JOINT SOLUTION BRIEF

Continuously Measure &Optimize Your Hybrid,
Multi-Cloud Security Posture
Empower your security team against constantly evolving networkand cloud threats with a joint solution that combines continuous
security validation—powered by the SafeBreach breach and attack
simulation (BAS) platform—with Zscaler Internet Access™ (ZIA).

SAFEBREACH.COM

Security operations teams are finding it increasingly difficult tomaintain a hardened posture against evolving network and cloudthreats. Threat actors continually adapt their methods to evade
traditional perimeter security solutions, and the rapid adoptionof cloud platforms and SaaS tools has dramatically expanded
the attack surface. One small control misconfiguration cancreate a security gap that attackers can easily exploit.
The SafeBreach and Zscaler joint solution helps security organizations combat thesechallenges by effectively validating and optimizing their deployed network and cloudsecurity controls. The offering combines continuous security validation—powered by
the SafeBreach breach and attack simulation (BAS) platform—with Zscaler Internet
Access™ (ZIA), a comprehensive suite of AI-powered security and data protection
services designed to stop cyberattacks and data loss. Together, SafeBreach and ZIA
empower security teams to proactively test their defenses to prevent network andcloud attacks that use malicious domains, URLs, connections with malicious servers
and blacklisted IP addresses.

F O R M O R E I N F O R M AT I O N O R T O R E Q U E S T A D E M O , V I S I T : S A F E B R E A C H . C O M

JOINT SOLUTION BRIEF: SAFEBREACH + ZSCALER

Simulate
Attack Methods

Ingest Detection &Prevention Events

AutomaticallyCorrelate Events

VA L I D AT EPERFORMANCEOF ZIA AGAINSTT H R E AT

SafeBreachPlatform

How the Integration Works
SafeBreach safely executes various web attacks that trigger ZIA’s detection andprevention capabilities to validate that potential attacks are visible and appropriate
alerts are configured. ZIA security events and alerts are forwarded to a SIEM andcontinuously fetched and correlated by SafeBreach to provide visibility per simulated
attack. This allows SafeBreach to accurately determine if ZIA was able to detect orprevent network/cloud threats or if the threat was missed. This additional context(including results of simulated attacks and associated remediation information) isavailable to security analysts via SafeBreach Insights to appropriately update ZIA todetect and prevent such attacks in the future.

Benefits of the Integration –Together SafeBreach & Zscaler Internet Access:Provides unparalleledvisibility into network andcloud readiness andenterprise security posture

Enables continuous
improvement of alerting
accuracy and prevents drift
in detection rules

Optimizes prevention anddetection abilities of ZIA
against advanced cloudand network threats

Automatically correlates
simulation results and SIEM
event logs to simplify andexpedite threat investigation,analysis, and remediation.

F O R M O R E I N F O R M AT I O N O R T O R E Q U E S T A D E M O , V I S I T : S A F E B R E A C H . C O M

JOINT SOLUTION BRIEF: SAFEBREACH + ZSCALERUSE CASE 1

Validate Internet & Cloud-Access
Configurations & Policies
Challenge
Security teams have traditionally focused on securing network gateways against
advanced threats. However, as traffic patterns shifted to the internet and applications
moved to the cloud, user traffic began bypassing traditional network gateways andgoing straight to the cloud. This led to the addition of several new security controls,
increasing the chances of security control misconfiguration that can create exploitablesecurity gaps.

Solution
SafeBreach validates the security posture by executing attacks from known threat
groups, safely and continuously, to bring visibility into which network and cloud controls
prevented an attack and which attacks sailed past them. The dedicated SafeBreachLabs team monitors the threat landscape 24/7 to ensure the SafeBreach Hacker’s
Playbook includes coverage for the latest indications of compromise (IOCs) and tactics,techniques, and procedures (TTPs). The integration with Zscaler tests advanced attacks
against ZIA to validate which threats and associated IOCs were blocked. In the case of
any IOCs and threats being missed, SafeBreach Insights provides security teams with
raw IOC data that can be used to optimize Zscaler threat detection.

F O R M O R E I N F O R M AT I O N O R T O R E Q U E S T A D E M O , V I S I T : S A F E B R E A C H . C O M

JOINT SOLUTION BRIEF: SAFEBREACH + ZSCALERUSE CASE 2

Improve Efficacy of Security Operations
Against Network & Cloud Threats
Challenge
Security teams analyze and process network and cloud alerts collected in a security
information and event management (SIEM) system. This data is often correlatedusing user-defined rules to discover trends, detect threats, and investigate alerts
across network and cloud deployments. However, data reported back to the SIEM by
misconfigured security controls may not accurately indicate the severity of the network/
cloud threat or provide enough contextual information to make accurate remedialdecisions. This can lead to incorrect correlation of threat data, reducing the efficacy ofthe security operations center (SOC) team, causing them to miss critical threats anddelay remedial threat response.

Solution
SafeBreach continually validates ZIA to ensure its efficacy against evolving cloud andnetwork threats. Insights from this validation can be correlated with corresponding SIEM
alerts/events to ensure they are accurate tracking in your SIEM, thereby measuring
the efficacy of your Zscaler security control. SafeBreach Insights also provide security
teams with the necessary contextual data required to build new alerts for previously
missed network/cloud threats, thereby improving the detection accuracy of ZIA while
reducing the mean time to detect and respond.

F O R M O R E I N F O R M AT I O N O R T O R E Q U E S T A D E M O , V I S I T : S A F E B R E A C H . C O MAbout SafeBreach

About Zscaler

Combining the mindset of a CISO and thetoolset of a hacker, SafeBreach is the pioneer
in breach and attack simulation (BAS) and is
the most widely used continuous security
validation platform. SafeBreach continuously
executes attacks, correlates results to
help visualize security gaps, and leverages
contextual insights to highlight remediation
efforts. With its Hacker’s Playbook™, theindustry’s most extensive collection of attack
data enabled by state-of-the-art threat
intelligence research, SafeBreach empowers
organizations to get proactive about security
with a simple approach that replaces hopewith data.

Zscaler (NASDAQ: ZS) accelerates digitaltrans-formation so customers can be moreagile, efficient, resilient, and secure. The
Zscaler Zero Trust Exchange protects
thousands of customers from cyberattacks
and data loss by securely connecting users,devices, and applications in any location.
Distributed across more than 150 data
centers globally, the SSE-based Zero Trust
Exchange is the world’s largest in-line cloudsecurity platform.

All content ©SafeBreach 2022.
All rights reserved.