Try our new research platform with insights from 80,000+ expert users

Bitsight vs Zscaler Internet Access comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Bitsight
Average Rating
8.2
Reviews Sentiment
6.4
Number of Reviews
9
Ranking in other categories
IT Vendor Risk Management (2nd), Attack Surface Management (ASM) (5th)
Zscaler Internet Access
Average Rating
8.4
Reviews Sentiment
6.6
Number of Reviews
59
Ranking in other categories
Secure Web Gateways (SWG) (3rd), Internet Security (2nd)
 

Mindshare comparison

While both are Security Software solutions, they serve different purposes. Bitsight is designed for IT Vendor Risk Management and holds a mindshare of 7.2%, down 11.2% compared to last year.
Zscaler Internet Access, on the other hand, focuses on Secure Web Gateways (SWG), holds 12.4% mindshare, down 15.7% since last year.
IT Vendor Risk Management Market Share Distribution
ProductMarket Share (%)
Bitsight7.2%
OneTrust GRC8.3%
SecurityScorecard7.9%
Other76.6%
IT Vendor Risk Management
Secure Web Gateways (SWG) Market Share Distribution
ProductMarket Share (%)
Zscaler Internet Access12.4%
Cisco Umbrella13.7%
Prisma Access by Palo Alto Networks9.2%
Other64.7%
Secure Web Gateways (SWG)
 

Featured Reviews

SA
Senior AIML Engineer at a tech vendor with 1,001-5,000 employees
Continuous monitoring has strengthened external security and improved customer trust
There are areas for improvement; we do notice sometimes finding vulnerabilities which gives us visibility to find them quickly. However, there could be a mechanism they can build on top of that for validation as they identify the issues. What will the real risk be for that identifiable issue? Sometimes it could be open because of the traffic; how they detected it could be seen as vulnerable, but upon testing, it might not be a real issue. It could be a false positive because there could be a honeypot that we built. My thinking is about validation, so if they can build that validation part before they expose the risk to the specific asset, that would help. Additionally, based on their reporting, they could also build risk scores and prioritization, which would also aid us. I would suggest adding dashboards and custom reporting, which could help us by enabling rich custom reports with filters. That is especially for leadership because they will not look at each technical area, but overall they would be looking at the risk score and what the assets or critical exposure areas are. Customizable reporting based on requirements would be valuable. I chose 9 out of 10 because the reporting and dashboards would be the first thing I would consider for improvement, and then the second is about the validation part, which could probably improve to 10 out of 10. I cannot think of too much for additional improvements. Maybe some good automation with the API solutions that could be integrated with the CI/CD pipeline or DevOps tools we are running would also be automated and tested.
Mohan Janarthanan - PeerSpot reviewer
Assosiate Vice President at Novac Technology Solutions
User access management and threat prevention are enhanced with user-friendly controls
The best features Zscaler Internet Access offers include application control, tenant segregation, and PoP center regions which have low availability zones. The internet access is very successful and bandwidth speed is excellent. It also has application-based control, URL-based control, and SSL inspection capabilities, which are very useful. Additionally, the in-depth CASB segregation is very beneficial to us. One unique feature I found helpful is the tenant level restrictions, which we use to only access our organization's tenant level mail IDs, drives, and specific tenant level access while restricting public access. Zscaler Internet Access has positively impacted our organization as we have noticed substantial outputs and income. It has improved our security environment control and endpoint protection. It prevents numerous web attacks through its AI/ML incorporated capability which identifies malware, threats, and viruses. It has a toggle button to enable features entirely at the tenant level for all users onboarded into Zscaler Internet Access, resulting in much better outcomes.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The solution is user-friendly."
"Bitsight has positively impacted my organization by improving security and customer trust, giving us continuous monitoring so we now find misconfigurations within hours instead of days or weeks, which directly improves our overall security posture and reduces risk as we catch high-risk exposures early, especially unexpected cloud assets or testing endpoints that accidentally went public."
"My advice to others looking into using Bitsight is that it provides a lot of information that was not available before, and it is especially good in recon as it can identify many things about an organization that have never been found earlier, making it a valuable tool."
"Bitsight gives me a holistic view of my entire security posture, which is something any organization would want to have after getting a tool such as Bitsight."
"I prefer BitSight due to its patch management capabilities. The score is a valuable feature. I have contacted the customer support through e-mail and their response rate is fast. I rate the solution a nine out of ten."
"Its customer service team responds quickly."
"The product helps us identify the vulnerabilities of internet-facing applications."
"The best thing about BitSight is the comprehensive list of risk vectors, covering compromised systems, diligence failures, and behavioral anomalies."
"The solution has reduced cyberattacks."
"The most valuable features of Zscaler Internet Access are it's on the cloud, high network performance, and the interception of users is very easy."
"The protection is most valuable."
"The data loss prevention feature is the most valuable. It stops our users from inadvertently leaking our customers' data to the Internet or anywhere else it shouldn't go."
"The URL filtering has been the most valuable feature."
"The solution is stable and reliable."
"Zscaler offers a centralized DLP solution for web, endpoint, and email."
"The cloud proxy and integration are some of the key features. Since there is cloud waste, we can quickly provision it and start working on the configuration. On top of that, they have added a few more features. They have integrated CASB, and file sandboxing is part of it."
 

