Compare
Enterprise SSE / SASE (ZPA, ZIA) · Zscaler Inc., San Jose, United States
Zscaler is the enterprise reference for security service edge. ZPA and ZIA cover private access, web security, inspection, DLP and much more, backed by a global cloud and a large partner ecosystem. Large organisations with dedicated security teams buy it for that breadth.
Polfence is not trying to be Zscaler. It is a focused EU platform for organisations that need Zero Trust access, secure connectivity, DNS and monitoring with the compliance paperwork done, at a price a mid-sized company can approve without a procurement cycle. Everything runs in the EU under an EU-owned company, and it can be set up in an afternoon by the same person who runs the network.
Reviewed September 2026. Zscaler details are taken from public documentation; plans and features change, so confirm with the vendor before you decide.
| Capability | Polfence | Zscaler |
|---|---|---|
| EU data residency, EU-owned vendor | Yes Polish company, hosted in Paris and Amsterdam | Partial US company; EU data centres available |
| GDPR DPA included | Yes Available in the dashboard | Partial Negotiated in the enterprise contract |
| NIS2 readiness report | Yes Article 21 assessment + printable report | Check vendor Compliance mappings via services; not self-service |
| ZTNA, per-app least privilege | Yes | Yes ZPA |
| Device posture checks | Yes Disk encryption, firewall, screen lock, OS version | Yes |
| Just-in-time access | Yes Request, approve, time-boxed grant | Check vendor Check vendor |
| SSO + SCIM provisioning | Yes OIDC (Entra ID, Google, Okta) + SCIM 2.0 | Yes |
| DPI-resistant tunnel | Yes Perimeter engine, obfuscated WireGuard | Check vendor |
| Site-to-site router configs (plain WireGuard) | Yes UniFi, MikroTik, pfSense, OPNsense, OpenWrt | Partial App and Branch Connectors; no plain WireGuard export |
| DNS filtering resolver | Yes Polfence Shield, DoH, EU upstream | Yes ZIA DNS control |
| Authoritative DNS + zone kill switch | Yes | No |
| Dynamic DNS (dyndns2) | Yes | No |
| Remote desktop | Yes Polfence Connect, consent-gated | Partial Privileged Remote Access add-on |
| Uptime monitors + public status pages | Yes HTTP/TCP/DNS, public /s/ pages, badge | Partial ZDX experience monitoring; no public status pages |
| Public API | Yes REST v1 + OpenAPI | Yes |
| Audit trail + signed webhooks | Yes HMAC-signed, Slack/Teams/JSON, CSV export | Yes Log streaming to SIEM |
| Pricing model | Flat plan per account: Free, Pro and Business monthly. Enterprise on request. | Enterprise quote; per user, bundled editions |
available partly or with limits not offered unsure, check vendor— not applicable
Other comparisons
The free plan needs no card. Set up a network, a Shield profile and a monitor in an afternoon and compare for yourself.