Tool profile
Zscaler Data Security: cost, fit and limits
Zscaler Data Security is a data loss prevention service made by Zscaler, Inc. that applies policies to web, endpoint, email, SaaS, public cloud, private apps and BYOD from its inline security cloud. It is sold to organizations that already send their users' traffic through Zscaler and want matching data rules in the same service.
What to know first
Zscaler's DLP page is strong on detection techniques and weak on commercial terms. It names Exact Data Match, Indexed Document Matching and OCR, and says TLS and SSL inspection scales, which matters because most web traffic is encrypted. It gives no price, certification list or hosting statement on the page read, and the company privacy policy excludes customer data, so the questions go to sales.
Zscaler Data Security at a glance
| Maker | Zscaler, Inc., United States |
|---|---|
| Free plan | No |
| Entry price | Quote only |
| API access | No |
| Category | Best AI Data Loss Prevention Software in 2026, rank 9 of 10 |
| Website | zscaler.com |
Who Zscaler Data Security is best for
Existing Zscaler internet access customers
DLP runs inline in the same cloud, so policies apply to web traffic without adding another proxy or routing change for those already inside the service.
Teams protecting structured records
Exact Data Match fingerprints specific records such as credit card numbers, which lowers false matches compared with generic pattern rules.
Document-heavy businesses
Indexed Document Matching detects templated forms such as tax or medical documents, and OCR scans PNG, JPEG and images embedded in files such as Word documents.
Companies with unmanaged devices
Policies extend to BYOD, SaaS and private apps, so a contractor's laptop can be covered through the web path without a full agent rollout.
Zscaler Data Security plans and pricing
| Plan | Price | What it includes |
|---|---|---|
| Inline web DLP | Not stated on the product page | Inspection of web traffic with scalable TLS and SSL decryption, applying central policies at the point of upload or download. |
| Endpoint DLP | Not stated on the product page | A lightweight agent that extends the same central policy to data in use on the device. |
| Email DLP | Not stated on the product page | Email inspection that can scale through an SMTP relay, without configuration changes on the mail systems themselves. |
| Data discovery | Not stated on the product page | AI-powered and ML-powered discovery across endpoint, inline and cloud channels, to find where sensitive data sits. |
Checked November 2026.
What Zscaler Data Security does
- Exact Data Match
- EDM fingerprints specific records, such as credit card numbers, so the engine matches real values from your data rather than a generic number pattern. Matching is exact, not approximate.
- Indexed Document Matching
- IDM recognizes templated documents such as tax or medical forms, which suits businesses where a particular form, rather than a number pattern, is the sensitive item.
- OCR
- Optical character recognition scans PNG and JPEG files and images embedded in files such as Word documents, which catches text that a screenshot or scan would hide from a plain text scan.
- Central policy
- The same policy is applied across web, endpoint, email, SaaS, public cloud, private apps and BYOD, regardless of where the data sits, according to the product page.
- TLS inspection at scale
- The page cites TLS and SSL as 95 percent of web traffic and says inspection scales in its cloud, so uploads inside encrypted sessions can be examined.
How Zscaler Data Security handles your data
The DLP page does not describe storage, retention or residency of inspected content, and it links to a compliance portal for certifications without naming any. Zscaler's company privacy policy gives an address at 4401 Great America Parkway, Santa Clara, California, and states that it does not apply to information processed on behalf of customers, pointing to a separate privacy overview that was not read. It does not mention AI training. The vendor's policy was not checked for customer data hosting regions, so request the data protection terms before a trial.
Where Zscaler Data Security falls short in practice
- Strong only inside the Zscaler path. Inline inspection is the core strength, so users who bypass the service, or traffic outside it, receive weaker coverage. Endpoint and email components add agents or relays.
- AI description is generic. The page mentions AI-powered and ML-powered data discovery without naming models or accuracy. Ask how classification is trained and whether your content is used. Request this before signing.
- Commercial terms are elsewhere. Pricing is on a linked page with no figures shown, and certifications sit in a compliance portal. Budget time for a vendor questionnaire. Plan for it early.
Works with
Alternatives to Zscaler Data Security
Zscaler Data Security: common questions
What detection methods does Zscaler DLP use?
The product page names Exact Data Match for specific records, Indexed Document Matching for templated forms and OCR for text in images, along with AI-powered and ML-powered discovery. It gives no detection rates, so measure false positives on a sample of your own documents.
Does Zscaler DLP cover email?
Yes. The page lists email DLP and says it can scale through SMTP relay without configuration changes, alongside endpoint DLP with a lightweight agent. Check how email incidents appear next to web incidents, since the page does not describe the console.
Can Zscaler inspect encrypted traffic?
The page says scalable TLS and SSL inspection is part of the service, and cites TLS and SSL as 95 percent of web traffic. Decrypting traffic needs certificates on devices and legal review for privacy exceptions such as banking or health sites.
Does Zscaler list its certifications on the DLP page?
No. The page links to a compliance portal for certifications, authorizations and audit reports but names none. Ask your account contact for the current reports and for the data protection terms covering the DLP service. Ask whether a recent audit report covers it.
Is Zscaler DLP available without Zscaler web security?
The pages read describe DLP as natively integrated in its inline security cloud and part of a security service edge. They do not say whether it can be bought as a standalone product, so ask sales what the minimum package is.