 https://help.zscaler.com/ai-asset-mgmt/release-upgrade-summary-2026 Fri, 12 Jun 2026 00:00:00 GMT Zscaler AI Asset Management adds AWS Bedrock activity-based detection, report exports across pages, and Microsoft Copilot Studio integration • Adds activity-based detection for AWS Bedrock models using CloudTrail events to include only those accessed in the preceding 90 days. • Enables report export on AI Assets (Models, MCP Servers, Agents) and AI Resources (Data Stores, Workloads, Guardrails, Identities) pages. • Adds Microsoft Copilot Studio support for automated agent discovery, security posture assessment, and entitlement visibility. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/zscaler https://help.zscaler.com/zia/release-upgrade-summary-2026 https://help.zscaler.com/zia/release-upgrade-summary-2026 Fri, 12 Jun 2026 00:00:00 GMT ZIA introduces custom application service groups, DLP channel scoping, and new domain profile APIs • Adds `GET /apps-services`, `POST /apps-services`, `GET /apps-services/{appServiceId}`, `PUT /apps-services/{appServiceId}`, and `DELETE /apps-services/{appServiceId}` endpoints to manage custom application service groups via API • Adds new UI columns (Definition, view/edit/filter controls) on the Application Services page to define and manage custom application service groups when Advanced Firewall is enabled • Adds 'Channels' selection capability when creating, editing, or cloning DLP engines to scope them to specific channels like Endpoint DLP or DSPM • Adds `GET /domainProfiles`, `POST /domainProfiles`, `GET /domainProfiles/{id}`, `PUT /domainProfiles/{id}`, and `DELETE /domainProfiles/{id}` endpoints for domain profile management via API Full history on Cyber Toolchain: https://cybertoolchain.io/tools/zscaler https://help.zscaler.com/secure-ai-apps-infra/release-upgrade-summary-2026 https://help.zscaler.com/secure-ai-apps-infra/release-upgrade-summary-2026 Mon, 08 Jun 2026 00:00:00 GMT Zscaler AI Security adds standalone prompt hardening for shadow apps and in-UI RAG progress indicators • Adds standalone App Hardening enabling manual application registration via `AI Infrastructure > Remediation` page for unmanaged applications without standard onboarding. • Removes mandatory probe prerequisite for prompt hardening, allowing baseline hardening instructions to be activated immediately upon onboarding. • Adds visual progress indicator and background processing for RAG initiation from the App Configuration page. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/zscaler https://help.zscaler.com/zpa/release-upgrade-summary-2026 https://help.zscaler.com/zpa/release-upgrade-summary-2026 Mon, 08 Jun 2026 00:00:00 GMT ZPA adds support for configuring AppProtection alongside Multimatch in application segments. • `AppProtection` and `Multimatch` can now be configured for the same application segment Full history on Cyber Toolchain: https://cybertoolchain.io/tools/zscaler https://help.zscaler.com/zia/release-upgrade-summary-2026 https://help.zscaler.com/zia/release-upgrade-summary-2026 Mon, 08 Jun 2026 00:00:00 GMT ZIA adds Advanced SSPM coverage for Box with 4 new controls • Adds 4 new SSPM controls to the Advanced SaaS Security Posture Management feature for Box, enabling deeper visibility and stronger security posture assessment. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/zscaler https://help.zscaler.com/zero-trust-branch/release-upgrade-summary-2026 https://help.zscaler.com/zero-trust-branch/release-upgrade-summary-2026 Mon, 08 Jun 2026 00:00:00 GMT Zero Trust Branch 8.0.8P5 adds admin password change via console and manual IPSec endpoint config. • Adds option to change the admin password using the Zscaler Admin Console • Adds option to change the IPSec remote endpoint (previously automatic) via configuration Full history on Cyber Toolchain: https://cybertoolchain.io/tools/zscaler https://help.zscaler.com/dspm/release-upgrade-summary-2026 https://help.zscaler.com/dspm/release-upgrade-summary-2026 Fri, 05 Jun 2026 00:00:00 GMT DSPM adds SaaS data inventory, on-prem SMB entitlement scanning, new AWS/Azure/GCP posture