Zenarmor debuts distributed SASE channel partner push

Zenarmor has launched a global channel partner programme to deliver secure access service edge (SASE) through managed service providers, managed security service providers, internet service providers and specialist security partners.

The Zenarmor SASE Channel Partner Program outlines a distribution model that does not rely on vendor-owned cloud points of presence (PoPs) or service chaining across multiple security services. Instead, partners deploy Zenarmor's software on customer-owned or partner-managed infrastructure. Zenarmor positions this as a way for partners to retain operational control and meet data sovereignty requirements.

Partner model

The approach centres on distributed enforcement. Security policies and inspection run close to where users and applications operate, including on-premises sites, cloud environments, edge locations and remote users. Partners can manage multiple customers through a central console called Zenconsole.

In traditional SASE deployments, network traffic often passes through central inspection points hosted by a vendor or a hyperscale cloud provider. Zenarmor is promoting an alternative architecture that keeps inspection local, reducing reliance on third-party infrastructure and avoiding the need to send traffic to central locations for policy enforcement.

The programme targets service providers that want to package SASE as a managed service, including those in markets where latency, regulatory restrictions or customer requirements limit the use of centralised cloud inspection.

Operational control

Bugra Gumus, CEO of Silvercloud Security and Technology Solutions, said the model suits managed security delivery where providers want control over service operations.

"Zenarmor gives us the ability to deliver SASE as a distributed service without sacrificing performance or control," said Bugra Gumus, CEO, Silvercloud Security and Technology Solutions.

Gumus highlighted deployment across different operating systems and policy-based VPN access. "Eliminating forced backhaul and accelerating deployment has reshaped how we deliver differentiated managed security services to our customers. Because it can be deployed across a wide variety of operating systems, we can establish a seamless security chain that begins at the user's device and extends all the way to the cloud server. This flexibility, combined with the ability to manage VPN access through granular policies, offers our customers immense ease of use. Ultimately, the agility of the installation process provides a significant time-saving advantage for both our team and the end-users we serve," he said.

For ISPs, Zenarmor is highlighting the option to use deployed customer premises equipment (CPE) as enforcement points. It supports open networking platforms including OpenWRT, which could allow providers to offer security services without replacing hardware across the installed base.

Market context

SASE has become a broad category that blends network access and security. Many established offerings combine secure web gateways, zero trust network access and other security functions, with traffic inspection delivered through vendor-controlled infrastructure. Service providers often integrate these elements with SD-WAN services and managed security operations.

Zenarmor is proposing a different split of responsibilities between vendor and partner. Under the model, partners deploy and operate the service layer, while Zenarmor supplies the software and management tools. The approach also aligns with interest in local processing and inspection, particularly in regulated industries and jurisdictions with strict data residency requirements.

Shamus McGillicuddy, Vice President of Research at Enterprise Management Associates, said channel partners often face complexity when integrating traditional SASE services with cloud-based inspection.

"Service providers and channel partners often face significant integration and operational challenges when delivering traditional SASE solutions built on SD-WAN overlays and cloud-based PoPs," said Shamus McGillicuddy, Vice President of Research at Enterprise Management Associates (EMA). "Zenarmor simplifies that model by consolidating connectivity and security into a single-application, distributed architecture that can run across endpoints, gateways, cloud environments, and ISP customer premises equipment, eliminating reliance on centralized PoPs. This approach offers partners greater flexibility, performance, and control in delivering SASE services, which is why EMA recognized Zenarmor as a Vendor to Watch."

ISP interest

Spectrum Networks, an Australian ISP, is among the partners quoted in the announcement. It cited changes in work patterns and user mobility as drivers for endpoint-adjacent policy enforcement.

"At Spectrum, we are seeing that the biggest risk today isn't inside a traditional perimeter, it is in how people work," said Mark Weinberger, Client Solutions Director, Spectrum Networks. "Users are remote, mobile, and constantly moving between networks. The old gateway-only model no longer reflects reality. Zenarmor enables us to shift enforcement closer to the endpoint while maintaining full visibility and control, allowing us to offer modern Zero Trust security that fits today's distributed environments."

According to Zenarmor, the partner programme covers secure internet access, zero trust access and inline inspection without routing traffic through central cloud inspection points. Partners can deploy the software as a single application across network edges, gateways and endpoint devices, then apply policies across customers from Zenconsole.

Zenarmor also claims performance benefits from local inspection, including improved user experience for SaaS and real-time applications. It also says local inspection can reduce exposure to cross-border data transfer risks because sensitive traffic does not need to leave a country or region for inspection.

Murat Balaban, Founder and CEO of Zenarmor, said the company designed its architecture around local enforcement and aligned its channel strategy accordingly. "For too long, SASE has been synonymous with centralized cloud inspection and vendor-controlled infrastructure," he said. "We built Zenarmor differently. Our architecture was designed from day one to enforce security wherever users and applications operate, without forcing traffic through external PoPs or service chains. This new channel program aligns our go-to-market with that architectural reality. It empowers partners to deliver the entire SASE stack as a distributed, high-performance service they control. Partners are no longer reselling someone else's cloud, they are operating their own modern, omnipresent SASE infrastructure."

The Zenarmor SASE Channel Partner Program is open for partner enrolment globally.