Platform
Critical Capabilities
- Security, Authorization & Access Controls
  Provides CASB, Malware Defense and DLP Across All Users, Devices & Resources
  - Secure Access Service Edge
    The most advanced SASE and Zero Trust platform that allows users to work from anywhere with fast and secure connections to all applications
  - Adaptive Access Policies
    Provides Continuous Conditional Access to Apps, Data & Services
  - Criteria-Based Access Policies
    Provides Role-Based Access to Sensitive Apps & Data
  - ChatGPT Risk Module
    Monitors and Secures User ChatGPT Conversations
  - Malware Defense
    Prevents Ransomware & Device Infections
  - Data Loss Prevention
    Ensures Sensitive Information is not Lost
  - RBI and Browser Isolation
    Provides Contractors, 3rd Parties & BYOD Secure Access to Resources
  - Device Posture Checks
    Including Anti-malware, Firewall & Disk Encryption for Compliance
  - SSL Decryption
    Ensures Policies & Protection Apply to Encrypted Content
  - Secure Mobile Users
    Automatically & Transparently Secure All Traffic From Devices In & Out of the Office
  - Outbound Firewall Protection
    Extends Beyond the Physical Network Perimeter
  - DNS Security
    Quickly Secures BYOD Networks with Simple Configuration
- Application & Data Discovery
  Clearly Understand What Needs Protection
  - CASB
    Provides In-App Controls for Granular Access Decisions
  - Built-in Resource Catalog
    Enables Classification of Protected Apps and Services
  - Asset & Device Catalog
    Ensures Devices are Healthy, Compliant & Secure
  - Resource Labeling by Type & Security Objective
    Enables Risk Assessments and Understanding Business Impact of Sensitive Resources
  - Automatic Resource Discovery & Classification
    Reduces Overhead on Security Teams and Identifies Shadow IT
- Federated Identity Provider Integration
  Eliminates Unauthorized Users and Provides Role-Based Access Policies
  - SSO Identity Providers
    Integrates with Identity Providers Including Azure AD, Okta, Ping, SAML, OIDC
  - Step-Up Authentication
    Ensures the Right Level of Identity Confidence When Accessing Sensitive Resources
  - Group-Based Policies
    Leverage Okta, Azure AD and SAML Providers to Simplify Creation & Management of Security Policies
  - SSO for Legacy Apps
    Ensures Modern Authentication is Performed Even When Apps Do Not Support It
  - Supports Multiple Concurrent Identity Providers
    Authenticate Users Across Multiple Domains
- Alerting, Auditing, Logging & Reporting
  Provides In-Depth Detailed Visibility For Security Teams Across All Users, Devices & Transactions
  - Detailed Logging and Reporting
    Provides Visibility for Every Resource Transaction
  - Risk & Threat Reports
    List Infected Devices & High Risk Users
  - Digital Experience Management
    Provides Insights Into End-user Experience While Leveraging Business-critical SaaS Applications
  - Next-Gen Incident Dashboard
    Monitor and Instantly Address Security Threats
  - ChatGPT Risk Module
    Controlled Use of ChatGPT With Security and Monitoring
  - SIEM Integration
    Ensures Logs Are Copied to External Databases
  - Splunk Enterprise Security Add-On
    Automatically Populate Your Splunk Dashboards With Valuable Data
  - Integrates with Your Security Stack
    Including ICAP, Proxy Chaining and Log Forwarding
- Cloud Security & Connectivity
  Easily Protect Apps & Data Across SaaS, Cloud & Datacenters
  - iboss Zero Trust SD-WAN
    Streamline Connectivity & Security with iboss Zero Trust SD-WAN
  - Azure Cloud Security Gateways
    Extend the Security Edge Natively, Ensuring Robust Protection While Reducing Backhauling Costs
  - iboss ZTNA VPN Co-Pilot
    Provides a Transparent and Seamless Transition From VPN to ZTNA
  - Connect Organization Owned Devices
    Provides Access & Ensures Compliance Checks
  - Connect SaaS Apps
    Including O365 & Teams to Offload Overloaded On-Prem Proxies
  - Connect Cloud Providers
    Including AWS & Azure to Protect Multi-Cloud Resources
