Number of Seats/Users: Zscaler offers discounts based on the number of users or seats. A higher volume typically leads to a better discount structure, especially for enterprise-level usage.

Commitment to a Long-Term Contract: Discounts are often provided to companies that commit to using the service for a longer period (e.g., 1-year or 3-year contracts). A longer commitment shows Zscaler that the company is serious and willing to invest in the platform long-term.

No Active Discounts: Companies that are not already receiving other active discounts may have a better chance of qualifying for additional discounts from Zscaler. Zscaler reserves discounts for new customers or those not currently under promotional pricing.

Volume or Usage Commitment: Zscaler offers discounts if you agree to a minimum amount of usage or transaction volume. This could be based on data storage, transactions, or other metrics tied to how much you will use the platform.

Enterprise-Level Negotiation: Companies that qualify as “enterprise” due to their size or complexity (e.g., having large teams, multiple departments, or geographical presence) may be eligible for additional discounts from Zscaler. Such companies are often in a position to negotiate for better pricing.

Early Renewal or Prepayment: Zscaler often offers discounts if you renew early or prepay for the entire contract period. This is a common approach to securing a lower price.

Here at Spendbase our internal data shows that Zscaler delivers strong value for security-focused teams, but needs careful rollout and licensing to avoid overspend and frustration.

Overall sentiment
– Most Spendbase clients rate Zscaler very highly (4–5 stars)
– A small but vocal group is very negative, mainly in engineering-heavy environments

What Spendbase clients like most
– Seamless remote access
– Auto-connect VPN-like experience
– Works quietly in the background with minimal user interaction
– Rare disconnects; stable for large remote workforces
– Strong security posture
– Zero Trust access to internal apps
– Advanced threat protection and URL filtering
– Good at blocking malicious/suspicious sites and data loss risks
– Performance and scale
– Often faster and more stable than legacy VPNs
– Global POPs reduce latency vs traditional appliances
– Visibility and control
– Rich analytics and logging
– Easy integrations with SIEM and identity providers
– Centralized policies for web, private apps, and cloud traffic

Key pain points to watch (and negotiate around)
– Deployment complexity
– Initial policy setup can be hard, especially in hybrid or legacy environments
– Often requires training and professional services (extra cost)
– Overly strict policies / false positives
– Legitimate sites and tools sometimes blocked
– Some clients want more granular control and clearer user notifications
– Developer experience
– Strong complaints from software teams:
– TLS inspection breaks dev tools and custom proxies
– Extra latency complicates network debugging
– This is a high-risk area for productivity loss if not designed carefully
– Platform & performance gaps
– Linux client maturity issues
– Background agent consumes noticeable resources for some users

Cost and discount angles from a Spendbase view
– Zscaler is perceived as premium-priced, especially for:
– Very large enterprises (license volume)
– Smaller businesses that struggle to see full ROI
– Our internal data suggests best savings when clients:
– Right-size licenses to actual active users
– Separate dev/engineering use cases with tailored policies or exclusions
– Bundle modules (Internet Access, Private Access, etc.) strategically instead of “buying everything”
– Leverage migration from legacy VPN/appliances as a negotiation lever

In short, Zscaler is a strong fit for distributed, security-first organizations. With proper scoping and smart discount negotiation, Spendbase clients can capture the security and usability benefits without overpaying—or hurting developer productivity.