Zscaler Expands Zero Trust in the Browser Through the Acquisition of SquareX
2026-02-12
Zscaler, a global leader in cloud security, has announced the acquisition of SquareX, an innovative developer of browser security solutions. This move aims to further expand the capabilities of Zero Trust architecture in the browser environment and establish a new security standard for modern distributed organizations amid the active adoption of artificial intelligence technologies.
In today’s digital ecosystem, the browser has become the primary interface for corporate productivity and, at the same time, one of the most vulnerable attack vectors. With this in mind, the integration of SquareX technologies enables continuous, risk-based access decision-making directly at the point of workflow execution—in the user’s browser. This approach aligns with Zscaler’s strategic vision for comprehensive protection of users, data, and applications regardless of their location.
For a long time, organizations have relied on traditional remote access methods, such as VPNs and VDI, which are characterized by increased vulnerability risks, administrative complexity, and significant costs. In response to these limitations, Zscaler introduced Zscaler Private Access (ZPA), implementing a Zero Trust access model in which every session is authenticated, authorized, and verified based on context and device status. A lightweight software agent ensures compliance with security policies and grants access exclusively to specified applications, minimizing the risks inherent in traditional network trust.
The acquisition of SquareX marks a new phase in the development of the Zero Trust Exchange platform, extending its capabilities to standard browsers, including Google Chrome and Microsoft Edge, without the need to deploy a separate corporate browser. SquareX technology, known as the industry’s first Browser Detection and Response (BDR) solution, provides proactive detection and neutralization of sophisticated client-side attacks, data leakage control directly on the user’s endpoint device, and deep visibility into browser activity with detailed auditing capabilities.
SquareX offers organizations a flexible and straightforward deployment model: protection can be implemented via extensions for browsers already approved by the company or by using a dedicated corporate browser. Combined with the Zscaler platform, this provides a comprehensive approach to access control and data protection on both managed devices and in BYOD scenarios.
Zscaler is also continuing to develop Zero Trust Browser Cloud (Cloud Browser Isolation), which isolates web content in the cloud, preventing web threats and data loss. Following the integration of SquareX, both capabilities—cloud isolation and the BDR-enabled extension—are combined into a single product, simplifying deployment and enhancing protection effectiveness. This enables organizations to adopt a differentiated approach: for working with mission-critical systems, use full cloud isolation mode without data ever reaching the end device, while for daily operations and business communication tools, use a browser component with enhanced user activity control.
The SquareX approach is fundamentally different from traditional enterprise browsers, which often require complex change management and limit users in their choice of tools. The module-based integration format allows organizations to continue using modern browsers with regular vendor updates while ensuring centralized enforcement of security policies, full visibility into events, and risk control. This model is particularly relevant given the rapid development of AI browsers and the active integration of artificial intelligence tools into business processes.
Thus, Zscaler is consistently strengthening the position of the Zero Trust Exchange platform as a universal environment for the secure implementation of artificial intelligence, the protection of browser interactions, and the gradual phasing out of outdated remote access tools. The acquisition of SquareX is a strategic move that shapes a new paradigm for browser security in the enterprise segment and addresses the current challenges of digital transformation.