Solution Brief

AttackIQ and Zscaler
The AttackIQ's Security Optimization
Platform and Zscaler ZIA Integration

Joint Solution Brief | 1

Solution Brief | AttackIQ and ZscalerContinuously Validate
Your Security Efficacy
Ensuring a security stack is configured correctly can be challenging. Traditional security
stacks leveraging different point solutions creates complexity and potential gaps. Zscaler's
Zero Trust Exchange delivers a complete security stack through a Secure Services Edge
(SSE) architecture, delivered as a service from the cloud.
The AttackIQ Platform integrates with Zscaler by continuously examining activity logs to
conduct ongoing assessments, confirm, and provide feedback on security effectiveness.
It safely conducts simulations of attacks, including advanced threats and data exfiltration,and evaluates them against Zscaler's detection and prevention capabilities.

Continuously Validate Your Security Efficacy | 2

Solution Brief | AttackIQ and Zscaler

Integration Benefits

How It Works•

Validate the effectiveness of ZIA policies
by simulating real-world attack scenarios.
Ensure that your ZIA deployment isconfigured to provide maximum security
while minimizing false positives.

To validate your existing Zscaler ZIA setup, follow
these simple steps:•The integration of Zscaler ZIA with AttackIQ
helps identify which attacks are detected,prevented, or missed on the endpoint.

2. Install the AttackIQ integration manager andconfigure the SIEM integration to validate
Zscaler ZIA logs.

•Validate defenses against real-world threatsaligned to MITRE ATT&CK, informed by
AttackIQ’s founding research partnershipwith the Center for Threat-Informed
Defense3. Create emulations of the threats you wish toevaluate your defense systems against.

•Generate significant savings across theorganization by improving your technology
and team performance.

1.

Install the AttackIQ agent on an endpoint
protected by Zscaler ZIA.

4. Analyze the insights about the level ofprotection and detection provided byZscaler ZIA.
5. Mitigate the critical gaps based on thefindings.

Key Use Cases
Continuous Security Validation for Zscaler ZIA Policies

The AttackIQ Platform empowers organizations to assess and evaluate the effectiveness of their Zscaler ZIA
policies in safeguarding against the most recent threats. When vulnerabilities or deficiencies are detected, theplatform assists in quantifying their consequences and refining current toolsets to mitigate them.

MITRE ATT&CK Threat Emulation and Detection Engineering

AttackIQ’s Platform improves detection capabilities and makes detection engineering easy by automaticallyemulating adversary behaviors aligned to the MITRE ATT&CK framework, focusing your organization on threatsthat matter most. AttackIQ runs continuous tests against Zscaler ZIA, emulating adversarial techniques to test
detection and prevention, and by identifying gaps that you may need to fill with new capabilities. Together,
AttackIQ and Zscaler ZIA emulate and stop breaches before they impact your organization.

Security Posture Management

Through the AttackIQ Platform, security leaders gain greater visibility into their security stance by evaluating
and measuring the efficiency of security measures in thwarting, identifying, and responding to threats acrossthe entire cyber kill chain.

Continuously Validate Your Security Efficacy | 3

Solution Brief | AttackIQ and Zscaler

AttackIQ Platform
AttackIQ is the industry-leading provider of breach and attack simulation products for security control
validation. AttackIQ emulates adversary tactics, techniques, and procedures, aligned to the MITRE ATT&CK
framework, and provides visibility into your security program performance with clear data-driven analysis
and mitigation guidance. AttackIQ products are built on the company's core emulation platform, which tests
adversary tactics, techniques, and procedures with realistic attack scenarios and real-time performance
metrics and recommendations

The Value of AttackIQ
Improved Efficiency

Flexible Consumption

Faster Time to Value

Customers benefit from a
57% efficiency increase in red
team staff, roughly $80K peryear in testing costs. By quickly
identifying and prioritizing risks,
security leaders can focus
investments, while security
teams see a 47% increasein efficacy by prioritizing
vulnerabilities and measuring
security controls' effectiveness.

Flexible testing options thatfits your business needs andmaturity, comanaged, selfmanaged, or testing as aservice with the industry’s firstagentless testing solution.

Proactively identify andremediate risks in hours, notweeks. The AttackIQ platform
enables organizations toget answers to security riskquestions fast with form factorsthat fit their business needs.

Continuously Validate Your Security Efficacy | 4

Solution Brief | AttackIQ and Zscaler

About AttackIQ, Inc.
AttackIQ, the leading independent vendor of breach and attack simulation solutions, built the industry’s first
Security Optimization Platform for continuous security control validation and improving security program
effectiveness and efficiency.
AttackIQ is trusted by leading organizations worldwide to plan security improvements and verify thatcyberdefenses work as expected, aligned with the MITRE ATT&CK framework.
The Company is committed to giving back to the cybersecurity community through its free award-winning
AttackIQ Academy, open Preactive Security Exchange, and partnership with MITRE Engenuity’s Center for
Threat-Informed Defense.
For more information, visit www.attackiq.com. Follow AttackIQ on Twitter, Facebook, LinkedIn, and YouTube.

About Zscaler, Inc.
Zscaler (NASDAQ: ZS) accelerates digital transformation so customers can be more agile, efficient, resilient, andsecure. The Zscaler Zero Trust Exchange protects thousands of customers from cyberattacks and data loss
by securely connecting users, devices, and applications in any location. Distributed across more than 150 data
centers globally, the SSE-based Zero Trust Exchange is the world’s largest in-line cloud security platform.

U.S. Headquarters
171 Main Street, Suite 656
Los Altos, CA 94022+1 (888) 588-9116
info@attackiq.com

About AttackIQ
AttackIQ, the leading independent vendor of breach and attack simulation solutions, built the industry’s first Security Optimization Platform forcontinuous security control validation and improving security program effectiveness and efficiency. AttackIQ is trusted by leading organizations
worldwide to plan security improvements and verify that cyberdefenses work as expected, aligned with the MITRE ATT&CK framework. The Company iscommitted to giving back to the cybersecurity community through its free AttackIQ Academy, open Preactive Security Exchange, and partnership with
the MITRE Engenuity’s Center for Threat Informed Defense.
For more information visit www.attackiq.com. Follow AttackIQ on Twitter, Facebook, LinkedIn, and YouTube.
Copyright © 2023 AttackIQ, Inc. All rights reserved

Continuously Validate Your Security Efficacy | 5