Zscaler Secures The Enterprise AI Lifecycle With Acquisition of Innovative AI Security Pioneer SPLX

Rhea-AI Summary

Zscaler (NASDAQ: ZS) announced it has acquired AI security pioneer SPLX to extend the Zscaler Zero Trust Exchange platform with shift-left AI asset discovery, automated red teaming, runtime guardrails, prompt hardening, and AI governance.

The integration adds 5,000+ purpose-built attack simulations, discovery across models, workflows, code repositories, RAGs and MCP servers, and aims to secure AI from development through deployment. Zscaler said the move will create a natively integrated layer of AI protection and strengthen its AI security leadership as organizations invest in AI infrastructure projected to exceed $250 billion by end of 2025.

Insights

Security M&A Strategist

Zscaler's acquisition of SPLX meaningfully extends its Zero Trust stack into AI lifecycle security, strengthening platform breadth and go-to-market claims.

Zscaler integrates SPLX capabilities that discover AI assets, run automated red‑teaming, and enforce governance across development and runtime. This adds a dedicated, native layer for AI protection within the Zero Trust Exchange and closes visibility gaps from code and models to deployed agents and MCP servers. The combined offering targets both preventative controls (asset discovery, prompt hardening) and detective/response tooling (5,000+ attack simulations and real‑time remediation).

Key dependencies and risks include successful technical integration of SPLX into the existing cloud platform and retention of SPLX personnel, both noted as material to realizing benefits. Execution on integration, product UX consistency, and go‑to‑market alignment will determine customer adoption speed rather than the announcement itself. Watch integration milestones, retention notices, and product release timelines over the next 6–18 months; also monitor any disclosed integration metrics or customer case studies that demonstrate the stated capabilities and value.

Acquisition extends Zscaler Zero Trust Exchange with shift-left AI asset discovery, automated red teaming and governance, advancing Zscaler’s AI security leadership

SAN JOSE, Calif., Nov. 03, 2025 (GLOBE NEWSWIRE) -- Zscaler, Inc. (NASDAQ: ZS), the leader in cloud security, today announced it has acquired innovative AI security pioneer SPLX, extending the Zscaler Zero Trust Exchange^TM platform with shift-left AI asset discovery, automated red teaming, and governance, so organizations can secure their AI investments from development through deployment.

“Today marks an important step in advancing Zscaler’s role as the trusted partner helping organizations securely adopt AI,” said Jay Chaudhry, CEO, Chairman, and Founder of Zscaler. “AI is creating enormous value, but its full potential can only be realized when it can be secured. By combining SPLX’s technology with the intelligence of the Zscaler Zero Trust Exchange and its native data protection that classifies, governs, and prevents loss of sensitive data across prompts, models, and outputs, Zscaler will secure the entire AI lifecycle on one platform. This will strengthen our industry leadership and give customers the confidence to safely embrace AI.”

As AI drives record infrastructure investments projected to exceed $250 billion by end of 2025¹, organizations face a rapidly expanding attack surface and shadow AI sprawl. Continuously evolving models, agents, and large language models (LLMs) require ongoing discovery, risk assessment, and remediation, while AI agents and Model Context Protocol (MCP) servers demand strict guardrails and new techniques to secure data and AI assets across the lifecycle.

SPLX’s innovative technology and deep expertise in AI red teaming, asset management, threat inspection, prompt hardening and governance will expand Zscaler’s current capabilities, creating a new, dedicated and natively integrated layer of AI protection within the Zscaler Zero Trust Exchange platform, that includes:

• AI Asset Discovery and Risk Assessment: Discovery extends beyond public generative AI applications and public clouds to include AI models, workflows, code repositories and RAGs and MCP servers in both public and private deployments.
  
  
• Automated AI Red Teaming and Remediation: From development to production, with 5,000+ purpose-built and domain specific attack simulations to find risks and vulnerabilities, and offer remediation in real time.
  
  
• AI Runtime Guardrails and Prompt Hardening: Expands Zscaler’s current AI Runtime Guardrails that protect sensitive data and block malicious attacks between AI apps and LLMs, as well as agentic workflows, to include deep visibility within development environments and automate Guardrails for risky AI assets.
  
  
• AI Governance and Compliance: Risk mitigation and support for organizations to shift from reactive defense to proactive protection for their valuable AI investments, and comply with governance frameworks.

“Zscaler and SPLX share a vision to confront the vast new attack surface created by rapidly expanding AI infrastructure investments,” said Kristian Kamber, CEO and co-founder of SPLX. “By joining forces, we’ll bring our innovation to one of the most trusted security platforms in the world, securing AI innovation at the speed organizations are adopting it.”

Source: 1) Goldman Sachs, “Technology in 2025: The Cycle Rolls On” February 2, 2025

Follow Zscaler on LinkedIn, Instagram, and X.

Forward-Looking Statements
This press release contains forward-looking statements that are based on our management's beliefs and assumptions and on information currently available to our management. These forward-looking statements include the expected benefits of the proposed acquisition to Zscaler and its customers and plans regarding SPLX’s capabilities. These forward-looking statements are subject to the safe harbor provisions created by the Private Securities Litigation Reform Act of 1995. A significant number of factors could cause actual results to differ materially from statements made in this press release, including those factors related to Zscaler’s ability to successfully integrate SPLX technology into our cloud platform, the potential impact of the acquisition to the existing SPLX business and the retention of SPLX employees. Additional risks and uncertainties are set forth in our most recent Annual Report on Form 10-K filed with the Securities and Exchange Commission (“SEC”) on September 11, 2025, which is available on our website at ir.zscaler.com and on the SEC's website at www.sec.gov. Any forward-looking statements in this release are based on the limited information currently available to Zscaler as of the date hereof, which is subject to change, and Zscaler will not necessarily update the information, even if new information becomes available in the future.

About Zscaler
Zscaler (NASDAQ: ZS) accelerates digital transformation so customers can be more agile, efficient, resilient, and secure. The AI-powered Zscaler Zero Trust Exchange™ platform protects thousands of customers from cyberattacks and data loss by securely connecting users, devices, and applications in any location. Distributed across more than 160 data centers globally, the SASE-based Zero Trust Exchange is the world’s largest in-line cloud security platform.

Media Contact
Taylor Dunton, Senior Director, Global Public Relations, press@zscaler.com

A photo accompanying this announcement is available at https://www.globenewswire.com/NewsRoom/AttachmentNg/231c4e82-96d9-4e2e-9120-68f51ec9eaa3

FAQ

What did Zscaler (ZS) announce on November 3, 2025 regarding SPLX?

Zscaler announced it acquired SPLX to add AI asset discovery, automated red teaming, runtime guardrails, and governance to its Zero Trust Exchange platform.

How many attack simulations does SPLX bring to Zscaler (ZS)?

SPLX brings over 5,000 purpose-built and domain-specific attack simulations for automated AI red teaming and remediation.

Which AI assets will Zscaler (ZS) be able to discover after the SPLX acquisition?

Discovery extends to AI models, workflows, code repositories, RAGs, and MCP servers in both public and private deployments.

How does the SPLX acquisition affect Zscaler's AI runtime protection for ZS customers?

It expands AI Runtime Guardrails and prompt hardening to include deeper visibility in development environments and automated guardrails for risky AI assets.

What governance or compliance capabilities did Zscaler (ZS) say the acquisition adds?

Zscaler said the acquisition adds AI governance and compliance features to shift organizations from reactive defense to proactive protection of AI investments.

Does the announcement state any transaction value or closing date for Zscaler's (ZS) acquisition of SPLX?

No; the announcement does not disclose a transaction value or a closing date.