Try our new research platform with insights from 80,000+ expert users

Bitsight vs Zscaler Internet Access comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Bitsight
Average Rating
8.2
Reviews Sentiment
6.4
Number of Reviews
9
Ranking in other categories
IT Vendor Risk Management (2nd), Attack Surface Management (ASM) (5th)
Zscaler Internet Access
Average Rating
8.4
Reviews Sentiment
6.6
Number of Reviews
59
Ranking in other categories
Secure Web Gateways (SWG) (3rd), Internet Security (2nd)
 

Mindshare comparison

While both are Security Software solutions, they serve different purposes. Bitsight is designed for IT Vendor Risk Management and holds a mindshare of 7.2%, down 11.2% compared to last year.
Zscaler Internet Access, on the other hand, focuses on Secure Web Gateways (SWG), holds 12.4% mindshare, down 15.7% since last year.
IT Vendor Risk Management Market Share Distribution
ProductMarket Share (%)
Bitsight7.2%
OneTrust GRC8.3%
SecurityScorecard7.9%
Other76.6%
IT Vendor Risk Management
Secure Web Gateways (SWG) Market Share Distribution
ProductMarket Share (%)
Zscaler Internet Access12.4%
Cisco Umbrella13.7%
Prisma Access by Palo Alto Networks9.2%
Other64.7%
Secure Web Gateways (SWG)
 

Featured Reviews

SA
Senior AIML Engineer at a tech vendor with 1,001-5,000 employees
Continuous monitoring has strengthened external security and improved customer trust
There are areas for improvement; we do notice sometimes finding vulnerabilities which gives us visibility to find them quickly. However, there could be a mechanism they can build on top of that for validation as they identify the issues. What will the real risk be for that identifiable issue? Sometimes it could be open because of the traffic; how they detected it could be seen as vulnerable, but upon testing, it might not be a real issue. It could be a false positive because there could be a honeypot that we built. My thinking is about validation, so if they can build that validation part before they expose the risk to the specific asset, that would help. Additionally, based on their reporting, they could also build risk scores and prioritization, which would also aid us. I would suggest adding dashboards and custom reporting, which could help us by enabling rich custom reports with filters. That is especially for leadership because they will not look at each technical area, but overall they would be looking at the risk score and what the assets or critical exposure areas are. Customizable reporting based on requirements would be valuable. I chose 9 out of 10 because the reporting and dashboards would be the first thing I would consider for improvement, and then the second is about the validation part, which could probably improve to 10 out of 10. I cannot think of too much for additional improvements. Maybe some good automation with the API solutions that could be integrated with the CI/CD pipeline or DevOps tools we are running would also be automated and tested.
Mohan Janarthanan - PeerSpot reviewer
Assosiate Vice President at Novac Technology Solutions
User access management and threat prevention are enhanced with user-friendly controls
The best features Zscaler Internet Access offers include application control, tenant segregation, and PoP center regions which have low availability zones. The internet access is very successful and bandwidth speed is excellent. It also has application-based control, URL-based control, and SSL inspection capabilities, which are very useful. Additionally, the in-depth CASB segregation is very beneficial to us. One unique feature I found helpful is the tenant level restrictions, which we use to only access our organization's tenant level mail IDs, drives, and specific tenant level access while restricting public access. Zscaler Internet Access has positively impacted our organization as we have noticed substantial outputs and income. It has improved our security environment control and endpoint protection. It prevents numerous web attacks through its AI/ML incorporated capability which identifies malware, threats, and viruses. It has a toggle button to enable features entirely at the tenant level for all users onboarded into Zscaler Internet Access, resulting in much better outcomes.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I prefer BitSight due to its patch management capabilities. The score is a valuable feature. I have contacted the customer support through e-mail and their response rate is fast. I rate the solution a nine out of ten."
"My advice to others looking into using Bitsight is that it provides a lot of information that was not available before, and it is especially good in recon as it can identify many things about an organization that have never been found earlier, making it a valuable tool."
"The solution is user-friendly."
"The best thing about BitSight is the comprehensive list of risk vectors, covering compromised systems, diligence failures, and behavioral anomalies."
"The product helps us identify the vulnerabilities of internet-facing applications."
"Bitsight has positively impacted my organization by improving security and customer trust, giving us continuous monitoring so we now find misconfigurations within hours instead of days or weeks, which directly improves our overall security posture and reduces risk as we catch high-risk exposures early, especially unexpected cloud assets or testing endpoints that accidentally went public."
"Offers open ports from an external point of view."
"Its customer service team responds quickly."
"The initial setup was straightforward. The biggest thing for us was to build our own policies. The deployment itself was only a few hours."
"The solution’s customer service is good."
"It is easy to set up the solution."
"The solution is scalable and stable."
"The scanning feature is impressive, because they do not introduce a big latency to the traffic."
"The product's initial setup phase is a bit easy, as one doesn't need high technical expertise."
"We enjoy all of the proxy capabilities and the capability to integrate into the SIEM/SOC solution."
"Zscaler Web Security protects our users in remote locations from internet threats - even if they are not connected to our network."
 