Cons

"The solution’s benchmarking should be improved."
"There are areas for improvement; we do notice sometimes finding vulnerabilities which gives us visibility to find them quickly. However, there could be a mechanism they can build on top of that for validation as they identify the issues."
"BitSight could improve the classes and lower-level detections of anomalies that compound the information used to compute the rating."
"I chose 8 out of 10 because if we receive invites from clients every 45 days, our subscription ends, and we have to renew it."
"We found that some of the findings are clear false positives, but they still report that, and based on that, the rating goes down until we rectify them."
"There may be room for improvement in the methodology for identifying findings, as occasional errors occur on the technical side."
"Its factor analysis feature could be better."
"At the moment, when the vulnerability score decreases, it remains the same for quite a while, even though issues are resolved in 24 hours."
"Do not expect to pay for the service and start using it, like Gmail. Zscaler requires a proper implementation to be done to make it successful."
"Zscaler Internet Access can improve by adding traffic filtering based on the DNS."
"It needs better integration with other applications. It takes a fair amount of regular activity to apply the by-passes because it is very strict in its restrictions and frequently you have to go in and open things up to allow the workforce to work."
"If they can also integrate with the multi-factor authentication to prompt users to do another, second-factor authentication, that would be ideal."
"What could be improved in Zscaler Internet Access is its price. It could be cheaper."
"The solution can be improved by advancing some of the newer technologies such as the DLP feature, and adding email security."
"The OS capabilities and WSL support could be improved."
"I would like to see the ability to choose a pool of IPs for my company, set up rules based on them, and know that those IPs are not used by other companies."
 

Pricing and Cost Advice

"The product has a reasonable price."
"The solution's price is average."
"It is quite expensive. It does its job, but it is quite expensive for what we need."
"Licenses are available on a per-host basis. Some features like sandboxing require an additional fee, but most standard features are included in the license."
"The pricing is fair based on its competitive market."
"​Be aware that you will need to invest some time and money to adapt your environment for Zscaler (traffic redirection, software deployment, authentication, etc).​"
"Because it's a cloud solution, we pay on a yearly basis. It is affordable and includes tech support and all features."
"There are multiple bundles: enterprise, business, and transformation. Transformation includes all the features, but recently I've seen a few more line items that are additional costs. Overall, it's expensive."
"The pricing is an issue. It is expensive compared to other firewalls on the market."
"The price of Zscaler Internet Access should improve, it is expensive."
report
Use our free recommendation engine to learn which IT Vendor Risk Management solutions are best for your needs.
881,733 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
16%
Manufacturing Company
10%
Computer Software Company
8%
Insurance Company
7%
Computer Software Company
13%
Manufacturing Company
11%
Financial Services Firm
10%
Comms Service Provider
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business3
Large Enterprise5
By reviewers
Company SizeCount
Small Business17
Midsize Enterprise10
Large Enterprise37
 

Questions from the Community

What is your experience regarding pricing and costs for BitSight?
The product is a little expensive and very oriented to large companies.
What needs improvement with BitSight?
There are areas for improvement; we do notice sometimes finding vulnerabilities which gives us visibility to find them quickly. However, there could be a mechanism they can build on top of that for...
Which is the better security solution - Cisco Umbrella or Zscaler?
Cisco Umbrella and Zscaler Internet Access are two broad-spectrum Internet security solutions that I have tried. Zscaler Internet Access is a good option for carrying out multiple security functi...
Which is better, Zscaler internet access or Netsckope CASB?
We researched Netskope but ultimately chose Zscaler. Netskope is a cloud access security broker that helps identify and manage cloud applications, protecting your sensitive data from exfiltration....
What is your experience regarding pricing and costs for Zscaler Internet Access?
It is only for big companies currently and they only focus on that. That is one of the problems to get into the market. Of course, it is an expensive product.
 

Also Known As

No data available
ZIA
 

Overview

 

Sample Customers

Fannie Mae, Cabela's, BNP Paribas, PWC, AIR Worldwide, Con Edison, The Container Store, OshKosh, Steris, University of South Florida, Emblem Health, Lloyds Bank
Ulster-Greene ARC, BanRegio, HDFC, Ralcorp Holdings Inc., British American Tobacco, Med America Billing Services Inc., Lanco Group, Aquafil, Telefonica, Swisscom, Brigade Group
Find out what your peers are saying about SecurityScorecard, BitSight, OneTrust and others in IT Vendor Risk Management. Updated: January 2026.
881,733 professionals have used our research since 2012.