  - Connect On-Prem Resources
    Within Datacenters with Drop-In Proxy Replacements Eliminating High Renewal Costs
  - Terminal Server Protection
    With Unique Policies & Logging for Each User
  - IPsec & GRE Tunnels
    Provides Branch Office Local Internet Breakouts to Cloud Security
  - Private On-Prem Gateways
    Extends the Security Service Edge into the Datacenter to Protect Local Resources
  - Offload MPLS
    MPLS & SD-WAN Become More Efficient with Cloud Security
  - Dedicated Cloud IPs
    Enable Resource Anchoring to Ensure Proper Authorization & Third-Party Integration
Industry
- Mitie Switches to iboss For Fast and Secure Connections
  Mitie, a Global Provider of Smart Spaces, successfully migrates 8,500 devices from Zscaler to iboss in under 3 weeks.
  View Case study
- Business
  - Private Access VPN Replacement
    Replace VPN with Zero Trust Network Access allowing users to connect to private applications from anywhere
  - Cloud-Based Branch Office Web Security
    Eliminate data backhaul to on-prem appliances from remote offices
  - Microsoft 365 Features & Integration
    Native Microsoft integrations including Office 365, Microsoft Cloud App Security CASB and Azure
  - Stream Cloud Logs to Any External SIEM
    Gain visibility into web activity by streaming real-time log events directly from iboss cloud to your existing logging database or SIEM
  - Ensure GDPR Compliance
    The iboss cloud allows admin configurable zones to ensure cloud security is applied while meeting regulatory requirements
- Healthcare
  - For Healthcare
    Fast and Secure Connectivity from Anywhere, Designed for Healthcare
  - Secure Access Service Edge
    The most advanced SASE and Zero Trust platform that allows users to work from anywhere with fast and secure connections to all cloud applications
  - Private Access VPN Replacement
    Replace VPN with Zero Trust Network Access allowing users to connect to private applications from anywhere
  - Microsoft 365 Features & Integration
    Native Microsoft integrations including Office 365, Microsoft Cloud App Security CASB and Azure
  - Stream Cloud Logs to External SIEM
    Gain visibility into web activity by streaming real-time log events directly from iboss cloud to your existing logging database or SIEM
  - Integrates with your existing security stack
    Easily integrate iboss cloud with your existing workflows using a 100% open API
  - Terminal Server Protection in the Cloud
    User based policies and reporting for Windows Terminal Servers
  - Make MPLS and SD-WAN More Efficient with Cloud Security
    Send internet traffic directly to the cloud from branch offices to alleviate this load from private site-to-site connections
  - Data Loss Prevention
    Secure sensitive data with data loss prevention
- Finance
  - For Finance
    Fast and Secure Connectivity from Anywhere, Designed for Financial Institutions
  - Secure Access Service Edge
    The most advanced SASE and Zero Trust platform that allows users to work from anywhere with fast and secure connections to all cloud applications
  - Private Access VPN Replacement
    Replace VPN with Zero Trust Network Access allowing users to connect to private applications from anywhere
  - Microsoft 365 Features & Integration
    Native Microsoft integrations including Office 365, Microsoft Cloud App Security CASB and Azure
  - Stream Cloud Logs to External SIEM
    Gain visibility into web activity by streaming real-time log events directly from iboss cloud to your existing logging database or SIEM
  - Integrates with your existing security stack
    Easily integrate iboss cloud with your existing workflows using a 100% open API
  - Terminal Server Protection in the Cloud
    User based policies and reporting for Windows Terminal Servers
  - Make MPLS and SD-WAN More Efficient with Cloud Security
    Send internet traffic directly to the cloud from branch offices to alleviate this load from private site-to-site connections
  - Data Loss Prevention
    Secure sensitive data with data loss prevention
