Palo Alto Networks Next-Generation CASB vs Zscaler CASB

Palo Alto Networks Next-Generation CASB9.1Visit Zscaler CASB8.9Visit

Higher score Palo Alto Networks Next-Generation CASB #4 in Cloud Access Security Broker Software 9.1/10 Pricing on request ✓ 5 of 5 features Visit site

vs

Zscaler CASB #6 in Cloud Access Security Broker Software 8.9/10 Pricing on request ✓ 5 of 5 features Visit Zscaler

• Palo Alto Networks Next-Generation CASB fits best

  Security teams wanting CASB plus threat prevention

• Zscaler CASB fits best

  Businesses standardizing on proxy-based CASB

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Side by side

Feature	Palo Alto Networks Next-Generation CASB 9.1/10 Visit ↗	Zscaler CASB 8.9/10 Visit ↗
At a glance
Editor score	9.1	8.9
Ranking	#4 in Cloud Access Security Broker Software	#6 in Cloud Access Security Broker Software
Best for	Security teams wanting CASB plus threat prevention	Businesses standardizing on proxy-based CASB
Pricing model	Paid	Paid
Starting price	Pricing on request	—
Free plan	Not checked yet	—
Free trial	—	—
Deployment	Cloud	Cloud
Platforms	Web	Web
Support	Phone, Tickets, Community, Docs	Phone, Tickets, Community, Docs · 24/7
Compliance	SOC 2, ISO 27001, GDPR, HIPAA, PCI DSS	SOC 2, ISO 27001, GDPR, HIPAA, PCI DSS
Integrations	12 integrations	150+ integrations
Built for	Mid-market, Enterprise	Mid-market, Enterprise
Features Palo Alto Networks Next-Generation CASB 5/5 · Zscaler CASB 5/5
Inline controls	✓	✓
API-based controls	✓	✓
DLP controls	✓	✓
Shadow IT discovery	✓	✓
Threat detection	✓	✓
Specs
Deployment model	Hybrid	Hybrid
App connectors	Not checked yet	Not checked yet
Our review
Pros	Combines inline and API CASB with DLP and posture management Covers discovery, misconfiguration remediation and malware analysis Integrates with Microsoft 365, Salesforce, Slack, Box and more	Combines inline TLS/SSL inspection with out-of-band SaaS and cloud API scanning Covers shadow IT discovery, DLP, malware protection, and risky file-share remediation Adds tenant, application, category controls plus compliance visibility and reporting
Cons	Pricing requires a contact-sales process Management is centered on Strata Cloud Manager or Panorama Its broad control set may exceed narrow CASB requirements	CASB pricing follows a contact-sales model There is no free plan Its broad control set may exceed the needs of narrowly focused teams
Our verdict	Palo Alto Networks Next-Generation CASB is a hybrid cloud access security broker for organizations protecting sanctioned and unsanctioned SaaS applications. It supports web and API controls, combining SaaS application discovery, shadow IT… Read the review →	Zscaler CASB is a cloud-delivered cloud access security broker for organizations securing SaaS and IaaS environments. It is designed for businesses that want proxy-based controls across sanctioned and unsanctioned cloud applications, with… Read the review →

Strengths and trade-offs

• Palo Alto Networks Next-Generation CASB — where it wins

  • Combines inline and API CASB with DLP and posture management
  • Covers discovery, misconfiguration remediation and malware analysis
  • Integrates with Microsoft 365, Salesforce, Slack, Box and more

  Where it doesn't

  • Pricing requires a contact-sales process
  • Management is centered on Strata Cloud Manager or Panorama
  • Its broad control set may exceed narrow CASB requirements

• Zscaler CASB — where it wins

  • Combines inline TLS/SSL inspection with out-of-band SaaS and cloud API scanning
  • Covers shadow IT discovery, DLP, malware protection, and risky file-share remediation
  • Adds tenant, application, category controls plus compliance visibility and reporting

  Where it doesn't

  • CASB pricing follows a contact-sales model
  • There is no free plan
  • Its broad control set may exceed the needs of narrowly focused teams

• Palo Alto Networks Next-Generation CASB9.1/10 · Pricing on request

  A broad CASB for SaaS discovery, data protection, posture management and threat prevention.

  Visit siteFull verdict →
• Zscaler CASB8.9/10 · Pricing on request

  A broad, proxy-based CASB for inline inspection, API scanning, DLP, and cloud threat protection.

  Visit ZscalerFull verdict →