Zscaler to buy Symmetry Systems in AI security push

Zscaler plans to acquire Symmetry Systems and has launched Project AI-Guardian, expanding its AI security offering for companies using autonomous software agents.

The acquisition would bring Symmetry Systems' identity mapping and data access technology into Zscaler's platform. Project AI-Guardian adds a services and implementation layer through consulting and outsourcing partners including Cognizant, EY, HCLTech, Infosys, TCS and Wipro.

The two moves come as businesses deploy more AI agents across software, cloud systems and internal data environments. These agents often operate with temporary identities and inherited permissions, making it harder for security teams to see what information is being accessed, how systems are connected and where risk sits.

Symmetry Systems' technology adds an access graph built from enterprise access logs across software-as-a-service tools, public cloud services, data stores and AI systems. The graph is designed to show which identities are accessing which data and through which paths.

The data mapping is intended to sit alongside Zscaler's Zero Trust Exchange to govern communications between AI agents, applications and data sources. Together, the technologies are intended to help organisations trace data lineage, detect anomalies and assess the potential impact if an identity or agent is compromised.

Why it matters

The announcement reflects a broader shift in cyber security as companies move from securing individual staff accounts and devices to monitoring large numbers of software-driven identities. Traditional access controls were designed around human users, but AI systems can trigger chains of machine-to-machine interactions that are harder to audit with older tools.

Project AI-Guardian targets that operational gap. Under the programme, global systems integrators will use Zscaler's AI Protect portfolio to help clients identify unauthorised AI use, map connections between data, identities and AI assets, and assess risks such as sensitive data exposure, supply chain weaknesses and misconfigured systems.

For Zscaler, the strategy combines product expansion with a distribution model that relies on partners already embedded in large enterprise technology programmes. It also puts the company in more direct competition over how businesses govern AI use, not just how they secure networks and user access.

Jay Chaudhry, Chairman and Chief Executive Officer of Zscaler, outlined the company's view of the challenge facing corporate security teams.

"As enterprises rapidly adopt AI, the old playbook for governing access built around users and directories cannot scale to millions of AI agents," said Jay Chaudhry, Chairman and Chief Executive Officer, Zscaler. "With Symmetry Systems, we are adding the access graph that maps how every identity, application, and data source connects across the enterprise. This foundational visibility is what Zscaler's Zero Trust Exchange will use to govern agent-to-application and agent-to-agent communication at scale, giving customers the actionable control they need to safely embrace AI."

Symmetry Systems has focused on security research and on mapping how data and identities interact. Its tools are designed to help security teams understand access relationships across fragmented technology estates, an area made more complex as AI systems draw on multiple applications and databases.

Mohit Tiwari, Chief Executive Officer of Symmetry Systems, said the company sees identity and data governance as the key security layer in AI-led environments.

"Symmetry Systems' mission is deep security research that earns real customer love. Zscaler is an inspiration on both counts," said Mohit Tiwari, Chief Executive Officer, Symmetry Systems. "We believe the dominant security platforms of the AI era will govern how information flows between identities across zero-trust networks. As AI disintermediates applications, endpoints, and traditional network boundaries, identities and data become the new control plane for enterprise security. In this world, legacy security models centered on endpoints, applications, or perimeter networks increasingly operate at the wrong layer of abstraction. Together, Symmetry Systems and Zscaler are building the information flow network for the age of AI."

Partner network

The launch of Project AI-Guardian also highlights how large consultancies and technology services groups are positioning themselves around AI governance work. Companies adopting AI often need help not only with software selection, but also with identifying unapproved tools, setting internal controls and linking security policy to business use.

Among the partner comments released with the announcement, EY said clients were seeking stronger visibility into AI use across data, networks and applications, while Infosys described AI security as a governance challenge requiring continuous control enforcement. Wipro and TCS also pointed to a broader attack surface and the need to measure risk exposure as AI becomes more embedded in software and cloud workflows.

On the partner programme, Chaudhry said: "GSI partners have been instrumental in driving Zero Trust driven digital transformation, delivering massive cost savings and superior user experiences for the world's largest enterprises. With Project AI-Guardian, we are empowering our partners to extend the Zero Trust framework to AI assets including AI agents, ensuring that AI adoption does not come at the cost of security."