Zscaler platform bundles and editions are the commercial packages in which Zscaler, Inc. sells its Zero Trust Exchange services. Zscaler’s Pricing and Plans page describes “Simple subscription pricing”, but it publishes entitlements, not prices.[1] The core offer is a per-user platform bundle. The ZIA data sheet states that “All Zscaler Internet Access editions are priced per user”, and adds that some products inside a platform edition may be priced on other units.[2] Around the bundles sit standalone products and Standard, Advanced and Advanced Plus modules. Several modules carry usage limits, such as gigabytes per user per month, applications monitored, systems or endpoints. Under the End User Subscription Agreement, these limits form part of the purchased quantities.[1][8] This article describes the packaging. The counting rules are covered in Zscaler licensing.
Editions
Platform bundles
| Bundle | Part number | Positioning | Private access | Digital experience |
|---|---|---|---|---|
| Essentials Platform | ZS-ESS-PLATFORM | Secure internet access with limited private access[1] | 1 user per 20 subscribed users, minimum 500[2][3] | ZDX Standard[4] |
| Zscaler Platform | ZS-PLATFORM | Complete SASE/SSE: internet access, private access and data security[1] | For all users[1] | ZDX Standard[4] |
| Zscaler Advanced Platform | ZS-ADVANCED-PLATFORM | Adds ZDX Advanced alongside ZIA, ZPA, Zero Trust Browser, Sandbox Advanced, Segmentation and Deception[4] | Included[4] | ZDX Advanced[4] |
Both bundles on the Pricing and Plans page include standard versions of Digital Experience, Data Security (alert only), Sandbox, Firewall, Cyber Isolation and Zero Trust for Workloads, the last at 1 GB per user per month.[1] The ZIA data sheet gives the workload allowance as 1 GB of monthly workload traffic per subscribed user in the Essentials Platform and 2 GB in the Zscaler Platform.[2] Standard Support is included in both, and Support Plus in neither.[2] Catalog proof: Essentials Platform includes ZPA for 1 user per 20 subscribed users, Platform bundles include 1 GB or 2 GB of workload traffic per subscribed user, ZDX Advanced is included with ZS-ADVANCED-PLATFORM; Standard with other bundles.
Standalone products
ZPA, SaaS Security, DSPM, Deception, Unified Vulnerability Management, Zero Trust for Workloads, Zero Trust SD-WAN, ZDX Advanced, ZDX Advanced Plus and Device Segmentation are available as standalone products that do not require a platform bundle.[1] Two standalone ZPA offerings have part numbers: the Zscaler Private Access Platform (ZS-ZPA-PLATFORM) and the ZPA Clientless Platform (ZPA-CLIENTLESS-PLATFORM). Additional guest user licences can be bought under ZPA-CLIENTLESS-PLATFORM.[3] Catalog proof: Several products are sold standalone without a platform bundle, Essentials Platform limited to 10 App Segments; other ZPA options 20.
Add-on modules
The Pricing and Plans page groups add-ons into eight areas and publishes an entitlement for each.[1]
| Area | Module | Published entitlement or sizing |
|---|---|---|
| Inline Cyberthreat Protection | Sandbox Advanced | Sandbox API for 3,000 files per month per customer[1] |
| Inline Cyberthreat Protection | Cyber Browser Isolation Advanced | 1.5 GB per user per month of isolation traffic, upgradeable to unlimited; Standard limited to 100 MB per user[1] |
| Private Access | ZPA for legacy apps | VPN Service Edges by user count, up to 3 at 500 users or more[1] |
| Private Access | ZPA Clientless Platform | Privileged access (RDP/SSH) for up to 10 systems per ZPA tenant[1] |
| Data Security | Browser Isolation (VDI alternative) | 1.5 GB per user per month, measured across all isolation users[1] |
| Security Operations | Deception Advanced | 300 customizable decoys[1] |
| Zero Trust Branch | SD-WAN | Packages by encrypted throughput: Small up to 200 Mbps, Medium up to 400 Mbps, Large up to 1 Gbps, X Large up to 10 Gbps[1] |
| Zero Trust Branch | Device Segmentation | Packages by endpoints: Small up to 200, Medium up to 500, Large up to 1,000, X Large up to 5,000[1] |
| Privileged Remote Access | Standard | Included with platform purchases of more than 500 users; up to 10 systems; up to 1 GB monthly data pooled[1] |
| Privileged Remote Access | Advanced | Subscribed by number of systems; up to 10 GB monthly data per system pooled; cloud recording up to 10 hours per month per system[1] |
| Workload Communications | Standard, Advanced, Advanced Plus | Feature tiers for workload-to-internet and workload segmentation[1] |
ZDX editions
Zscaler Digital Experience is sold in three editions: ZDX Standard, ZDX Advanced and ZDX Advanced Plus.[4] The ZDX data sheet lists ZDX Standard under ZS-ESS-PLATFORM, ZS-PLATFORM and ZS-ZPA-PLATFORM, and ZDX Advanced under ZS-ADVANCED-PLATFORM.[4] The Pricing and Plans page gives the usage limits for each edition.[1]
| ZDX edition | Applications | Poll interval | Alert rules | Data retention |
|---|---|---|---|---|
| Standard | 3 | 15 minutes | 3 | 2 days[1] |
| Advanced | 15 | 5 minutes | 25 | 14 days[1] |
| Advanced Plus | 50 | 5 minutes | 100 | 14 days[1] |
For Real User Monitoring, 5K monitored URLs per user are included with ZDX Advanced Plus. In the comparison table, Zscaler Managed Monitoring is “Available to Purchase” for Standard and Advanced, and ZDX Advanced Plus includes “1 probe per 1k user, 1 location”. Additional probes are sold under a separate SKU.[4]
Metrics
Bundles are sold per Seat.[2] Modules add their own units: Workload traffic in GB per user, System for Privileged Remote Access, and Device packages for Device Segmentation. The definitions are covered in Zscaler workload, branch and consumption metrics.
