Zscaler policy workbench

See your whole Zscaler tenant laid out, know which rule wins and why, and test a change before it goes live. It reads your tenant. It never writes to it.

Start a conversation
shibboleth · overview
Shibboleth overview screen, softened: the live tenant card, the policy areas from the last snapshot, and the list of screens

EXAMPLEReal screen from Shibboleth, softened. Example tenant data.

Why it's needed

See your whole tenant,
laid out.

Too often, changing Zscaler policy means changing it blind.

Shibboleth answers each one
shibboleth
Softened view of one tenant: maturity, baseline, drift and comparisons Softened view of a what-if result: rules in order, with the matching rule marked Softened view of cases before and after a draft: one newly failing, one still passing Softened view of saved snapshots, with older scheduled and manual points

EXAMPLEReal screens from Shibboleth, softened. Example tenant data.

There's more inside.Start a conversation →

Know the outcome
before anyone feels it.

Shibboleth sits between the people who write Zscaler policy and the tenant that enforces it.

DRAFT & TEST

See what a change would do

Apply a draft to a copy of a saved snapshot and run your cases before and after. Every verdict that moves is listed.

CONFIRM

A second person signs off

One person submits the draft. A different person approves it, with the test results in front of them.

RECORD

Keep what an auditor asks for

What changed, how it was tested and who approved it, exported as one evidence pack.

Not yet testedExpected result · crossesUnexpected change · held for review
EXAMPLEcrossed 0 · held 0
Two-person approval

Every change confirmed by two.

The author proposes, someone else confirms, with the test results in front of them.

  • Authors can't approve their own drafts
  • Approval marks a draft ready. Shibboleth never applies it to the tenant
draft · review
An approved draft in Shibboleth: the reviewer, a policy lint finding, and the approval history

EXAMPLEReal screen from Shibboleth. Example draft and reviewer.

EVIDENCE PACK

Example · draft url-filtering-update
Snapshot beforesaved
Snapshot aftersaved
Cases testedattached
Changed verdictslisted
Authorsigned in
Reviewersigned in
Change windowfrom calendar
CONFIRMED BY TWO
Evidence

Set down a record
at every crossing.

Each change leaves behind what was tested, what changed and who confirmed it. Export it as an evidence pack whenever someone asks.

Know the word
before you cross.

Built for teams who can't afford a wrong change.

Start a conversation
Start a conversation

Tell us where you are.

A few details and we'll get back to you.

Please enter your name.
Please enter a valid work email.
Please enter your organization.

We review every request ourselves. Please don't include sensitive or controlled information.

Thank you.

We have your note and will be in touch.