Zenarmor expands SASE platform for mobile & containers

Zenarmor has expanded its SASE Anywhere Architecture to support mobile endpoints and containerised deployments, positioning it as an alternative to SASE platforms that rely on cloud inspection points.

The update extends Zenarmor's distributed enforcement model, which places security inspection inside customer- or partner-run infrastructure rather than routing traffic through vendor-operated points of presence. Zenarmor says this supports sovereign deployments for managed service providers, network operators and enterprises.

SASE platforms typically combine networking and security controls, applying policies to users and devices across locations. Many run inspection in cloud gateways, which can add extra hops. Zenarmor argues that this approach increases latency and limits customers' operational control.

Sovereign deployments

Zenarmor runs security enforcement in-line where traffic enters the network, including at customer sites, in partner networks and in cloud environments. This reduces reliance on central inspection locations and keeps traffic and logs within infrastructure controlled by the customer or partner-an approach Zenarmor frames as important for sovereignty and operational ownership.

"Service providers need security platforms that integrate directly into their infrastructure without forcing architectural compromises," said George Burne, Chief Technology Officer at WiLine Networks. "Zenarmor's latest advancements to its distributed architecture allow us to embed security directly within our network stack, giving customers secure connectivity, full visibility, and operational control rather than relying on external cloud inspection points."

Zenarmor describes its platform as a single application and stack that performs traffic inspection in a single pass, marketed under its ONE.APP. SASE label. It places enforcement directly in the traffic path, bringing inspection closer to users, applications and workloads.

Mobile endpoints

The update adds support for roaming iOS and Android devices. Zenarmor gateways can act as secure internet exit points and inspection engines for mobile traffic. Users connect to the nearest Zenarmor gateway, where traffic is inspected in-line before reaching the public internet or corporate services.

Organisations can apply application-aware policies across networks, along with threat protection such as malware detection, phishing prevention and command-and-control blocking. Zenarmor also lists content filtering, web categorisation, and visibility into application usage and bandwidth consumption for mobile users.

"Many organizations struggle to introduce modern security capabilities without disrupting existing network deployments," said Eelco Akker, ICT Consultant overseeing network and security infrastructure at De Hooge Waerder Accountants. "Zenarmor's latest architecture advancements allow security to be inserted directly into the traffic path with minimal disruption, enabling organizations to strengthen their security posture while maintaining performance and operational continuity."

Zenarmor contrasts its approach with cloud-only SASE providers that route traffic through central vendor inspection points. Under its model, mobile users connect back to infrastructure owned by their organisation or its partners, which Zenarmor says preserves performance and operational control.

"SASE was originally envisioned as a way to bring networking and security closer to users and applications, but most implementations have reintroduced centralization through cloud inspection points," said Murat Balaban, Founder and CEO of Zenarmor. "With Zenarmor, security enforcement runs directly where traffic flows - at the branch, in the cloud, on endpoints, or within partner infrastructure - giving organizations the performance, control, and deployment flexibility that modern distributed networks require."

Containers and clusters

Zenarmor has also added a containerised deployment option for its gateway. The gateway can run as a Docker container, expanding deployment options across cloud-native environments and edge infrastructure.

According to the company, the container form factor suits Kubernetes clusters and short-lived development and testing environments. It also targets distributed edge locations where operators may prefer not to deploy dedicated appliances. The company's pitch is that organisations can run in-line inspection in these environments without relying on a central cloud inspection layer.

Central management

Endpoints and policy enforcement are managed through Zenconsole. The platform integrates with device management tools including Microsoft Intune and Jamf, allowing consistent policy application across laptops, mobile devices and remote user environments.

Shamus McGillicuddy, Vice President of Research at Enterprise Management Associates, described the update as a response to the architectural constraints of cloud points of presence.

"Traditional SASE architectures introduce integration challenges and operational blind spots due to their dependence on cloud-based PoPs," he said. "By eliminating PoPs and enabling direct, point-to-point secure connections with inline inspection, Zenarmor's latest advancements reinforce a next-generation SASE architecture that reduces latency, accelerates deployment, and lowers operational complexity. This differentiated approach is why EMA recognized Zenarmor as a Vendor to Watch."

Roadmap signals

Zenarmor is developing an integration with CrowdStrike Falcon that it says will incorporate device posture signals into policy decisions. The feature is planned for a future platform release.

Service provider partners are also pitching the distributed model as a fit for workforces that connect from multiple networks.

"Perimeter-dependent security is an outdated assumption," said Mark Weinberger, Client Solutions Director at Spectrum Networks. "Users are constantly moving between networks, and security must move with them. Zenarmor's latest platform advancements enable us to move beyond gateway-only models to distributed enforcement with centralized visibility and control, a necessary evolution for modern SASE architectures built for today's distributed workforce."

Zenarmor says the latest platform advancements are available now, with further expansion planned across enterprise, managed service provider and network operator environments.