Competitors push SSE/browser convergence + M&A
Key Questions
Which vendors are leading in SSE and enterprise browser convergence?
Zscaler maintains Gartner SSE MQ leadership with ZTE growth, while Akamai acquired LayerX and Cato launched an enterprise browser. PAN, Netskope, and Island are also expanding browser and SASE capabilities.
What M&A activity is shaping the agentic security space?
PAN acquired Portkey to add runtime agent inspection to Prisma AIRS. Ongoing consolidation includes Zscaler integrations and Microsoft Entra expansions into AI agent controls.
How is Zscaler extending zero trust to AI agents?
Zscaler is applying zero trust to non-human and agentic identities via Oasis integration and ZAgent Framework. It positions its platform as the model for agentic AI security with cellular SASE for IoT.
What ROI have customers reported from enterprise browsers?
Island's TEI study shows 344% ROI, with one customer achieving 40% cost savings replacing VDI for 25K freelancers. This validates the shift from traditional access methods.
How are partners supporting AI and SASE adoption?
Cloudflare launched a new partner initiative for AI and SASE. Zscaler partnered with Cognizant, Infosys, and AWS for public sector GenAI security to expand channel reach.
What regulatory guidance supports SASE/SSE adoption?
CISA released a zero trust transition guide explicitly calling out SASE/SSE adoption. This creates compliance tailwinds for organizations modernizing access security.
How do competitors differ in browser security approaches?
Check Point uses hybrid on-device plus cloud inspection requiring agents, while Sophos Browser Shield relies on extensions. These contrast with agentless session-layer approaches.
What quantum-resilient initiatives are underway in SASE?
PAN and AT&T launched a quantum-resilient SASE fabric with PQC. This signals long-term architectural investments by major vendors in future-proof security.
Zscaler ZTE growth/Gartner SSE MQ leader; PANW SASE ARR $1.6B (+40% YoY); Secure Browser 11M licenses. Qilin ransomware exploits PAN-OS auth bypass (CVE-2026-0257) – competitor vulnerability reinforces need for agentless security. Island launches Secure DNS Resolver for agentless DNS filtering on unmanaged devices. Netskope AI Fast Path claims 90% latency reduction for AI traffic. Check Point Harmony SASE hybrid model contrasts with agentless SSE. Microsoft Entra expands SASE platform with AI agent controls. Sophos ZTNA extends to browser security. Zscaler joins Hiroshima AI Process. New: Zscaler partners with Schwarz Digits for sovereign cloud SASE on German STACKIT. Wyden calls for federal ban on legacy VPNs. Fortinet launches FortiGate 1200G hybrid SASE. Zscaler EY case study validates ZIA/ZPA deployment.