- Education
  - Student Risk Module Identifies Threats
    Safeguard Student Risk to monitor signs of cheating, suicide, drug use, bullying, violence, and mass shootings, to protect students & schools
  - Web Filtering for CIPA Compliance
    Streamline web filtering and CIPA compliance for students whether on campus or at home
  - Granular Student Web Activity Reports
    Generate detailed web activity history reports for any student which includes on-campus at home Internet use
  - YouTube and Social Media Controls
    Safe access to Google, YouTube and social media including Safe Search enforcement
  - Automatic Safe Search Enforcement
    Enforce Safe Search across search engines including Google, Bing, Yahoo and YouTube
  - Create Teacher and Student Based Policies
    Flexible filtering polices for teachers vs. students across any device on or off network
  - Cloud Web Security for One to One Initiatives
    Easily take home devices in the cloud to ensure CIPA compliance at all times
  - Ensure Fast Connections During State Testing
    Achieve seamless and uninterrupted state testing
  - iboss Classroom Management
    Visually monitor the activities of all of your students, from any location
  - iboss Parent Portal
    Empower Parents and Protect Students with the iboss Parent Portal
- Government
  - For Government
    Fast and Secure Connectivity from Anywhere, Designed for Government
  - Secure Access Service Edge
    The most advanced SASE and Zero Trust platform that allows users to work from anywhere with fast and secure connections to all cloud applications
  - Complete Data Isolation & Extensible Platform for Government Entities
    The best choice for government entities for fast and secure connections for users from anywhere with a SASE platform that completely isolates network data traffic
  - Private Access VPN Replacement
    Replace VPN with Zero Trust Network Access allowing users to connect to private applications from anywhere
  - Microsoft 365 Features & Integration
    Native Microsoft integrations including Office 365, Microsoft Cloud App Security CASB and Azure
  - Stream Cloud Logs to External SIEM
    Gain visibility into web activity by streaming real-time log events directly from iboss cloud to your existing logging database or SIEM
  - Integrates with your existing security stack
    Easily integrate iboss cloud with your existing workflows using a 100% open API
  - Terminal Server Protection in the Cloud
    User based policies and reporting for Windows Terminal Servers
  - Data Loss Prevention
    Secure sensitive data with data loss prevention
Resources
- Award Winning Cloud Security Platform
  The iboss Zero Trust Secure Access Service Edge is consistently recognized as an industry leader in cloud security. Our patented containerized cloud architecture ensures secure, fast and reliable connectivity to cloud applications from any device, from any location.
  View Awards & Recognition
- anchor
  - Cloud Data Centers
    View Global Cloud Points of Presence that deliver the iboss Zero Trust SASE
  - Cloud Status
    View real time status of the global Zero Trust Security Service Edge
  - News
    See iboss in the latest news
  - Blog
    Latest insights on Zero Trust Security Topics
  - Events
    Join us for upcoming events
  - Solution Briefs
    Detailed solution briefs covering iboss Zero Trust Security Use Cases
  - Reviews
    Recognized by industry experts as the leading Zero Trust Security Platform
  - Case Studies
    Learn how the iboss platform has been leveraged by leading organizations around the world
  - Cloud Compliance
    The iboss global cloud fabric meets industry standards and certifications, including SOC1, SOC2 and ISO compliance
  - Patents
    The iboss platform is protected by over 250 issued and pending patents
  - Demo Videos
    View videos and demos of the iboss Zero Trust Platform
  - Awards
    The most award winning Zero Trust Security Service Edge
  - Careers
    Join the iboss team
Partners
Get Demo
Get Pricing