Counting / floors
ZDX selective entitlement (undated, retrieved 2026-09-26). ZDX is licensed by seats, counted as unique users over the previous rolling 90 days. Customers should deploy ZDX for the number of licences ordered, using selective entitlement, and need not deploy it for every Client Connector user.[5] A customer can therefore buy ZDX Advanced for a subset of users on top of a bundle that includes ZDX Standard for everyone. Catalog proof: ZDX seats counted over 90 days and deployed by selective entitlement.
Bundle minimums (data sheets undated, retrieved 2026-09-26). The Essentials ZPA entitlement requires a minimum of 500 subscribed users.[2] Cloud NSS is listed “for >500 Users”.[2] The ZPA data sheet lists Deception with a minimum of 500 users.[3]
Service credits on bundles (last updated 2026-09-21). For SLA credits on a bundled SKU, the relevant fee is the product’s share of the bundle fee. The SLA document’s example is ZIA’s share of the annual fee.[6] Service Credits do not apply to SaaS provided free as part of a bundled SKU, “e.g., the free standard ZDX included in certain ZIA and ZPA SKUs”.[6] Catalog proof: Service Credits: claim within 24 hours and 10 days, capped at 30 days of fees.
Virtualization & partitioning
Zero Trust Branch packages list deployment options on ZT 400, ZT 600, ZT 800 and ZT 8010 appliances or the ZT VM virtual form factor.[1] Branch packages are sized by encrypted throughput or endpoint count, not by virtual machines.[1]
Cloud / BYOL
All bundles are Zscaler-hosted SaaS, so there is no BYOL. The ZIA data sheet separates access to standard public data centres, access to high-cost public data centres (Zscaler Platform only), and China Premium or regulated Middle East data centre access (neither bundle).[2]
Programs
- Support Services packages (last updated 2026-09-21). Standard Support is included in the fees for the Products, and additional packages cost extra.[6] Initial response targets for P1 cases are 2 hours for Standard, 30 minutes for Essential, and 15 minutes for Support Plus, Premium Support Advanced and Premium Support Advanced Plus.[6] Account engagement offerings are limited to no more than 2 tenants per licensed product.[6] See software maintenance and support for the general concept. Catalog proof: Standard Support included; other support packages cost extra.
- Upgrades (EUSA last updated 2026-08-01). Cloud-wide modifications and new releases count as Upgrades and are included. However, “Upgrades” excludes features that Zscaler offers for an additional cost.[8] Customers also agree that purchases do not depend on future functionality.[8]
- EOS and EOL Policy (effective 2017-08-01). A SaaS product at End-of-Sale can still be renewed, or have users added, until its End-of-Life date.[7] Catalog proof: End-of-Sale notice of 90 days and End-of-Life at least one year later.
Out of scope
- Prices, discounts and multi-year terms. No Zscaler-owned price list was retrieved.
- Historical Business, Transformation and Unlimited editions, and their mapping to current bundles.
- Government bundles and data sheets.
- Feature-by-feature differences within each module, beyond published entitlements.
Catalog rows
Catalog rows for this article, grouped by table.
- SKUs
- Programs
- Rules
- Essentials Platform includes ZPA for 1 user per 20 subscribed users
- Platform bundles include 1 GB or 2 GB of workload traffic per subscribed user
- ZDX Advanced is included with ZS-ADVANCED-PLATFORM; Standard with other bundles
- Several products are sold standalone without a platform bundle
- Essentials Platform limited to 10 App Segments; other ZPA options 20
- ZDX seats counted over 90 days and deployed by selective entitlement
- Service Credits: claim within 24 hours and 10 days, capped at 30 days of fees
- Standard Support included; other support packages cost extra
- End-of-Sale notice of 90 days and End-of-Life at least one year later
- ZIA editions are priced per user