Cons

"BitSight could improve the classes and lower-level detections of anomalies that compound the information used to compute the rating."
"The solution’s benchmarking should be improved."
"Its factor analysis feature could be better."
"I chose 8 out of 10 because if we receive invites from clients every 45 days, our subscription ends, and we have to renew it."
"Data enrichment is the major issue."
"At the moment, when the vulnerability score decreases, it remains the same for quite a while, even though issues are resolved in 24 hours."
"We found that some of the findings are clear false positives, but they still report that, and based on that, the rating goes down until we rectify them."
"There may be room for improvement in the methodology for identifying findings, as occasional errors occur on the technical side."
"It needs better integration with other applications. It takes a fair amount of regular activity to apply the by-passes because it is very strict in its restrictions and frequently you have to go in and open things up to allow the workforce to work."
"One thing that needs to be improved is their presence in China. I'm not sure if that's a Zscaler thing or if it's a problem with all vendors in this space, but it would be nice to have better coverage in China. This concern is a common one for vendors across the board when dealing with the Chinese market."
"The solution can be improved by advancing some of the newer technologies such as the DLP feature, and adding email security."
"One thing that they could improve is the ability to import rules from other platforms."
"Technical support could be better."
"The interface for administration could be better. They should upgrade the management portal."
"Zscaler should continue to make the user interface better. They should also improve the backup network and continue to expand it so that it can handle larger numbers of customers."
"The main issue with Zscaler Internet Access is proxy IP detection, which sometimes makes sites inaccessible."
 

Pricing and Cost Advice

"The solution's price is average."
"The product has a reasonable price."
"Because it's a cloud solution, we pay on a yearly basis. It is affordable and includes tech support and all features."
"The solution is a little bit expensive. On a scale of one to five, I would rate it as a three."
"Zscaler is an expensive solution, but it's worth the price. Their services are unmatched by competitors. Some may come with half the features that Zscaler can offer and be much cheaper. However, they do not have the global coverage that Zscaler has, and they will not provide the same low latencies and the same speeds that Zscaler can."
"The price of Zscaler Internet Access should improve, it is expensive."
"We have found the solution to be expensive."
"It is costlier than other solutions."
"​Be aware that you will need to invest some time and money to adapt your environment for Zscaler (traffic redirection, software deployment, authentication, etc).​"
"We pay around 6,500 INR per user per year, which is very expensive. I would rate Zscaler's pricing one out of five."
report
Use our free recommendation engine to learn which IT Vendor Risk Management solutions are best for your needs.
881,665 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
16%
Manufacturing Company
10%
Computer Software Company
8%
Insurance Company
8%
Computer Software Company
13%
Manufacturing Company
11%
Financial Services Firm
10%
Comms Service Provider
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business3
Large Enterprise5
By reviewers
Company SizeCount
Small Business17
Midsize Enterprise10
Large Enterprise37
 

Questions from the Community

What is your experience regarding pricing and costs for BitSight?
The product is a little expensive and very oriented to large companies.
What needs improvement with BitSight?
There are areas for improvement; we do notice sometimes finding vulnerabilities which gives us visibility to find them quickly. However, there could be a mechanism they can build on top of that for...
Which is the better security solution - Cisco Umbrella or Zscaler?
Cisco Umbrella and Zscaler Internet Access are two broad-spectrum Internet security solutions that I have tried. Zscaler Internet Access is a good option for carrying out multiple security functi...
Which is better, Zscaler internet access or Netsckope CASB?
We researched Netskope but ultimately chose Zscaler. Netskope is a cloud access security broker that helps identify and manage cloud applications, protecting your sensitive data from exfiltration....
What is your experience regarding pricing and costs for Zscaler Internet Access?
It is only for big companies currently and they only focus on that. That is one of the problems to get into the market. Of course, it is an expensive product.
 

Also Known As

No data available
ZIA
 

Overview

 

Sample Customers

Fannie Mae, Cabela's, BNP Paribas, PWC, AIR Worldwide, Con Edison, The Container Store, OshKosh, Steris, University of South Florida, Emblem Health, Lloyds Bank
Ulster-Greene ARC, BanRegio, HDFC, Ralcorp Holdings Inc., British American Tobacco, Med America Billing Services Inc., Lanco Group, Aquafil, Telefonica, Swisscom, Brigade Group
Find out what your peers are saying about SecurityScorecard, BitSight, OneTrust and others in IT Vendor Risk Management. Updated: January 2026.
881,665 professionals have used our research since 2012.