Attackers got into the refrigeration controllers of about 700 European supermarkets: spoiled stock, several fires. The controllers had web logins open to the internet and predictable default passwords.
With Zero Trust Network Access (ZTNA) in front, those logins wouldn't have been reachable at all.
#Zenarmor #ZTNA #CyberSecurity #CybersecurityAwarenessMonth
Missed the last OPNsense update? 26.7.6 is worth taking a look at.
It patches several FreeBSD security issues, including jail escapes and a kernel TLS DoS, fixes the lockout handler, and moves interface settings to the new MVC/API.
Zenarmor adds enterprise-grade NGFW capabilities to OPNsense, including deep packet inspection and full TLS inspection to find threats inside encrypted traffic.
Release notes: forum.opnsense.org/index.php…
#OPNsense #Zenarmor #NetworkSecurity #NGFW #CyberSecurity
zenarmor retweeted
A continuation of the @OPNsense transparent filtering bridge (for 26.1-26.7) showing how to set up 4 different security services on the bridge. youtu.be/MFb6wOnluoc
zenarmor retweeted
🚨 Congratulations to @zenarmor on being named a Top Infosec Innovator Awards 2026 Finalist during #BlackHat!
Featured in the BlackHat Spotlight by Cyber Defense Magazine. Watch for this cybersecurity innovator at the #CyberDefenseCon CISO Conference this October in Orlando. 🌟
#CISOConference
zenarmor retweeted
People are using AI just about everywhere now, which means the traffic you need to inspect is everywhere too. So security has to be able to run wherever that traffic actually is.
I wrote a piece for SDxCentral on why enforcement has to happen where the traffic is created, at the branch, the edge, the device, rather than routing it somewhere far away first.
Link here: sdxcentral.com/opinions/new-…
Most SASE platforms treat channel partners as a way to move product. I’ve never really seen it that way.
I sat down with @ChannelInsider to talk about why our model lets partners host and run the infrastructure themselves, in their own environments, so they keep control of enforcement and the customer relationship.
Here’s the link: channelinsider.com/channel-b…
Cybersecurity Architect's handbook has a section which illustrates how you can use Zenarmor to introduce #ZTNA into greenfield deployments.
There's an offer to giveaway 2 copies of the book.
Might be your lucky day today 👊
Security breaks when systems are stitched together instead of designed to work together.
Murat Balaban, CEO & Founder of @zenarmor:
"Most security stacks today are built as integrations rather than architectures."
The same traffic gets inspected multiple times, policies behave differently across environments, and decisions become fragmented.
#NetworkSecurity #ZeroTrust #SecOps #ThreatDetection #EnterpriseSecurity #NetworkArchitecture
zenarmor retweeted
Found in the Wild!
secdoc.tech/found-in-the-wil…
I'm thrilled to share that the second edition of the Cybersecurity Architect's Handbook is officially out in the world.
#book @zenarmor #cybersecurity @PacktPub #architecture #SASE #newrelease
When we say "distributed enforcement," here's what we actually mean.
Traditional SASE sends your traffic to a centralized cloud PoP for inspection. The check happens far from where the user is. Then the traffic comes back. That detour creates latency, introduces privacy concerns, and means your security depends on someone else's infrastructure staying up.
Distributed enforcement flips that. Inspection happens right where the traffic originates. On the endpoint. At the gateway. At the edge. The same policies, the same protection, but without the round trip.
It's the difference between sending every letter through a central post office and checking it at the mailbox.
#SASE #ZeroTrust #NetworkSecurity
zenarmor retweeted
Network Security Is Still Relevant
The perimeter, as we know it, is dead, for sure. The castle and moat model is gone. And that’s true. But what happened next is that a lot of people took that to mean network security itself doesn’t matter anymore. Just move everything to the cloud, put identity in front of it, and you’re done.
Except that’s not what happened in practice. Organizations still have networks. They still have traffic that needs to be inspected. They still have users connecting from everywhere on every kind of device. The perimeter didn’t disappear. It just moved to wherever your people are.
And that’s what gets MSPs and MSSPs excited about what we’re building. Because Zenarmor brings network security back, but in a way that actually matches how organizations work today.
The inspection happens wherever the user is. On the endpoint, at the edge, in the cloud. It’s not about backhauling traffic to some centralized location anymore. It’s about protecting people where they actually are.
For our partners especially, that changes the conversation with their customers. Instead of trying to sell a complex stack of point solutions that they have to manage across dozens of accounts, they can deliver network security through a single app that deploys in minutes and scales across their entire customer base.
That’s why they lean in when they see it. It’s not just another security product. It’s network security made relevant again for how the world actually works now.
Every new tool you add to the security stack creates another integration point, another policy set, another dashboard, and another potential blind spot.
Most organizations don't get breached because they lack tools. They get breached because too many tools create gaps between them. Policies don't align, logs don't correlate and rules conflict. IT teams now spend more time fine-tuning configurations than responding to actual threats.
Complexity isn't just an operational headache. It's a security risk that compounds over time, especially for lean teams managing distributed environments.
We wrote about why simplifying the stack is a security decision, not just an efficiency play. Link in the thread.
When your SASE vendor inspects traffic in their cloud, your data is leaving your environment.
For many organizations, that's fine. For regulated industries, it's a compliance headache. Healthcare data crossing borders. Financial records sitting in a third-party data center. Government traffic flowing through infrastructure you don't control.
This isn't a theoretical problem. GDPR, HIPAA, and data residency laws all have requirements about where sensitive data is processed and stored.
The simplest way to solve it: inspect traffic locally. If the data never leaves your environment, the residency question answers itself.
#DataPrivacy #Compliance #SASE
Zenarmor deploys in minutes. Not days or weeks.
One app. Runs on endpoints, gateways, edge, and cloud. Full SASE protection from the moment it's installed. No hardware to rack. No PoPs to configure. No service chains to build.
If you've been evaluating SASE solutions and keep running into complexity, sign up for a free trial and see the difference a single-app architecture makes. Link in the thread 👇










