According to CRN, Zscaler announced Monday it has acquired AI security startup SPLX to expand its platform for protecting generative AI and agentic adoption. The acquisition brings capabilities in AI asset discovery, automated red teaming, and governance to Zscaler’s Zero Trust Exchange platform. Zscaler Founder and CEO Jay Chaudhry stated the integration will enable the company to “secure the entire AI lifecycle on one platform.” This marks Zscaler’s second acquisition of 2025 following its $675 million purchase of Red Canary in August, with Chaudhry previously identifying AI security as the “third big area” for the company alongside zero-trust security and security operations. This strategic move signals a significant shift in the cybersecurity landscape.
The AI Security Land Grab Intensifies
Zscaler’s acquisition of SPLX represents a critical moment in the cybersecurity industry’s race to address the massive security gaps created by generative AI adoption. Traditional security vendors are facing existential threats as AI workloads bypass conventional security perimeters and create entirely new attack surfaces. The speed of this acquisition—targeting a company founded just last year—demonstrates how quickly established players must move to capture emerging capabilities. We’re witnessing a classic land grab scenario where vendors who fail to integrate AI-specific security features risk becoming irrelevant within 24-36 months.
Winners and Losers in the New AI Security Era
This move creates immediate pressure on competing zero-trust and cloud security providers like Palo Alto Networks, CrowdStrike, and Netskope to make similar acquisitions or accelerate internal development. The integration of SPLX technologies positions Zscaler to capture enterprise budget allocated for AI security, which Gartner estimates will grow from virtually zero to billions within three years. Smaller pure-play AI security startups now face increased acquisition pressure as enterprises prefer consolidated platforms over point solutions. Customers benefit from reduced complexity but may face vendor lock-in and premium pricing as consolidation reduces competition.
Beyond Technology: The Business Impact
The strategic importance extends beyond technical capabilities. Zscaler’s positioning against traditional network security becomes even stronger with AI-specific features that legacy firewall vendors cannot easily replicate. This acquisition enables Zscaler to maintain its premium valuation multiples by demonstrating growth in adjacent markets while protecting its core zero-trust business from disruption. The timing is particularly strategic as enterprises are just beginning to formalize AI security policies and budget allocations, allowing Zscaler to establish itself as the default choice before competitors can respond effectively.
The Road Ahead for AI Security
Looking forward, expect to see rapid feature integration followed by significant price increases for AI security capabilities as vendors seek to monetize these new investments. The market will likely bifurcate between platforms offering comprehensive AI security and specialized tools focusing on niche use cases. Zscaler’s early move gives them a 12-18 month head start, but sustained success will depend on execution quality and the ability to translate technical capabilities into measurable risk reduction for customers navigating unprecedented AI security challenges.
