# iboss vs Zscaler Internet Access

**Leader by vioscaleAI score:** iboss

| Attribute | iboss | Zscaler Internet Access |
|---|---|---|
| **vioscaleAI score** | 57 (64% (medium)) | 50.9 (6% (low)) |
| content.faq | `[{"answer":"A cloud-delivered security service that replaces traditional VPN and network appliances with a single platform. It provides zero-trust network access, malware detection, data loss prevention, and web filtering, with AI-driven analytics for threat visibility and data activity monitoring. It is indexed under CASB.","source":"https://www.iboss.com/k12/pricing","question":"What is iboss?","confidence":0.6},{"answer":"iboss is sold across 3 plans: Essential SASE Foundation for K12 Schools, Complete SASE Platform for Districts and Enterprise SASE for Large Districts. We have not confirmed a published price for every tier. There is no free tier. Pricing changes often, so verify at source before relying on it.","source":"https://www.iboss.com/k12/pricing","question":"How much does iboss cost?","confidence":0.6},{"answer":"iboss supports the web, Windows, macOS, Linux, iOS and Android. Platforms we have not confirmed are simply not listed here rather than ruled out.","source":"https://www.iboss.com/k12/pricing","question":"What platforms does iboss support?","confidence":0.6},{"answer":"Yes. iboss can be deployed cloud / SaaS, hybrid, on-premise and self-hosted, so it does not have to run on the vendor's infrastructure.","source":"https://www.iboss.com/k12/pricing","question":"Can iboss be self-hosted?","confidence":0.6},{"answer":"We have confirmed 27 integrations for iboss, including Azure AD, Okta, Ping Identity, Microsoft Purview, Microsoft 365, Microsoft Sentinel, Microsoft Defender for Cloud Apps and Salesforce, plus 19 more. This is what we could verify from public sources, so the vendor may support others we have not indexed.","source":"https://www.iboss.com/k12/pricing","question":"What does iboss integrate with?","confidence":0.6},{"answer":"We have independently confirmed SOC 2, ISO 27001 and GDPR for iboss. Certifications we do not list are ones we have not been able to verify from public sources, which is not the same as iboss not holding them. Always confirm compliance directly before you rely on it.","source":"https://www.iboss.com/cloud-compliance-and-certifications","question":"What security certifications does iboss have?","confidence":0.7}]` | `[{"answer":"A cloud-delivered secure web gateway that uses zero-trust proxy architecture to inspect all TLS/SSL traffic at scale and protect against threats, malware, and unauthorized access to SaaS and cloud applications. It combines AI-powered threat detection, identity-based policies, and real-time intelligence to secure internet access from any location. It is indexed under Firewalls.","source":"https://www.zscaler.com/products/zscaler-internet-access","question":"What is Zscaler Internet Access?","confidence":0.6},{"answer":"We have only confirmed a cloud / SaaS deployment for Zscaler Internet Access, so it appears to be vendor-hosted. If a self-hosted option exists we have not found it documented publicly.","source":"https://www.zscaler.com/products/zscaler-internet-access","question":"Can Zscaler Internet Access be self-hosted?","confidence":0.6},{"answer":"We have confirmed 3 integrations for Zscaler Internet Access, including SIEM, SOAR and XDR. This is what we could verify from public sources, so the vendor may support others we have not indexed.","source":"https://www.zscaler.com/products/zscaler-internet-access","question":"What does Zscaler Internet Access integrate with?","confidence":0.6}]` |
| deployment.options | `{"cloud":true,"hybrid":true,"on_prem":true,"self_hosted":true}` | `{"cloud":true}` |
| description.long | A SASE platform that replaces legacy security infrastructure by combining encrypted traffic inspection, malware detection, data loss prevention, and cloud application security. All traffic flows through cloud gateways for full decryption and inspection, with flexible deployment across cloud, datacenters, and branch offices. | A cloud-delivered secure web gateway that uses zero-trust proxy architecture to inspect all TLS/SSL traffic at scale and protect against threats, malware, and unauthorized access to SaaS and cloud applications. It combines AI-powered threat detection, identity-based policies, and real-time intelligence to secure internet access from any location. |
| features.capabilities | `{"soc2_type_ii":true,"pricing_model":"per_user_annual","deployment_model":"hybrid","fedramp_authorized":true,"ssl_tls_decryption":true,"api_out_of_band_scanning":true,"bundled_cloud_dlp_engine":true,"malware_threat_protection":true,"shadow_it_cloud_discovery":true,"user_entity_behavior_analytics":true,"forward_proxy_inline_enforcement":true,"cloud_security_posture_cspm_bundled":true}` | `{"form_factor":"cloud_delivered","deployment_model":"inline_proxy","threat_intel_feed":true,"ssl_tls_decryption":true,"tls_ssl_inspection":true,"app_id_l7_filtering":true,"remote_access_vpn_ztna":true,"malware_threat_protection":true,"central_management_console":true,"forward_proxy_inline_enforcement":true}` |