policies, VM directory excludes, Databricks catalog selection, and Kerberos auth fo • Adds SaaS data findings to the Data Inventory report for Out-of-Band CASB subscribers • Adds on-premises SMB file share scanning with LDAP-based identity entitlement detection • Adds 18 new data posture policies for AWS, Azure, and GCP tagging/labeling of sensitive data • Adds VM folder/directory exclusion paths in scan rules for AWS, GCP, and Azure virtual machines • Adds Databricks catalog selection within workspace scan rules for granular discovery • Adds evidence snippet storage to customer-managed cloud storage for on-premises scans • Adds Kerberos authentication support for scanning On-Premises NetApp NFS and SMB shares Full history on Cyber Toolchain: https://cybertoolchain.io/tools/zscaler https://help.zscaler.com/zia/release-upgrade-summary-2026 https://help.zscaler.com/zia/release-upgrade-summary-2026 Fri, 05 Jun 2026 00:00:00 GMT ZIA adds DLP channel scoping and new Domain Profile API endpoints • `GET /domainProfiles`, `POST /domainProfiles`, `GET /domainProfiles/{id}`, `PUT /domainProfiles/{id}`, `DELETE /domainProfiles/{id}` endpoints for Domain Profiles in Cloud Service API • Channel filtering for DLP engines (e.g., Endpoint DLP, DSPM) via the DLP Engines page Full history on Cyber Toolchain: https://cybertoolchain.io/tools/zscaler https://help.zscaler.com/zscaler-cellular/release-upgrade-summary-2026 https://help.zscaler.com/zscaler-cellular/release-upgrade-summary-2026 Fri, 05 Jun 2026 00:00:00 GMT The Zscaler Cellular admin interface now includes Audit Logs for tracking configuration changes and administrative actions. • The Zscaler Cellular admin interface now includes Audit Logs for tracking configuration changes and administrative actions. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/zscaler https://help.zscaler.com/zscaler-client-connector/client-connector-app-release-summary-2026 https://help.zscaler.com/zscaler-client-connector/client-connector-app-release-summary-2026 Thu, 04 Jun 2026 00:00:00 GMT Adds `httpAuthAllowedHosts` config parameter to support SAML redirect authentication • Supports the `httpAuthAllowedHosts` configuration parameter to allow redirected hostnames to be added to the exception list for SAML-based IdP authentication. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/zscaler https://help.zscaler.com/zia/release-upgrade-summary-2026 https://help.zscaler.com/zia/release-upgrade-summary-2026 Thu, 04 Jun 2026 00:00:00 GMT ZIA adds Endpoint Context UI/API and JA4 logging capabilities for encrypted traffic visibility • Adds new API endpoints `GET /endPointApplications/customApps`, `POST /endPointApplications/customApp`, `PUT /endPointApplications/customApp/{id}`, `DELETE /endPointApplications/customApp/{id}`, `GET /endPointApplications/customApps/{id}`, `GET /endPointApplications/customApps/lite`, `GET /endPointApplications`, `GET /endPointApplications/lite`, `PUT /endPointApplications/{id}`, `GET /endPointApplications/cloudApps`, `GET /endPointApplications/policies`, `GET /endPointApplications/getCategoriesWithNonEmptyApps`, `GET /endPointApplications/count`, `GET /endPointApplications/cloudApps/count` for managing endpoint application resources. • Adds new API endpoints `GET /endPointApplicationGroups`, `POST /endPointApplicationGroups`, `GET /endPointApplicationGroups/{id}`, `PUT /endPointApplicationGroups/{groupId}`, `DELETE /endPointApplicationGroups/{id}`, `PUT /endPointApplicationGroups/resources/{groupId}`, `GET /endPointApplicationGroups/policies` for managing endpoint application tag groups. • Adds new model attributes `endPointApplications`, `endPointApplicationGroups`, `endPointApplicationThreatLevels`, and `excludeContextShieldEndPoint` to `SSLInspectionRule`, `FirewallFilteringRule`, and `FirewallDnsRule` policy models to enable endpoint-based conditions. • Adds UI pages 'Application Investigation', 'Overview', and 'Inventory' under `Policies > Cybersecurity > Endpoint Context` for endpoint application visibility. • Adds new columns and filters 'JA4 Fingerprint', 'JA4 Fingerprint A', 'JA4 Fingerprint B', and 'JA4 Fingerprint C' to Web Insights Logs. • Adds field `%s{ja4_str}` to NSS Feed Output Format for web logs to stream JA4 network fingerprints. