- BFSIBanking, Financial Services & Insurance
- HealthcareComing soon
- ManufacturingComing soon
- Retail & E-CommerceComing soon
iboss
One cloud security platform with a dedicated gateway container for every customer— iboss’s web gateway, CASB, ZTNA, DLP and SD-WAN packages, its standalone AI Security Platform, and how each one is bought. This hub covers two iboss products.
Buy through TechBag
Same software. Better outcome — at a lower cost.
The company, at a glance
Quick answer
Two intel pages. SASE, secure web gateway, ZTNA and AI usage security.
iboss’s line, product by product — two full intel pages: the Zero Trust SASE platform, whose Core, Advanced and Complete packages carry the web gateway, CASB, ZTNA, DLP and SD-WAN, and the AI Security Platform, sold on its own. The K-12 suite, hardware gateways and add-ons are listed below the cards.
iboss Zero Trust SASE
Web, cloud-app and private access per user.
Each customer gets its own containerised gateway with unlimited TLS decryption; ZTNA and SD-WAN start at Advanced, DLP at Complete.
iboss AI Security Platform
See and govern the AI tools staff actually use.
A standalone agent beside any SASE or web gateway: the free tier finds AI apps per user; enforcement and data-leak control are paid.
K-12 EDU Suite
Platform & engineParent Portal app, Classroom Management with a Teacher Portal, and student risk monitoring for schools. Schools buy the same Core, Advanced and Complete packages; the suite is included on agreements of three years or more and paid separately on one-year terms. It is built around US rules such as CIPA and E-rate
MSP and MSSP programme
Platform & engineA channel model in which managed service providers run the iboss platform for their own clients; August eTech, an MSP with 350 clients, is one of iboss’s case studies. It is a way of buying the platform, not a separate product, so it has no page of its own
On-premises and branch gateways
Platform & engineHardware enforcement points for hybrid estates: the SE-170 branch gateway, the NBC-14 node blade chassis and a 1U gateway. They run the same policy as the cloud service and are covered on the Zero Trust SASE page rather than paged on their own
Enhanced Protective DNS
Platform & engineA DNS-security add-on to the platform, sold on top of the DNS filtering already in Zero Trust Core, alongside a Government Protective DNS service for US public bodies. iboss documents no DNS-only product, so TechBag covers it on the Zero Trust SASE page
iboss sells across 1 of the products TechBag carries in network security & SASE. The Network Security & SASE guide shows how the category splits and which part is yours. →
Why “a gateway of your own” is the whole story
Most cloud security services inspect every customer’s traffic on shared infrastructure. iboss gives each customer its own containerised gateway with dedicated IP addresses, and the same container can run in its cloud, inside a chosen country, in your data centre or air-gapped. For estates that must control where traffic is inspected and logs are kept, that is the reason to shortlist it.
Containerised cloud gateways
Each tenant runs in its own container with dedicated IP addresses at no extra cost, so traffic is never mixed with another customer’s, by iboss’s account.
iboss Cloud Connector
Steers traffic and reports posture from Windows, macOS, Linux, ChromeOS, iOS and Android; a network connector runs on AWS, Docker or VMware.
Reporting nodes
Containerised nodes that store and process logs, analytics and telemetry inside a chosen jurisdiction, with real-time streaming to a SIEM; licensed separately.
Hybrid enforcement points
The same containers run in iboss’s cloud of 100+ PoPs, in Azure, inside a named country, in your own data centre or fully air-gapped.
Start with the job — web, private apps, branch network or AI use — then pick the package that first includes it.
Peer & market recognition
Every claim on this hub traces to one of these public signals.
Leader, Radar for SASE 2026
one of the top three of 17 vendors evaluated, as iboss presents it on its home page
Niche Player, SSE Magic Quadrant 2025
published 20 May 2025, when Gartner assessed the offering under the name iboss Zero Trust SSE
Included in the SSE Magic Quadrant 2026
published 29 July 2026; iboss is listed, but TechBag could not verify which quadrant it sits in
Leader, MarketScape for ZTNA 2023
the Worldwide Zero Trust Network Access 2023 vendor assessment, as iboss reports it; a three-year-old placement
Customers’ Choice, Secure Web Gateway 2021
a North America review award from 2021, not an analyst placement, and now dated
$145 million raised
from Francisco Partners and NightDragon; TechBag found no later funding round
Authorized, with StateRAMP
iboss also lists SOC 2 Type II, ISO 27001, CSA STAR Level 2, FIPS 140-2 and Cyber Essentials
One CVE in NVD, fixed in 10.2.0.160
CVE-2024-3378, a medium-severity cross-site scripting flaw in the web gateway login portal, published April 2024
The company in six figures
See the platform, hear the pitch
iboss AI-Powered SASE Platform
A January 2026 overview of the platform under the AI-Powered SASE name iboss now uses on its site.
