An offer that fits your operations.
The scope is based on the tenants actually managed, the required roles and workflows and the systems to be integrated. We state these factors clearly in the quote.
Five packages for every phase of your Zscaler operations.
The four tiers Light, Starter, Advance and Enterprise build on each other: each further tier unlocks more depth for Helpdesk, administration and security. Migration & Onboarding stands on its own, for the switch to Zscaler itself, bookable independently of the four tiers. CentaurNexus is the optimal complement to your Zscaler security stack. We work out the right fit for your tenant in a personal quote.
Light
- Self-Service tools such as My Endpoint Status, Service Tunnel Check and Protection Transparency Center for self-diagnosis.
- User Support Center gives Helpdesk a first view of a user, with no need to hand out Zscaler admin rights.
- Access Rule Trace and URL Rule Trace show, read-only, which rule actually applies.
- Savings Opportunity surfaces unused licence potential, straight from real tenant data.
Starter
- Access Review Desk lets Helpdesk review and approve access requests, with Audited Change History for every decision.
- BYOD Wizard, Cloud Unlock and Private App Request give end users full Self-Service for the most common requests.
- Policy Release and DLP Release bring controlled approvals for rule and data-protection exceptions.
- Rollout Planner plans the first own waves for sites and user groups.
Advance
- Policy Hygiene Desk, Policy Conflict Review and Log Analyzer cover rule maintenance and fault diagnosis in depth.
- DLP Configuration Desk and Posture Profile Scan manage data-protection and endpoint policies centrally.
- RBAC Administration controls, granularly, who is allowed to do what, through roles instead of individual rights.
- Third Party Desk opens a dedicated area for partners, service providers and vendor access.
Enterprise
- Emergency User Isolation and Configuration Rollback step in where speed and safety both matter at once.
- CASB Guard, Category Forge and Compliance Mapping bundle the sensitive governance topics in one place.
- Entitlement Certification and Governed Bulk Actions bring bulk changes under structured control.
- SSO / SAML, Whitelabeling / Custom Branding and Priority-Support / SLA round off operations at the Enterprise level.
Migration & Onboarding
Whether you are switching to Zscaler or building a new environment, Migration & Onboarding takes your existing rule set to Zscaler in verified waves and rolls out sites and access in the same effort. You can book it on its own, with no need for Light, Starter, Advance or Enterprise.
- Migration Intake, Migration Review, Migration Apply, Migration Verify and Migration Report take an existing rule set to Zscaler in five verified steps.
- Rule sets from Check Point, Cisco, Fortinet, Palo Alto Networks or Cato Networks can all be read in; the target system is always Zscaler.
- Configuration Drift Review shows deviations after every wave, for MSPs across multiple customer tenants.
- Location Forge, Site Connection Setup and PRA Deploy build sites and access in the same effort.
Every quote clearly states the specifically agreed scope, relevant dependencies, responsibilities and price components.
Four inputs lead to a reliable quote.
We clarify scope and dependencies before quoting a price so that the offer and subsequent operation fit together.
Tenants and user context
Which tenants will actually be managed, and on what organisational scale?
Personas and permissions
Which roles require read access, self-service, approvals or controlled changes?
Integrations
Which Zscaler domains and third-party systems need to be connected within the agreed tenant context?
Operations and service
Which implementation, support and operating services are part of the engagement?
Package, price, term and service scope are defined in the specific quote based on this information.
What does the scenario look like for you?
Use your own assumptions to calculate a possible scenario for self-service and processing effort.
How we calculate: Gross benefit = cases/month × 12 × cost per case × reduction. Net benefit = gross benefit − your CentaurNexus licence. Payback = licence ÷ monthly gross benefit. Net ROI = net benefit ÷ licence. Assumptions: cost = internal staff and process cost per case; relief through self-service and faster handling; excluding one-off onboarding/migration cost and qualitative effects.
The calculator uses only your inputs. The result is a scenario, not a guaranteed return on investment.
Useful information before you start
Why is there no flat list price?+
What information do you need?+
Are all Zscaler domains automatically included?+
How are roles and approvals reflected?+
Where is CentaurNexus operated?+
How are term and service scope defined?+
Is a Zscaler licence included in the CentaurNexus price?+
Why is there no Zscaler price list here?+
Is there a free version of CentaurNexus?+
A quote instead of a price estimate
Tell us the tenant scope, roles, workflows and integrations. We will turn this into a clearly scoped quote or guide you through a prepared demo.