Palo Alto Networks has rebranded its Privileged Remote Access (PRA) product, expanding the offering beyond remote desktop and terminal connections to now support private web applications as well.

Dubbed Secure Agentless Access (SAA), the offering works through any standard HTML5-compatible browser, allowing staff, contractors, and third parties to access internal resources from unmanaged or bring your own devices (BYOD) while keeping traffic isolated in an air-gapped cloud environment.

Designed to complement its Prisma Browser offering, SAA looks to provide enterprises with a flexible framework that avoids either over-restricting access or providing excessive trust, a binary choice the vendor argues is not sustainable for an effective zero trust posture.

Palo Alto Networks’ SAA offering then looks to bridge the gap between security and accessibility, creating what it describes as a “secure tunnel” to resources without requiring any software installation or device management.

“This approach allows IT teams to extend Zero Trust policies to the entire workforce, ensuring that even unmanaged or third-party devices remain isolated from the core network while maintaining high-performance access to the tools they need,” a company blog post reads.

The launch marks the latest in a growing push by Palo Alto into the identity management space, a pivot spearheaded by its $25 billion CyberArk acquisition, which it’s since rebranded as Idira. That mammoth deal looks set to be further augmented by the addition of endpoint security vendor Koi Security.

Its latest offering to cater to identity management demands sees SAA feature capabilities that, while providing access to corporate software as a service (SaaS) applications for third parties, enforce strict data controls directly. Enterprises can set the offering up to prevent restricted actions like cut, copy, paste, and printing, while also limiting file uploads and downloads. And for overly secure workflows, files can be rendered and viewed via the cloud container without touching local storage.

The vendor added that since SAA runs entirely within an air-gapped cloud environment, malicious threats are essentially neutralized before they even reach the user’s local browser.

“By eliminating the complexities of traditional access methods, SAA reduces costs, increases efficiency, and closes the security gaps from unmanaged devices,” Palo Alto Networks’ post reads.