Zscaler unveils post-quantum inspection and agentic AI controls across ZIA and ZPA

Zscaler has announced a set of architectural additions to its Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) platforms at its ZenithLive 2026 event, aimed at inline inspection of modern and post-quantum traffic.

On the ZIA side the company detailed post-quantum cryptography visibility and analytics, available now, plus TLS inspection with hybrid ML-KEM/DH key exchange in beta and IPsec with post-quantum pre-shared keys due early next year. It also added deep inspection of WebSockets, QUIC and HTTP/3, an AI Instant Verdict file-scoring engine trained on more than 600 million samples, and controls for agentic AI workflows including rogue MCP server blocking and skill file sandbox detonation.

For ZPA, Zscaler introduced Autonomous Application Shield for pipeline-speed virtual patching, now in early access, and Autonomous User-to-App Segmentation, which is generally available and uses machine learning to discover internal applications and generate least-privilege policies. B2B Federation and a Zero Trust Browser Extension for unmanaged endpoints are also available now.