Citrix

Zscaler Zero Trust Exchange is a cloud-delivered security platform that brokers one-to-one connections between users, workloads, and applications based on identity, context, and policy rather than network location. It uses a proxy architecture to perform TLS/SSL inspection at scale, hiding applications from the public internet and connecting authorized users directly to apps instead of the network. The platform includes services such as Zscaler Internet Access and Zscaler Private Access, and integrates with third-party identity providers to verify users and devices before granting access. It applies AI-based risk scoring using contextual signals to enforce access, isolation, or blocking decisions in real time.

Check Point SASE Private Access is a zero trust network access product that connects users to specific applications rather than the full corporate network. It grants access based on user identity, device posture, and contextual factors, using integrations with identity providers such as Microsoft Entra ID and Okta via SAML and OpenID Connect. The product supports agent-based access for managed devices, agentless web-portal access for unmanaged and third-party devices, and an enterprise browser option for isolated corporate data access. Administrators manage policies, network segmentation, and multi-factor authentication centrally through the Check Point Portal.

Prisma Access is a cloud-delivered secure access service edge product that implements ZTNA 2.0 to connect users, devices, applications and data. It applies fine-grained, least-privileged access controls using App-ID, User-ID and Device-ID technologies rather than broad IP or port-based rules. After access is granted, the product continuously monitors device posture, user behavior and app behavior to detect changes and threats. It also integrates data loss prevention, SaaS security and SD-WAN capabilities to protect private apps, SaaS apps and cloud-native applications from a unified management console.