
NUMBAT // Quarry for the enterprises that operate Zscaler. NUMBAT // MSP for the providers that manage it across many tenants.
Products
Two products built on the same platform. Pick the one that matches how you use Zscaler.

Analytics
Real-time analytics and AI reporting for the team that runs your Zscaler tenant. Up to 13 months of hot logs, fast queries, and answers without the SIEM bill.

Control
Drift detection, audit trails, compliance evidence, and per-seat billing across every Zscaler tenant you manage.
Zscaler generates a torrent of logs across ZIA, ZPA, ZDX and ZCC, scattered across tenants and admin consoles. NUMBAT ingests it all into one queryable store, so the questions you actually need to answer — “what changed?”, “who saw what?”, “is this compliant?” — get answered in seconds.

How it works
No agent. No on-prem appliance. No migration. NUMBAT reads from your existing Zscaler tenants over the public APIs and the NSS feed protocol.
Step 1
Add tenants by pasting OneAPI credentials. NUMBAT establishes the read or read/write scopes you control, and configures NSS streaming with one click.

Step 2
Configuration is snapshotted on a schedule. NSS feeds stream in real-time to a multi-tenant analytics cluster running on our own hardware in Tier 1 data centres.

Step 3
Drift, compliance, audit, and traffic reports run on demand or on schedule. White-label them, export to PDF, send to the customer.

20 minutes. We'll walk you through drift, audit, and reporting on a live demo tenant — and answer pricing questions on the call.