Blog · Tag

ZPA

ZHERO's ZPA Diagnostics Engine showing a search result drilled down into users, domains and domain-port combinations, with an export to Excel button

Your ZPA discovery wildcard is a black box. Here's how to open it.

Every ZPA environment starts with broad discovery wildcards. They are necessary, and they go opaque fast. Here is how to see exactly what is flowing through one, then tighten it.

Jul 23, 2026 · 3 min read From the Trenches

An Excel workbook generated by ZHERO listing Zscaler firewall rules with action, state, labels and a column of real traffic volume per rule, ready to filter and hand off

Investigation & MTTR

The work you'll never do: the mental list every Zscaler admin carries

One tenant had 290 locations and nobody knew which were still live. An export with one extra column showed 180 were ghosts. The work that was too expensive becomes done.

Jul 13, 2026 · 5 min read The Hidden Cost

Ring gauge in ZHERO blue showing a security posture score of 44.53 out of 100 over a dark dashboard, with scattered critical findings and a rising candlestick chart

Posture & Board-Readiness

Your Zscaler tenant now has a score your board can read

A real production tenant scored 44.53/100, Grade F, with 495 active findings its team did not know about. Why posture blindness is normal, and what a readable score changes.

Jul 7, 2026 · 5 min read The Hidden Cost