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/zscaler https://help.zscaler.com/dspm/release-upgrade-summary-2026 https://help.zscaler.com/dspm/release-upgrade-summary-2026 Wed, 03 Jun 2026 00:00:00 GMT DSPM adds SaaS data inventory, on-prem SMB scanning with LDAP/Kerberos, and 20 new tagging policies across AWS/Azure/GCP • Adds unified SaaS data findings in the Data Inventory report for customers subscribed to Out-of-Band CASB. • Adds on-premises SMB file share scanning to detect identities (users, groups, computer accounts) accessing sensitive data. • Adds LDAP server registration requirement for on-premises file server association in DSPM. • Adds Kerberos authentication support for NetApp NFS and SMB file shares. • Adds 20 new data posture policies enforcing tags on AWS (DynamoDB, RDS, S3) and labels on Azure/GCP storage/compute resources. • Adds `file` and `directory` path exclusion options in scan rules to omit specific VM directories from scans. • Adds Databricks catalog selection within scan rules for granular data discovery control. • Adds evidence snippet storage in customer-managed cloud storage for on-premises sensitive data findings. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/zscaler https://help.zscaler.com/zia/release-upgrade-summary-2026 https://help.zscaler.com/zia/release-upgrade-summary-2026 Wed, 03 Jun 2026 00:00:00 GMT ZIA adds `appInventory*` filter fields to NSS `/nssFeeds` API and File Type Control rule expiration • `appInventoryAppTypes`, `appInventoryThreatTypes`, and `appInventoryThreatCategories` fields are available in the `ZmanageNssFeed` model for the `/nssFeeds` APIs to filter Application Inventory logs. • Admins can now set an expiration date for File Type Control policy rules. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/zscaler https://help.zscaler.com/zpa/release-upgrade-summary-2026 https://help.zscaler.com/zpa/release-upgrade-summary-2026 Tue, 02 Jun 2026 00:00:00 GMT ZPA Private Cloud Controllers now support OAuth 2.0 enrollment (requires v25.47.3+) and updated STIG-hardened images for Azure/GCP with FIPS enabled. • Adds `OAuth 2.0` enrollment support for Private Cloud Controllers, allowing devices to obtain OAuth tokens via the `zpa-oauth.private.zscaler.com` server instead of provisioning keys • Updates App Connector, Private Service Edge, and Private Cloud Controller STIG-hardened VM images on Microsoft Azure with FIPS enabled by default • Updates App Connector, Private Service Edge, and Private Cloud Controller STIG-hardened VM images on Google Cloud Platform (GCP) with FIPS enabled by default Full history on Cyber Toolchain: https://cybertoolchain.io/tools/zscaler https://help.zscaler.com/zpa/release-upgrade-summary-2026 https://help.zscaler.com/zpa/release-upgrade-summary-2026 Mon, 01 Jun 2026 00:00:00 GMT ZPA adds OAuth 2.0 enrollment for PSEs and redaction of sensitive text in isolation profiles. • Adds OAuth 2.0 enrollment support for Private Service Edges (PSEs) on `private.zscaler.com` and `zpatwo.net` clouds • Allows admin to enable redaction of sensitive text in Zero Trust Browser isolation profiles Full history on Cyber Toolchain: https://cybertoolchain.io/tools/zscaler https://help.zscaler.com/dspm/release-upgrade-summary-2026 https://help.zscaler.com/dspm/release-upgrade-summary-2026 Mon, 01 Jun 2026 00:00:00 GMT Zscaler DSPM adds SaaS data inventory, on-prem SMB scanning with LDAP/Kerberos, Databricks catalog selection, and exclusion paths. • Adds unified Data Inventory reporting that includes SaaS data findings from Out-of-Band CASB subscriptions • Adds Entitlement Findings support for on-premises SMB file shares to detect identities accessing sensitive data • Adds Kerberos authentication support for scanning NetApp NFS and SMB file shares • Adds ability to exclude specific VM folders or directories from scans by specifying file and directory paths in scan rules • Adds Databricks Catalog Management to select specific catalogs within a workspace