Does Zscaler decide on AI agent actions before they run?

Not in our sources. Not in our sources. Warn or ask: Not in our sources.

How does Zscaler reach employee devices?

Delivered with Zscaler's cloud security service in the network path; endpoint agents are not described on the page we read.

PRODUCT NOTES · ZSCALER

Zscaler Generative AI Security: AI endpoint control facts (2026)

Short answer

Zscaler Generative AI Security shows the prompts employees send to GenAI apps, allows or blocks apps, blocks sensitive data with DLP, isolates the browser to disable cut, paste and download, and covers Microsoft Copilot data security, all from the network path. Coding agents, MCP servers and warn or ask responses are not described on the page we read, and no price is published.

By The Device Desk · Endpoint AI Finder · Published 2026-10-11

Desk research from public vendor pages read on 27 September and 11 October 2026. Profiles follow our published method; we did not run the products.

Vendor pages read September and October 2026 · updated 2026-10-13

Visit Zscaler's site

Where do Zscaler's controls sit?

DEV Filled marker: described on the product pages we read
DEV Hatched marker: partly described (another component, a narrower scope, or method not detailed)
DEV Dashed marker: not in our sources (it may exist; we did not find it)

The map shows where each product's own pages describe a control, or where your answers point. It is not a measure of how well a product works.

The four product control types, plus policy only.
Type	Status	What the pages say	Source
On-device control	Not in our sources	Not described on the pages we read.	None
Browser extension	Not in our sources	Not described on the pages we read.	None
Network or SSE proxy	Described	See all input prompts users send to apps, allow or block apps, block sensitive data with DLP across GenAI, and isolate the browser to disable cut, paste and download.	Source: Zscaler: Secure the use of generative AI · Read 11 Oct 2026
AI or MCP gateway	Not in our sources	Not described on the pages we read.	None
Policy only	No product needed	Policy is your own work whichever product you choose.	None

How does Zscaler decide on an AI action?

Zscaler: decisions
Decides on a tool call before it runs	Not in our sources
Can warn or ask instead of only blocking	Not in our sources
Can block an agent, tool or action	MatchesAllow or block GenAI apps, and block sensitive data with DLP. Source: Zscaler: Secure the use of generative AI · Read 11 Oct 2026
Has a watch-only or simulation mode	Not in our sources

How does Zscaler reach devices, and which AI tools does it name?

Zscaler: rollout and named tools
How it reaches devices	Delivered with Zscaler's cloud security service in the network path; endpoint agents are not described on the page we read. Source: Zscaler: Secure the use of generative AI · Read 11 Oct 2026
Rolls out through EDR or device management you run	Not in our sources
Names the coding agents it covers	Not in our sources
AI tools and surfaces named	GenAI apps used by employees, and Microsoft Copilot. Source: Zscaler: Secure the use of generative AI · Read 11 Oct 2026
Built into	None
Works with	None in our sources

What else does Zscaler cover?

Zscaler: other coverage
Controls what goes into browser AI	MatchesPrompt-level visibility, DLP blocking across GenAI apps, and browser isolation that disables cut, paste and download. Source: Zscaler: Secure the use of generative AI · Read 11 Oct 2026
Records who or what took each action	Not in our sources
Also covers SaaS, cloud or homegrown AI	PartlyData security for Microsoft Copilot, including misconfigurations. Source: Zscaler: Secure the use of generative AI · Read 11 Oct 2026

What does Zscaler cost?

Not published

Not published (demo request).

Source: Zscaler: Secure the use of generative AI · Read 11 Oct 2026

Where is Zscaler strong, and where are its limits?

Strengths and limits come from the product's own pages and our sources; a limit can be something we did not find.

Strengths

Prompt-level visibility of what employees send to GenAI apps.
DLP and browser isolation for GenAI use, without anything AI-specific on the laptop.
Covers Microsoft Copilot data security as well as web GenAI apps.

Limits

Coding agents, MCP servers and local agent actions are not described on the page we read.
Warn or ask responses are not described, and no pricing is published.

What does Zscaler say about itself?

No vendor figures are quoted in these notes.

What has Zscaler announced recently?

No dated announcements in our sources.

Who should shortlist Zscaler?

Consider Zscaler if you already route traffic through Zscaler and want GenAI controls there, or if your main risk is sensitive data pasted or uploaded into GenAI web apps.

In our example finder profiles, Zscaler is not in the first group; your own answers may differ.

Run the finder with your answers