| integrations.count | 19 | 3 |
| integrations.list | `[{"name":"Azure AD"},{"name":"Okta"},{"name":"Ping Identity"},{"name":"Microsoft Purview"},{"name":"Microsoft 365"},{"name":"Microsoft Sentinel"},{"name":"Microsoft Defender for Cloud Apps"},{"name":"Salesforce"},{"name":"Slack"},{"name":"Google Workspace"},{"name":"Google Gemini"},{"name":"Google SecOps"},{"name":"Box"},{"name":"Splunk"},{"name":"Sumo Logic"},{"name":"SentinelOne"},{"name":"CrowdStrike"},{"name":"Illumio"},{"name":"ChatGPT"},{"name":"Microsoft Copilot"},{"name":"Grok"},{"name":"SAML/OIDC","category":"identity"},{"name":"PowerSchool","category":"education"},{"name":"ClassLink","category":"education"},{"name":"Clever","category":"education"},{"name":"OneRoster","category":"education"},{"name":"Azure Virtual Desktop","category":"infrastructure"}]` | `[{"name":"SIEM"},{"name":"SOAR"},{"name":"XDR"}]` |
| market.availability | `{"primaryMarkets":[],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` | `{"primaryMarkets":[],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` |
| platform.support | `{"ios":true,"mac":true,"web":true,"linux":true,"android":true,"windows":true}` | - |
| pricing | `{"type":"subscription","plans":[{"free":false,"name":"Essential","features":["File Type Blocking & Download Protection","Basic CASB Controls for Cloud Apps","Encrypted Traffic Inspection (HTTPS Decrypt)","DNS Security & Malicious Domain Blocking","User and Group Based Web Policies","Real-Time Web Activity Reporting","Policy Enforcement via Cloud Connectors","Cloud Connector Agents for Windows, Mac, iOS, Chromebooks, Linux and Android","Basic Proxy Rules - Block, Allow, Redirect","Web Activity Dashboards & Reports","Device Posture Checks & Compliance","Safe Search Enforcement","YouTube Restricted Mode","Incident Dashboard","SAML & OIDC Identity Provider Integration"],"description":"SASE foundation with basic CASB controls and web filtering","contactSales":true},{"free":false,"name":"Complete","features":["Deep Content-Based Malware Defense","100+ Real-Time Threat Protection Feeds","Malware Sandboxing & Behavioral Analysis","Routed Connections for Network Access","Identity-Based Micro-Segmentation","Advanced Threat Intelligence & Analytics","Phishing Protection","Inline CASB — Tenant Restrictions & Header Injection","Endpoint EDR Integrations (CrowdStrike and others)","Microsoft Defender for Cloud Apps Integration","Microsoft Sentinel Log Forwarding Integration","Splunk Log Forwarding Integration","Google SecOps Log Forwarding Integration","SentinelOne Log Forwarding Integration","Sumo Logic Log Forwarding Integration","Log Forwarding to SIEM - Syslog, SCP, SFTP"],"description":"Complete SASE with zero trust network access, advanced malware defense, and threat intelligence","contactSales":true},{"free":false,"name":"Enterprise","features":["AI-Powered CASB (CASB Protection Policies, GenAI Controls, App Discovery)","SSPM + DSPM (SaaS Security Posture Management, Data Security Posture Management)","Advanced DLP Policies","Built-In DLP Content Matchers","Custom DLP Patterns & Regex","DLP Match Qualifiers to Reduce False Positives","Dynamic DLP Actions and Responses","File & Form Upload Detection & Protection","Image Text Recognition (OCR) for DLP"],"description":"Enterprise SASE with AI-powered CASB, full DLP suite, and SaaS security posture management","contactSales":true}],"addOns":[{"name":"SaaS Security Posture Management (SSPM) & Data Security Posture Management (DSPM"},{"name":"AI Governance"},{"name":"Remote Browser Isolation"},{"name":"Advanced DLP with Structured Data Fingerprinting"},{"name":"Advanced DNS Security"},{"name":"Digital Experience Management"},{"name":"Microsoft Purview DLP Integration"},{"name":"Extended Log Retention"},{"name":"Azure Deployment"}],"freeTier":false,"sourceUrl":"https://www.iboss.com/pricing","retrievedAt":"2026-10-07T13:53:08.307Z"}` | - |
| pricing.free_tier | no | - |
| pricing.model | quote | commercial |
| pricing.price_level | unknown | - |
| pricing.transparent | no | - |
| reliability.sla_pct | 99.999 | - |
| security.certifications | `[{"name":"Miercom Certified Secure","status":"active","auditor":"Miercom"}]` | - |
| security.fedramp | yes | - |
| security.gdpr | yes | - |
| security.iso27001 | yes | - |
| security.soc2 | yes | - |
| security.trust_center | https://www.iboss.com/cloud-compliance-and-certifications | - |

## Capabilities (CASB)

| Capability | iboss | Zscaler Internet Access |
|---|:--:|:--:|
| **Capabilities** |  |  |
| Deployment model | Hybrid | Inline proxy |
| Forward proxy inline enforcement | ✓ | ✓ |
| Reverse proxy unmanaged devices | - | - |
| API out of band scanning | ✓ | - |
| Shadow it cloud discovery | ✓ | - |
| Bundled cloud DLP engine | ✓ | - |
| Malware threat protection | ✓ | ✓ |
| User entity behavior analytics | ✓ | - |
| Cloud security posture cspm bundled | ✓ | - |
| Ssl tls decryption | ✓ | ✓ |
| SOC2 type ii | ✓ | - |
| Fedramp authorized | ✓ | - |
| Pricing model | Per user annual | - |

*Source: vioscaleAI. Generated 2026-10-16T21:00:19.599Z. "-" = undocumented, not absent.*