during scan rule configuration • Adds evidence collection for on-premises sensitive data stored in customer-managed cloud storage Full history on Cyber Toolchain: https://cybertoolchain.io/tools/zscaler https://help.zscaler.com/zscaler-client-connector/client-connector-app-release-summary-2026 https://help.zscaler.com/zscaler-client-connector/client-connector-app-release-summary-2026 Mon, 01 Jun 2026 00:00:00 GMT Android/Linux/ChromeOS Client Connector adds step-up auth, Z-Tunnel override, key export and PAC PROXY support • Adds support for step-up authentication for conditional access to Zscaler Private Access (ZPA) and Zscaler Internet Access (ZIA) • Enables overriding the Z-Tunnel 2.0 protocol settings • Adds support for exporting the data-channel encryption key for debugging Z-Tunnel 2.0 traffic • Adds support to use a PROXY return statement in the PAC file used with ZIA Disaster Recovery Configuration Full history on Cyber Toolchain: https://cybertoolchain.io/tools/zscaler https://help.zscaler.com/zia/release-upgrade-summary-2026 https://help.zscaler.com/zia/release-upgrade-summary-2026 Mon, 01 Jun 2026 00:00:00 GMT ZIA adds DLP justification logs to NSS feeds, Snowflake SSPM support, and text redaction in isolation profiles. • Adds `%s{dlp_policy_action}` and `%s{dlp_confirm_justification_msg}` fields to NSS/Cloud NSS Feed Output Format for web logs • Adds `%s{dlp_confirm_justification_msg}` field to NSS/Cloud NSS Feed Output Format for Endpoint DLP logs • Adds Snowflake as an API-based platform in Advanced SSPM with tenant onboarding via the SSPM Scan checkbox Full history on Cyber Toolchain: https://cybertoolchain.io/tools/zscaler https://help.zscaler.com/secure-ai-users/release-upgrade-summary-2026 https://help.zscaler.com/secure-ai-users/release-upgrade-summary-2026 Sat, 30 May 2026 00:00:00 GMT Secure Access to AI Apps adds Mistral Vibe (formerly Le Chat) as a supported provider for AI Guard. • Adds Mistral Vibe (formerly Le Chat) support in AI Guard 2.17.0. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/zscaler https://help.zscaler.com/workflow-automation/release-upgrade-summary-2026 https://help.zscaler.com/workflow-automation/release-upgrade-summary-2026 Fri, 29 May 2026 00:00:00 GMT Zscaler Workflow Automation adds notification template merge tags, incident attachments column, and CSV user data API endpoints. • Adds `Sender Email` and `Subject` merge tags to Notification Templates for email, Slack, and Microsoft Teams notifications • Adds an Attachments column to the Incidents page incidents table to display file names for Source DLP type Email incidents • Adds `GET /dlp/v1/csv-user-data/{csv_user_data_uuid}/download` endpoint to retrieve pre-signed S3 bucket links for CSV user attributes and validation errors • Adds `POST /dlp/v1/csv-user-data/import` endpoint to import end user attributes as a multipart CSV file Full history on Cyber Toolchain: https://cybertoolchain.io/tools/zscaler https://help.zscaler.com/zpa/release-upgrade-summary-2026 https://help.zscaler.com/zpa/release-upgrade-summary-2026 Fri, 29 May 2026 00:00:00 GMT Private Access adds OAuth 2.0 enrollment support for Network Connectors • Adds OAuth 2.0 enrollment as the recommended method for Network Connectors, allowing devices to use OAuth enrollment tokens instead of provisioning keys. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/zscaler https://help.zscaler.com/zia/release-upgrade-summary-2026 https://help.zscaler.com/zia/release-upgrade-summary-2026 Fri, 29 May 2026 00:00:00 GMT ZIA adds URL category and cloud app exemptions for Block Domain Fronting policy. • `URL Category Exemptions` added to Advanced Settings to exempt specific URL categories from domain fronting blocks • `Exempted Cloud Applications` added to Advanced Settings to exempt specific cloud app categories or individual cloud apps from domain fronting blocks Full history on Cyber Toolchain: https://cybertoolchain.io/tools/zscaler https://help.zscaler.com/cloud-branch-connector/release-upgrade-summary-2026 https://help.zscaler.com/cloud-branch-connector/release-upgrade-summary-2026 Fri, 29 May 2026 00:00:00 GMT Zscaler Zero Trust Gateways now available in AWS ap-south-2 and ap-southeast-4 regions • Adds support for `ap-south-2` (India) and `ap-southeast-4` (Southeast Asia) AWS regions for Zscaler Zero Trust Gateways across all ZIA cloud platforms. