#USA #Austin #CyberRatings #Zscaler #Security Testing

CyberRatings.org Unveils Zscaler Zero Trust Exchange Test Results

Austin, Texas — June 2, 2025 — CyberRatings.org, a non-profit organization committed to delivering insights into the effectiveness of cybersecurity products and services, has announced remarkable findings regarding Zscaler Zero Trust Exchange (ZTE). The test results indicate that Zscaler achieved an outstanding 100% overall security effectiveness across two critical areas: Security Service Edge (SSE) and Zero Trust Network Access (ZTNA).

In the SSE evaluation, Zscaler effectively blocked all exploits, malware, and evasions, resulting in a perfect security effectiveness score of 100%. This comprehensive test assessed the product's performance against a range of threat categories, with the scoring system weighted according to the severity of the potential attacks. Notably, the SSE tests included various critical aspects:

• - Top TLS/SSL Ciphers Used: The assessment accounted for approximately 97% of HTTPS traffic, ensuring a wide coverage of encryption standards.
• - Malware Evaluation: The tests included 6,184 attack samples derived from ongoing malware campaigns, allowing for a realistic evaluation of Zscalers' ability to thwart malicious activities.
• - Exploitation Attempts: The assessment faced 205 high-risk samples from commonly exploited vulnerabilities found in enterprise environments, crucial for understanding Zscaler's defensive capabilities.
• - Evasion Techniques: Zscaler demonstrated its strength in defending against 1,154 attacks leveraging 37 different evasion methods, showcasing a robust defense mechanism.
• - False Positives: The assessment identified 1,514 samples, ensuring legitimate business traffic remained unaffected, thus highlighting Zscaler's precision in distinguishing between genuine and harmful activities.

In addition to the SSE findings, the ZTNA results confirmed Zscaler's effectiveness in enforcing security policies and managing access in alignment with predefined rules and user roles. The ZTNA evaluation explored various facets such as:

• - Authentication Identity: Ensuring proper identification before network access.
• - Routing Access Control: Managing and directing users based on roles and permissions.
• - Resource Access: Evaluating the Zero Trust Network Access capabilities to ensure that only authorized users gain access to critical resources.
• - TLS/SSL Support: Verifying security measures surrounding encrypted communications.

The remarkable performance in blocking 100% of exploited evasion techniques had a significant impact on overall scores, demonstrating Zscaler's ability to withstand sophisticated tactics aimed at breaching security protocols. As attackers become increasingly skillful at hiding their maneuvers, the ability for SSE products to recognize and counter these evasion attempts is paramount. Failing to do so can leave organizations vulnerable to unrecognized threats and disruptions.

Vikram Phatak, CEO of CyberRatings.org, stated, "The only way to know if an SSE offering works properly is to test it. Our results establish that Zscaler provides exceptional security effectiveness and broad coverage across numerous threat categories."

CyberRatings.org plans to evaluate several additional SSE solutions for Threat Protection and aims to release a Comparative Report this summer. Utilizing both in-house testing technologies and advanced tools like Keysight's CyPerf for performance testing and TeraPackets’ Threat Replayer for exploit replay, CyberRatings.org aims to provide comprehensive insights into the cybersecurity landscape.

Detailed test reports are available on cyberratings.org. The organization continues its mission to offer independent and objective ratings to guide enterprises in making informed security-related decisions.

For more information about seeing independent ratings for cybersecurity efficacy, interested parties can visit www.cyberratings.org and follow CyberRatings.org on LinkedIn.