Zscaler Identity Protection

Name: Zscaler Identity Protection
Brand: Zscaler

Zscaler empowers enterprises to modernize security, streamline operations and help transform business through its innovative approach to cybersecurity

Est 2007|Valuation $24.2B|Raised $2.3B

LinkedIn 533K|Website|Web traffic 2.9M|FTEs 8,700|HQ San Jose, CA

01Competitive Landscape

Top competitors overview

Zscaler Identity Protection competes in the identity security market alongside multiple approaches:

Endpoint/XDR-led identity security (CrowdStrike)
Identity platform-led detection (Microsoft)
Inline authentication firewall / universal MFA approaches (Silverfort)

Narrative competitive analysis

Where Zscaler Identity Protection may be chosen - When Zscaler already provides user connectivity (ZIA/ZPA) and the Client Connector is widely deployed, Identity Protection can be adopted with fewer net-new agents and with integrations to existing policy enforcement points. - The vendor states the product provides assessments and detection rules for common Active Directory attack techniques. Where competitors often have an advantage - CrowdStrike: broader market presence in ITDR and more visible third-party evaluations and analyst coverage. - Microsoft: when organizations already license Microsoft security suites, Defender for Identity can be operationally convenient and tightly integrated with other Microsoft signals. - Silverfort: differentiated inline authentication and universal MFA controls for legacy systems and explicit packaging in vendor materials. Selection patterns suggested by user discussions - Architectural choices that modify telemetry (for example, proxying or brokering) can affect source attribution assumptions and may lead some teams to prefer tools that instrument domain controllers and authentication flows more directly.

	Zscaler Identity Protection (ITDR)	CrowdStrike Falcon Identity Protection	Microsoft Defender for Identity
Starting Price	Not publicly listed (quote-based; often bundled) (Vendor pricing and plans information)	Public pricing information exists but often requires vendor interaction; licensed per active identity (Vendor pricing and product pages)	Often bundled; Microsoft security add-ons are shown with per-user licensing in SMB contexts; enterprise licensing varies (Vendor pricing and product pages)
Best For	Enterprises that use Zscaler as a backbone for user connectivity and seek identity detections tied to Zscaler policy enforcement and Client Connector deployment	Organizations using CrowdStrike Falcon seeking unified endpoint and identity protection	Microsoft-centric environments that value integration with Microsoft security suites and AD signal ingestion
Key Strength	Integration with Zscaler access controls and Client Connector can reduce the need for additional endpoint agents for organizations already invested in the Zscaler ecosystem (vendor product announcement)	Established ITDR market presence and broader hybrid identity roadmap; visible third-party evaluations (vendor product pages and analyst summaries)	Tight integration with Microsoft identity signals and security products; attractive in contexts where Microsoft licensing already covers relevant capabilities (Vendor product documentation)
Key Weakness	Limited third-party review visibility specific to ITDR; dependency on Zscaler agent/ecosystem; potential telemetry side effects	Perception of premium pricing and setup complexity noted in some analyses and reviews	Coverage is strongest for AD and Microsoft identity signals; may be less comprehensive for heterogeneous IAM environments

01Competitive Landscape

Top competitors overview

Zscaler Identity Protection competes in the identity security market alongside multiple approaches:

Endpoint/XDR-led identity security (CrowdStrike)
Identity platform-led detection (Microsoft)
Inline authentication firewall / universal MFA approaches (Silverfort)

Narrative competitive analysis

Where Zscaler Identity Protection may be chosen

When Zscaler already provides user connectivity (ZIA/ZPA) and the Client Connector is widely deployed, Identity Protection can be adopted with fewer net-new agents and with integrations to existing policy enforcement points.
The vendor states the product provides assessments and detection rules for common Active Directory attack techniques.

Where competitors often have an advantage

CrowdStrike: broader market presence in ITDR and more visible third-party evaluations and analyst coverage.
Microsoft: when organizations already license Microsoft security suites, Defender for Identity can be operationally convenient and tightly integrated with other Microsoft signals.
Silverfort: differentiated inline authentication and universal MFA controls for legacy systems and explicit packaging in vendor materials.

Selection patterns suggested by user discussions

Architectural choices that modify telemetry (for example, proxying or brokering) can affect source attribution assumptions and may lead some teams to prefer tools that instrument domain controllers and authentication flows more directly.

	Zscaler Identity Protection (ITDR)	CrowdStrike Falcon Identity Protection	Microsoft Defender for Identity
Starting Price	Not publicly listed (quote-based; often bundled) (Vendor pricing and plans information)	Public pricing information exists but often requires vendor interaction; licensed per active identity (Vendor pricing and product pages)	Often bundled; Microsoft security add-ons are shown with per-user licensing in SMB contexts; enterprise licensing varies (Vendor pricing and product pages)
Best For	Enterprises that use Zscaler as a backbone for user connectivity and seek identity detections tied to Zscaler policy enforcement and Client Connector deployment	Organizations using CrowdStrike Falcon seeking unified endpoint and identity protection	Microsoft-centric environments that value integration with Microsoft security suites and AD signal ingestion
Key Strength	Integration with Zscaler access controls and Client Connector can reduce the need for additional endpoint agents for organizations already invested in the Zscaler ecosystem (vendor product announcement)	Established ITDR market presence and broader hybrid identity roadmap; visible third-party evaluations (vendor product pages and analyst summaries)	Tight integration with Microsoft identity signals and security products; attractive in contexts where Microsoft licensing already covers relevant capabilities (Vendor product documentation)
Key Weakness	Limited third-party review visibility specific to ITDR; dependency on Zscaler agent/ecosystem; potential telemetry side effects	Perception of premium pricing and setup complexity noted in some analyses and reviews	Coverage is strongest for AD and Microsoft identity signals; may be less comprehensive for heterogeneous IAM environments

Zscaler Identity Protection

01Competitive Landscape

Top competitors overview

Narrative competitive analysis

02Market Map

01Competitive Landscape

Top competitors overview

Narrative competitive analysis

02Market Map