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/zscaler https://help.zscaler.com/zpa/release-upgrade-summary-2026 https://help.zscaler.com/zpa/release-upgrade-summary-2026 Thu, 28 May 2026 00:00:00 GMT ZPA adds high-performance hardware appliances for App Connectors and Private Service Edges with 3+ Gbps throughput. • High-Performance Hardware Appliances for App Connectors and Private Service Edges are available in Limited Availability • Updated AWS Images for Private Service Edge and Private Cloud Controller now ship STIG-hardened RHEL 9 images with FIPS enabled by default Full history on Cyber Toolchain: https://cybertoolchain.io/tools/zscaler https://help.zscaler.com/zpa/release-upgrade-summary-2026 https://help.zscaler.com/zpa/release-upgrade-summary-2026 Tue, 26 May 2026 00:00:00 GMT ZPA adds Business Continuity, Private Cloud, Controller Group, Version Profile, Enrollment Cert, and Browser Access Groups management APIs; supports external IAM IdP selectio • Adds `GET /mgmtconfig/v1/admin/customers/{customerId}/businessContinuitySettings`, `PUT .../BusinessContinuitySettings/{id}`, `GET .../metadata`, and `GET .../certificate` endpoints for programmatic Business Continuity settings management • Adds `GET`, `POST`, `GET .../{privateCloudId}`, `PUT .../{privateCloudId}`, and `DELETE .../{privateCloudId}` endpoints on `/mgmtconfig/v1/admin/customers/{customerId}/privateCloud` for Private Cloud Management • Adds `GET /mgmtconfig/v1/admin/customers/{customerId}/privateCloudController/{privateCloudControllerId}` and `PUT .../{privateCloudControllerId}` for private Cloud Controller management • Adds `POST`, `DELETE`, `GET .../{privateCloudControllerGroupId}`, `DELETE .../{privateCloudControllerGroupId}`, and `PUT .../{privateCloudControllerGroupId}` endpoints on `/mgmtconfig/v1/admin/customers/{customerId}/privateCloudControllerGroup` for controller group management • Adds `GET /mgmtconfig/v2/admin/customers/{customerId}/enrollmentCert` endpoint for Enrollment Certificates retrieval • Adds `GET /zpn/api/v2/admin/customers/{customerId}/lssConfig` endpoint for Log Streaming (LSS) Configuration • Adds `GET /mgmtconfig/v1/admin/customers/{customerId}/visible/versionProfiles`, `GET .../versionProfile`, `GET .../appConnectorGroup`, and `GET .../serviceEdgeGroup` endpoints for Version Profiles, App Connector Group, and Service Edge Group management • Adds `GET /mgmtconfig/v1/admin/customers/{customerId}/browserAccessGroups` endpoint for Browser Access Groups Management • Adds support to select the External IAM IdP when configuring a policy or a Microtenant Breaking changes: • During migration, external IdP configurations are view only. After migration is complete, IdP configurations are inactive but can be restored if necessary. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/zscaler https://help.zscaler.com/authentication-service/release-upgrade-summary-2026 https://help.zscaler.com/authentication-service/release-upgrade-summary-2026 Tue, 26 May 2026 00:00:00 GMT Authentication Service now supports migrating users from external IdPs. • Enables migration of end-users from external Identity Providers to Authentication Service. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/zscaler https://help.zscaler.com/zia/release-upgrade-summary-2026 https://help.zscaler.com/zia/release-upgrade-summary-2026 Tue, 26 May 2026 00:00:00 GMT ZIA adds API endpoints to manage Secure Message Processing Center (SMPC) instances and a new admin role permission. • Adds `GET /smpcInstance` and `PUT /smpcInstance/dc` API endpoints to update SMPC instance details by data center ID and retrieve status for all instances in a data center • Adds `ZS_BUSINESS_CONTINUITY` enum value to the `permissions` field of the `AdminRole` model for the `/adminRoles` APIs Full history on Cyber Toolchain: https://cybertoolchain.io/tools/zscaler