Stop Unknown Attacks in Seconds with Cloud Sandbox

Defend against unknown file-based threats with the industry’s first AI-powered, inline sandbox.

Overview
The Problem
Solution Overview
Independent Validation
Benefits
Solution Details
Use Cases
Our Platform
Customer Success Stories
Resources
Request a Demo

Block emerging threats at scale without slowing down

Prevent unknown threats in seconds, even in encrypted files, with no burden on endpoints or next-gen firewall hooks. Rated AAA by CyberRatings.org, our inline solution blocked 100% of evasions and prevented 98.05% of exploits.

The Problem

Traditional security solutions don’t stop advanced threats

Traditional defenses like legacy firewalls and endpoint solutions let malicious files reach users and endpoints before analysis is complete, and most struggle to handle encrypted traffic. Since nearly all of today's traffic is encrypted, these blind spots make them ineffective against modern threats like ransomware.

1O.3%

YoY increase in threats over HTTPS in the Zscaler cloud

87.2%

of threats are now delivered over encrypted channels

86.5%

of encrypted attacks involve malware, including ransomware

Read the 2024 Encrypted Attacks Report

Solution Overview

Don’t let zero day threats slip through unchecked

Zscaler Cloud Sandbox delivers unlimited, latency-free inspection to block threats before they reach your endpoints. Cloud native and fully inline, it provides real-time analysis and verdicts to prevent threats from spreading—without ever compromising productivity.

Independent Validation

Proven, industry-leading, best-of-breed security

Our platform was awarded AAA, the highest rating, in independent testing by CyberRatings.org. This test included the inline and threat detection capabilities of our Cloud Sandbox, demonstrating how we deliver unmatched protection from advanced threats.

1OO%

evasions blocked

98.5%

exploits blocked

99.93%

wild malware blocked

98%

overall security efficacy

Benefits

Advanced threat protection with productivity built in

Prevent zero day infections in seconds

Stop unknown threats with inline malware and advanced threat detection, including AI-driven instant verdicts.

Bolster security and preserve productivity

Automatically detect and quarantine threats, and integrate with Zero Trust Browser to keep users productive during file scans.

Optimize SOC workflows

Seamlessly integrate malware protection into SOC workflows with out-of-band file analysis, third-party threat detection tools, and fully patched VMs for threat investigation.

Deploy easily, scale globally

Eliminate management overhead—simply configure policies for immediate value, driving strong ROI that lets you focus on strategic growth.

Solution Details

Comprehensive malware protection with seamless productivity and scalability

Layered malware detection

Stop malware and advanced threats with unlimited, latency-free TLS/SSL inspection. Get low-latency, high-performance protection with our Single Scan, Multi-Action engine.

AI-powered security

Get instant, high-confidence verdicts from enhanced AI/ML models trained on 600M+ samples. Fight AI-enabled phishing with inline AI/ML PhishCatch.

Static and dynamic analysis

Use static and dynamic analysis to inspect code structure at rest, detonate files, and analyze secondary samples. Update cloud databases instantly when malicious files are detected.

Zero Trust Browser integration

Allow users to securely interact with original files during sandbox analysis, ensuring productivity. Files flagged as malicious can be flattened into PDFs or disarmed to remove harmful content.

API-driven analysis

Send out-of-band files directly to the sandbox via API integration, streamlining investigations. Access Cloud Sandbox analysis data via API, ingest into SIEM/SOAR, or share with EDR solutions, enabling actionable insights and seamless SOC workflows.

Granular policy control and reporting

Tailor sandbox policies to user roles, locations, and categories. Get contextual, in depth, and pre-configured reporting, including MITRE ATT&CK mapping, to meet compliance and audit requirements.

Key Use Cases

Protect against emerging threats with ease

defend-against-ransomware-and-aother-malware

Stop file-based ransomware and malware to support a stronger security posture.

Accelerate investigation and response with threat intelligence, malware insights, and advanced reporting, all powered by the world’s largest security cloud.

enable-out-of-band-api-analysis-for-malware-inspection

Detect and mitigate hidden threats with out-of-band API analysis, helping streamline analysis of third-party files, integration of acquired entities, and more.

Our Platform