Paul Martini Interview: iboss Zero Trust Edge – Protecting Organizations from Breaches and Data Loss
Paul Martini at RSA 2022, when the platform was still called Zero Trust Edge; the product has since been renamed.
iboss Classroom Management & Teacher Portal
An April 2025 demo of the K-12 tools: the Teacher Portal, student laptops and student risk management.
Where iboss sits — the grids
Two company-level views you won’t find on any vendor site — tap any dot for the rationale. The category-level grid lives on the product page.
iboss Across Its Solution Areas
Each dot is a iboss solution area: competitive position vs category momentum.
The oldest part of the platform and the heart of Zero Trust Core: web filtering, DNS security and unlimited HTTPS decryption in a per-customer container.
Deployment Choice × SASE Breadth
How many places each vendor lets you run its enforcement — its cloud, a chosen country, your site — vs how much of SASE it delivers.
Per-customer containers that can run in its cloud, inside a named country, in your own data centre or air-gapped; SD-WAN from the Advanced package.
Positions are TechBag’s illustrative synthesis of public review-platform standings and vendor documentation — not a reproduction of any analyst graphic. Verify before relying on it.
New to this? Learn it properly.
Zero-jargon starting points, in reading order. Each links into the deep education on the product page.
Where should you start with iboss?
Answer three questions; we’ll point you at the right starting product. No email required — this isn’t that kind of quiz.
1. What problem is forcing the decision?
2. What do you already run?
3. How fast must it start?
One platform, three packages
iboss sells one SASE platform as Core, Advanced or Complete, plus add-ons; the AI Security Platform is the only product sold on its own.
Read →Which package do you need?
Core covers web, DNS and basic CASB; Advanced adds ZTNA, SD-WAN and sandboxing; Complete adds advanced DLP, OCR and IPS.
Read →Names that changed
Older videos and reports say Zero Trust Edge or Zero Trust SSE; both refer to the platform iboss now calls Zero Trust SASE.
Read →Free AI visibility, paid control
The free tier lists the AI tools in use and who uses them; blocking, redirecting and data-leak rules need a paid tier.
Read →Logs, India and CERT-In
iboss publishes no log retention period. Confirm 180 days in writing for CERT-In, or stream the logs to your own SIEM.
Read →Where iboss fits in SASE
TechBag’s SASE & SSE guide sets iboss Zero Trust SASE beside Zscaler, Netskope, Prisma and the rest, by module and India PoPs.
Read →The acronym decoder
Every term on these pages, in one place- SASE
- Secure access service edge: network and security services delivered together from the cloud.
- SSE
- Security service edge: the security half of SASE, without the SD-WAN network half.
- SWG
- Secure web gateway: an inline proxy that opens encrypted web sessions and filters them by rule.
- CASB
- Cloud access security broker: discovers SaaS apps in use and controls what people do there.
- ZTNA
- Zero trust network access: per-app access to private systems in place of a VPN.
- DLP
- Data loss prevention: finds sensitive data in transit and blocks or logs its exit.
- RBI
- Remote browser isolation: sites render away from the device and only pixels arrive.
- SD-WAN
- Software-defined WAN: routes branch traffic over several links under central policy.
- FWaaS
- Firewall-as-a-service: firewall checks on non-web traffic, run in the provider’s cloud.
- Shadow AI
- AI chat tools and assistants staff use without approval from IT or security.
- PAC file
- Proxy auto-config: a small script telling browsers which proxy to send traffic to.
- Cloud Connector
- The iboss agent that tunnels a device’s traffic and reports its security posture.
Buy it like you’ve done this before
The procurement playbook TechBag runs with IT buyers — steps, licensing cheat-sheet, and the pitfalls that cost quarters.
Pick the package by module
List what you need first. ZTNA and SD-WAN begin at Advanced, advanced DLP and OCR at Complete, and browser isolation is an add-on whatever the package.
Count users, then add reporting
Every package is priced per user per year, and the reporting licence is sold separately yet required for the platform to work. Get both lines on one quote.
