All configuration shown was performed in an isolated virtual machine test environment. No real production environment, client data or client systems are shown.
Narration uses an AI clone of my own voice, for clear and easy-to-follow audio.
I am not affiliated with, endorsed by, or sponsored by Zscaler, and I don't sell Zscaler products. As an engineer, I deployed and configured Zscaler by hand, and I built these scripts on the Zscaler API to make that work easier for other engineers and companies. Zscaler, ZIA and ZPA are trademarks of Zscaler, Inc.
Automated audit
The ZPA Hygiene Audit is my own Python script. It reads the ZPA configuration through the Zscaler API without changing anything, scores it, and produces HTML and Excel reports. It automates most of a manual audit, and flags the few checks that still need a person.
Worked example
What it checks
It uses the Zscaler OneAPI with a read-only API client, and the code allows only GET requests. It runs 33 controls across eight areas: access policy, application segments, hygiene, identity, client posture, App Connectors, logging, and administration.
Some controls aren't fully automated. MFA, failover testing, alerting and retention, and change management are manual checks. Client Connector versions and forwarding profiles need an optional extra API scope. Unused-rule detection needs uploaded LSS logs.
Bulk onboarding
A second script onboards ZPA private applications in bulk from a CSV file, with dry-run by default.
Safe by design: read-only discovery, dry-run by default, approval before any production change, every change logged.
Estimated savings
Configuration audit
Minutes
vs up to 4 weeks
Illustrative estimateCost
A fraction of the cost
of a professional services engagement
Zscaler professional services list prices
$5,100–$50,000
From a ZPA Quick Start to a 160-hour expert block. Zscaler doesn't publish a list price for an audit.
FY24 list priceIllustrative estimates, not quotes or guaranteed savings. Actual results vary by environment. Timelines compare with Zscaler's published Health Check (within 4 weeks) package.
Sources: Zscaler Professional Services catalog · Zscaler Platform Health Check data sheet · Zscaler FY24 list prices (UK G-Cloud filing, in USD; US pricing may differ)