AI Defense Stack

AI security posture management & discovery

Zscaler AI Asset Management: AI security posture management product

Zscaler AI-SPM is an AI security posture management product from Zscaler. It is a commercial product offered as: Not documented. Pricing model: not published.

  • Last reviewed
Visit Zscaler AI-SPM (opens in a new tab)
Commercial Layer 2: Discovery and posture

Best for

  • Organizations that already use Zscaler's data security platform and want AI service discovery and posture checks inside it
  • Security teams that want AI agents and MCP servers defined in code repositories found and risk-scored before they reach production

Consider instead if

  • You want AI posture inside a cloud security platform with documented attack path analysis and an AI-BOM. See Wiz AI-SPM.
  • You are mainly looking for automated red teaming of AI apps rather than posture. See SPLX.

What Zscaler AI-SPM does

Zscaler AI Asset Management, also called Zscaler AI-SPM, builds an inventory of the AI an organization runs: services on Bedrock, Azure Foundry and Vertex AI, unmanaged ones such as Hugging Face and Ollama, and, per Zscaler's brochure, AI workflows found by scanning source code repositories, down to their agents, tools and MCP servers. The brochure files the product under Zscaler AI Red Teaming and shows each detected model scored against red teaming benchmarks, then approved or blocked. That tie between inventory and test scores separates it from Wiz, which reaches AI from cloud posture. The public material has gaps: no docs, hosting model or price, and the compliance benchmarking against NIST AI RMF 600-1, the EU AI Act, HIPAA and GDPR is Zscaler's description of a feature, not an audit result.

This summary is our own wording of the sourced facts on this page.

Key facts

Each value links to the page that states it, with the date we checked it.

Vendor
Zscaler Source, checked October 21, 2026: zscaler.com (opens in a new tab)
Status
Active Source, checked October 21, 2026: zscaler.com (opens in a new tab)
Open source
No: closed source (proprietary) Source, checked October 21, 2026: zscaler.com (opens in a new tab)
Latest release
Not documented in the sources we checked
Deployment
Not documented Source, checked October 21, 2026: zscaler.com (opens in a new tab)
Pricing model
Not published in the sources we checked Source, checked October 21, 2026: zscaler.com (opens in a new tab)
Website
zscaler.com Source, checked October 21, 2026: zscaler.com (opens in a new tab)
Documentation
Not documented in the sources we checked
API reference
Not documented in the sources we checked
Quickstart
Not documented in the sources we checked
Security page
compliance.zscaler.com Source, checked October 21, 2026: compliance.zscaler.com (opens in a new tab)
Attestations or disclosure
Not documented in the sources we checked

Capabilities

As documented by the vendor or project. The tag is our label from a controlled vocabulary.

Integrations

Where Zscaler AI-SPM fits in our AI security layers

Our analysis

Our editorial model, not a standard. The primary layer follows the category, except for tools whose main documented job is detection and response; other layers rest on a capability the sources document. How the model works.

AI security layers that Zscaler AI-SPM covers, with the role, how each applies and what it rests on
LayerRoleHow it appliesBased on
L2 Discovery Discovery and posture Primary Find the AI models, services, agents, MCP servers and AI apps in use, and check how each is configured and exposed. Follows its category, AI security posture management & discovery

OWASP LLM Top 10 mapping

Our analysis

The risk list is OWASP's (Top 10 for LLM Applications, 2025). The mapping is our analysis, and each row rests on a capability the sources document.

OWASP LLM risks mapped to Zscaler AI-SPM, with the capabilities each mapping rests on
RiskHow it appliesBased on
LLM02 Sensitive Information Disclosure Alerts on access to sensitive data and on regulated data used in AI training, where disclosure starts. Monitors data flows and access to sensitive data, and alerts on regulated data used in AI training
LLM03 Supply Chain Records model publisher, origin and license, and lets teams approve or block each detected model. Discovers, classifies and inventories AI services, with lineage context such as publisher, country of origin and licensing terms; Scans source code repositories to map AI workflows and the agents, tools and MCP servers inside them; Scores each detected LLM against Zscaler AI Red Teaming benchmarks so teams can approve or block it
LLM06 Excessive Agency Flags access risk and misconfigurations in AI agents, the excess permissions behind excessive agency. Identifies misconfigurations, access risk and vulnerabilities in AI agents

Not mapped in our analysis: LLM08. These are risks we expect tools in this category to cover; the sources we checked do not document a matching capability.

Alternatives and related tools

More in AI security posture management & discovery, ranked within the category by Coverage Score.

Snyk Evo AI-SPM

Snyk

Commercial
  • SaaS
  • CLI

Maps AI models, agents, datasets and MCP servers across code and apps, scores model risk and enforces policy.

Best for: Teams that already use Snyk and want an inventory of AI models, agents and MCP servers tied to policy in the same platform

Coverage Score 64 out of 100
  • LLM03 Supply Chain
  • LLM01 Prompt Injection
  • LLM02 Sensitive Information Disclosure
  • LLM06 Excessive Agency
  • +1 more

Reviewed

Microsoft Defender for Cloud AI security posture management

Microsoft

Commercial
  • Cloud-native

Finds AI workloads across Azure, AWS and Google Cloud and flags risks with recommendations and attack paths.

Best for: Teams already using Defender for Cloud that want AI workloads in Azure, AWS and Google Cloud added to their posture view

Coverage Score 55 out of 100
  • LLM02 Sensitive Information Disclosure
  • LLM03 Supply Chain

Reviewed

Wiz AI Security Posture Management (AI-SPM)

Google (Wiz)

Commercial
  • SaaS
  • Cloud-native

Finds AI services across cloud accounts without agents and maps misconfigurations and attack paths.

Best for: Cloud security teams that want agentless discovery of AI services and their risks inside a cloud security platform

Coverage Score 54 out of 100
  • LLM01 Prompt Injection
  • LLM02 Sensitive Information Disclosure
  • LLM03 Supply Chain
  • LLM06 Excessive Agency

Reviewed

Zscaler AI-SPM FAQ

Is Zscaler AI Asset Management the same as SPLX?

The product page does not mention SPLX, which has its own entry in this directory. Zscaler's brochure for this product carries the header Zscaler AI Red Teaming and draws red teaming, runtime protection and governance as connected modules, so ask Zscaler how they are packaged and licensed.

Does it find AI agents defined in code?

Zscaler's brochure says it scans source code repositories to map AI workflows and the agents, tools and MCP servers in them, and scans MCP servers for vulnerabilities and misconfigurations. It names no supported agent frameworks beyond a CrewAI example screenshot.

Does the vendor publish a price?

Not on the product page we opened. It states no price or plan for this product.

Which AI platforms does it cover?

The page names Amazon Bedrock, Microsoft Azure Foundry AI and Google Vertex AI, plus unmanaged services such as Hugging Face and Ollama.

Key facts you can cite

We have no commercial relationship with Zscaler.

Sources & last reviewed

Last reviewed . We compile from the vendors' own public pages and repositories and we do not run the products. Source links open in a new tab. Found a mistake? Report a correction.