What's New in ZDX: Broader Reach, Smarter Remediation

ZDX is the experience layer of the Zscaler SASE platform. It shares the same client connector, the same data plane, and the same global infrastructure that powers ZIA and ZPA. That means every improvement to digital experience monitoring simultaneously strengthens the security and networking fabric customers already rely on.

This summer, based on what we're hearing from customers operating large-scale SASE deployments, we shipped two capabilities that make the platform even more valuable for customers. Here's what landed and why it matters.

Remediation Scripts: Now Available for ZDX Standard and Advanced

When dev tools don't pick up the ZIA root certificate from their expected path, developers hit SSL errors that block their workflow entirely. The common workaround today is to bypass those dev tools from ZIA SSL inspection. That gets developers back to work, but it punches a hole in the zero trust architecture. Traffic that should be inspected flows uninspected. The security posture the SASE platform is designed to enforce gets undermined at the endpoint level.

Customers told us this was one of their most persistent friction points: a recurring tension between developer productivity and maintaining zero trust coverage. They needed a way to fix the root cause, not route around it.

Pre-written, ready-to-use scripts that resolve the root cert path issue and restore zero trust posture

We've introduced 20 pre-written remediation scripts available to ZDX Standard and Advanced customers and will continue to add more. These scripts fix the ZIA root certificate path configuration in dev tools so they work properly through ZIA SSL interception, eliminating the need to bypass.

The result: developers stay productive and traffic stays inspected. Zero trust stays intact.

Because remediation runs through Zscaler Client Connector (the same agent already deployed for ZIA and ZPA), there's no additional deployment, no second agent, and no separate tool. IT identifies the issue in ZDX, runs the fix from the console, and the endpoint is back in compliance with the SASE policy.

Here's how the remediation capabilities break down by tier:

For decision-makers, this is a signal of where ZDX is headed: not just visibility into experience issues, but the ability to resolve them in a way that reinforces the security architecture rather than working against it.

19 Global Vantage Points for Synthetic Monitoring (Up from 6)

Synthetic monitoring tells you whether applications and network paths are healthy before users report problems. But that signal is only representative if probes originate close to where users actually work. As our customer base expanded into more regions with hybrid and remote workforces, we heard a consistent request: monitoring that reflects the geographies where their people sit, not just the geographies where our original probe infrastructure happened to be.

When probes originate far from the user population, latency baselines skew, regional ISP issues take longer to surface, and the data becomes less useful for root-cause isolation or SLA reporting.

13 new cities across Americas, EMEA, and APAC

We've expanded from 6 to 19 data centers for synthetic monitoring, adding 13 locations in major global cities:

• Americas: New York, Los Angeles, Dallas, Atlanta 
• EMEA: London, Paris 
• APAC: Mumbai, Delhi, Chennai, Singapore, Tokyo, Osaka, Sydney

These locations align with Zscaler's existing global data center footprint, which means synthetic probe data and real-user telemetry flowing through the SASE platform can be correlated in the same infrastructure. Synthetic baselines and live traffic data reinforce each other.

Performance baselines that reflect real geography, and SLA confidence to match

What this unlocks in practice:

• Representative performance baselines per region and office, derived from probes that originate locally rather than extrapolated from distant locations
• Faster root-cause isolation because hop-by-hop tracing starts closer to where the issue lives
• Monitoring that matches how global and hybrid workforces actually operate
• SLA and experience reporting to leadership backed by geographically accurate data

For practitioners, your synthetic test results now reflect what users in those cities actually experience. For leadership, the reports you present are grounded in local measurement, not inference.

What's Next

Both of these capabilities reinforce the same principle: the experience layer of a SASE platform should make the entire architecture more operationally complete. Remediation that restores zero trust posture. Monitoring that matches the global footprint the platform already serves.

As ZDX continues to evolve, every capability we ship is designed to strengthen the Zscaler platform, not just the monitoring console. Better detection, broader coverage, and faster resolution reduce operational friction across the entire SASE deployment.

Want to see these in action? Schedule a personalized ZDX demo or explore the latest at zscaler.com/zdx