Ask where your traffic is served
iboss lists data centres in Mumbai and Delhi. Ask which ones your users will reach, and whether logs can be kept in an Indian reporting node.
Fix the log retention in writing
No retention period is published. Agree 180 days for CERT-In in the contract, or plan to stream the logs to your SIEM from day one.
Run the proof of concept
A 30-day proof of concept is offered, subject to scoping. Test TLS decryption, the Cloud Connector on every OS you run and private-app access.
Get it priced in rupees
iboss publishes no INR price and no list price at all. TechBag scopes the package, add-ons, users and reporting, and quotes the total in INR with GST.
The licensing cheat-sheet
| Product | Licensing model | How you enter | Best for |
|---|---|---|---|
| Zero Trust Core | Per user per year · web filtering, URL categories, DNS security, basic CASB, posture checks and HTTPS decryption | Quote | Web security |
| Zero Trust Advanced | Per user per year · Core plus ZTNA, SD-WAN, sandboxing, threat feeds, micro-segmentation and inline CASB | Quote | VPN replacement |
| Zero Trust Complete | Per user per year · Advanced plus AI-powered CASB, advanced DLP, OCR and IPS | Quote | Data protection |
| Add-ons | On any package · browser isolation, SSPM+DSPM, AI Chat Security, Exact Data Match, Enhanced PDNS, DEM, cold storage | Quote per add-on | Filling gaps |
| Reporting | Sold separately and required for the platform to function | Quote | Every deployment |
| AI Security Platform | Standalone · free visibility tier, paid enforcement and data-leak prevention | Free tier; paid on quote | AI usage control |
iboss is quote-only: Zero Trust Core, Advanced and Complete are priced per user per year, add-ons such as browser isolation are extra, and the required reporting licence is sold separately. The AI Security Platform has a free visibility tier; paid tiers are unpriced. TechBag gets the quote itemised in INR with GST.
Five pitfalls that cost buyers quarters
Quoting a reseller schedule as list
The £16–30 per user figures online come from a UK reseller’s G-Cloud schedule for Europe-hosted service, with reporting extra. They are not iboss prices.
Expecting ZTNA in Core
Zero Trust Core is web security. Private access, SD-WAN and sandboxing start at Advanced, so a Core quote will not replace your VPN.
Leaving reporting off the quote
The reporting licence is sold separately but required for the platform to work. A per-user figure without it understates the real annual cost.
Assuming Indian data residency
Mumbai and Delhi data centres are listed, but iboss does not document where Indian customers’ logs are stored. Get the location in the contract.
Treating the free AI tier as control
The free AI Security Platform tier shows usage only. Blocking prompts or stopping data leaks needs a paid tier, and those prices are not published.
The evaluation kit
Each intel page carries an 8-question vendor checklist and a value calculator:
Skip the homework entirely
Bring your requirements and current tool bills — a TechBag advisor models the whole decision for you.
Book a discovery call →The forces shaping this market
Four trends with momentum scores (TechBag’s read of analyst and market signals) — and what each means for your next decision.
Category momentum — estimated market growth
Illustrative CAGR synthesis**TechBag’s illustrative estimate, not a quoted analyst figure. The takeaway: buyers are adding AI usage controls and zero trust access on top of the web gateway — which is why iboss now sells an AI Security Platform beside its SASE packages.
AI use as a data channel
iboss launched a standalone AI Security Platform on 1 July 2026, free for visibility, that runs beside any SASE or SSE product.
What it means for you
Find out which AI tools staff use before you write any blocking rule.
Security inside the country
iboss offers its gateway and reporting containers inside a designated country, in your data centre or air-gapped.
What it means for you
Ask every vendor where logs are stored, not only where traffic is inspected.
SSE vendors adding the network
iboss renamed Zero Trust SSE to Zero Trust SASE, with SD-WAN included from its Advanced package and a GigaOm SASE Leader rating in 2026.
What it means for you
Decide whether you want SD-WAN from your security vendor before you compare.
Analyst placements diverge
Gartner placed iboss as a Niche Player for SSE in 2025, while GigaOm rated it a Leader for SASE in 2026.
What it means for you
Read what each report measures rather than quoting a single badge.
Questions buyers ask about iboss
Ready to shortlist iboss?
Open either intel page for the deep dive, or let a TechBag advisor build the case with you — the package and add-ons to license, the reporting licence, where your logs will be kept, quotes, trials, GST invoicing and lifecycle support included.
Stats, positions and figures are illustrative syntheses of public materials; verify before purchase.