iboss Zero Trust SASE Packaging

Solution Packages to support your Journey to a Zero Trust Architecture

Simple per User Subscription Pricing

Zero Trust Core

Essential Features to Implement Zero Trust Resource Access

Zero Trust Advanced

Zero Trust Core plus Integration and Malware Protection for enterprises at scale

Zero Trust Complete

Zero Trust Advanced plus Complete Data Loss Prevention

Expand all

Zero Trust Core

Buy now

Zero Trust Advanced

Buy now

Zero Trust Complete

Buy now
Unified Zero Trust Service Edge
Zero Trust Resource Access Policies
Resource Catalog - including Apps, Data and Services
User Catalog
Asset Catalog
Resource Tagging by Type and Location
Resource Risk Level Classification
User and Group Based Access Policies via Cloud Connectors
Zero Trust Reporting - By Resource Type, Resource Location, Security Objective and Security Impact Level
Zero Trust NIST 800-207 Criteria-Based Access Policies
Connect Cloud Accessible Resources to Zero Trust SSE
Encrypted Traffic Inspection and Protection (HTTPS Decrypt)
Cloud Security Controls - including Web Filtering
Policy Tracing for troubleshooting policies
Proxy Combinatorial Rules & Actions - Block, Allow, Redirect
Reporting - including Real-Time Dashboards, Drill Down Reports, Reporting Templates
Cloud Connector Agents for Windows, Mac, iOS, Chromebooks, Linux and Android
DNS Security
SAML & OIDC Identity Provider (IdP) Integration
Extend Modern Authentication (SAML/OIDC) to Legacy Apps & Resources
Zero Trust NIST 800-207 Score-Based Access Policies

Add-on
Connect Resources on Private Networks (via Tunnels, SD-WAN, WCCP) to Zero Trust SSE

Add-on
Asset and Device Posture Checks

Add-on
Zero Trust Scoring Algorithms

Add-on
Zero Trust Score-Based Reporting

Add-on
Threat Dashboards - including preventing malware, phishing, malicious sources

Add-on
User and Asset Incident Dashboards - including infected devices and users with active incidents

Add-on
Malware Prevention

Add-on
Infected Device Detection and Isolation (CnC Callback Prevention)

Add-on
Phishing Prevention

Add-on
Prevent Malicious Sources

Add-on
Malware Sandboxing

Add-on
Microsoft Cloud App Security Integration (MCAS)

Add-on
Microsoft Authentication Context (Conditional Access) Integration

Add-on
Microsoft Sentinel Log Forwarding Integration

Add-on
Splunk Log Forwarding Integration

Add-on
Log Forwarding to SIEM - Syslog, SCP, SFTP

Add-on
Realtime Inline CASB

Add-on
Simplified Tunnel Management (Network Connector)
Inline Data Loss Prevention (PII, CCN)

Add-on

Add-on
Out-of-Band API CASB

Add-on

Add-on
Intrusion Prevention (IPS)

Add-on

Add-on
ChatGPT Risk Module

Add-on

Add-on

Add-on
Azure Cloud Security Gateways

Add-on

Add-on

Add-on
Reverse Proxy

Add-on

Add-on

Add-on
Digital Experience Management

Add-on

Add-on

Add-on
Exact Data Match DLP

Add-on

Add-on

Add-on
Browser Isolation

Add-on

Add-on

Add-on
Zero Trust SD-WAN

Add-on

Add-on
Enhanced Protective DNS

Add-on

Add-on
Endpoint EDR Integrations

Add-on

Add-on
Splunk Enterprise Security

Add-on

Add-on
Image Text Recognition (OCR)

Add-on

iboss Zero Trust SASE Packaging

Solution Packages to support your Journey to a Zero Trust Architecture

Simple per User Subscription Pricing

Zero Trust Core

Zero Trust Advanced

Zero Trust Complete

Experience the Power of Zero Trust SASE: Replace Your Legacy VPN, Proxy Appliances, and SD-WAN with iboss

Experience the Power of Zero Trust SASE:
Replace Your Legacy VPN, Proxy Appliances, and SD-WAN with iboss