Who leads the crowded of pack zero-trust (ZT) platform providers? In its Wave report for Q3 2023. Forrester emphasized the need for zero-trust platforms to offer a unified, comprehensive approach and named Palo Alto Networks, Microsoft and Check Point Software Technologies as leading providers.

The analysis firm listed Zscaler, Trend Micro, Google, Cloudflare, Akamai Technologies and Cisco Systems as strong performers; Fortinet, Absolute Software and Broadcom as contenders; and Forcepoint and VMware as challengers.

Forrester analysts noted in the report that many organizations suffer vendor sprawl, overlapping capabilities and security gaps in their zero-trust journey. “There is a need to consolidate controls, enable interoperability, and integrate technologies without compromising capabilities.”

They added that zero-trust platforms address this issue by integrating disjointed functions and providing supplemental capabilities and services to enrich cross-functional operations, which can simplify zero-trust adoptions, especially for enterprises in the early stages of their zero-trust journey.

Even though no single platform or solution can offer all the capabilities needed for an effective zero-trust architecture, zero-trust platforms “combine key ZT functionalities instead of requiring individual bolt-on tooling,” Forrester said.

Analysts suggest organizations should look for zero-trust platforms that accomplish the following:

• Offer centralized management and usability with a universal user interface (UI) and user experience (UX). The consolidation can also provide native services for cyber hygiene, which ensures zero-trust best practices align with industry standards.
• Provide flexible deployment models that support diverse hybrid architectures. Forrester noted vendors should curate their offerings for cloud-based, virtual and on-premises environments and meet organizations’ individual requirements.
• Incorporate zero-trust network access and/or microsegmentation capabilities natively, allowing for the enforcement of core zero-trust principles such as enforcing least privilege, implicitly denying access and applying comprehensive visibility.

The named leaders in Forrester's report are all investing heavily in artificial intelligence (AI) and machine learning (ML) capabilities and have long-term plans to further integrate these technologies into their zero-trust platforms.

• Palo Alto Networks uses AI for IT operations in its Zero Trust Framework, which includes the vendor’s Prisma, Strata and Cortex solutions. It also aims for long-term commitment to enhance AI/ML capabilities to automate beyond policy creation to enhance the zero-trust journey. “What sets our architecture apart is the power of AI-driven, day-zero detection capabilities,” Anand Oswal, senior VP and GM of network security at Palo Alto Networks, said in an earlier interview with SDxCentral.
• Microsoft leverages AI through its Copilot theme, aiming to provide end-to-end, step-by-step guidance for implementing zero trust. The vendor unveiled Microsoft Security Copilot in March, which embedded AI — most notably OpenAI’s GPT-4 — into its security portfolio.
• Check Point Software Technologies plans to expand AI and deep learning for improved detection and prevention across threat vectors in its roadmap. TJ Gonen, VP of Cloud Security at Check Point, said in an earlier interview that the vendor has been using AI across the board for more than four years. One example is using “machine learning and AI to prioritize and talk about or focus only on the risks that matter.”