Zenarmor on Feb. 24 launched a global SASE Channel Partner Program aimed at MSPs, MSSPs, ISPs, and security-focused channel partners seeking to deliver distributed secure access services without relying on centralized cloud points of presence (PoPs).
The Cupertino, Calif.-based vendor said its partner-first initiative formalizes a go-to-market strategy built around what it calls a single-app, single-stack, single-pass architecture.
Distributed SASE without centralized PoPs
Most SASE partner programs are built on centralized inspection, proxy-based architectures, and service chaining across multiple security tools.
Zenarmor is positioning its channel program as an alternative that shifts enforcement closer to users, applications, and data across on-premises, cloud, edge, and remote environments.
The platform runs as a single application across endpoints, gateways, network edges, and cloud environments, and is centrally managed through Zenconsole.
By eliminating forced backhaul to cloud PoPs, Zenarmor said partners can reduce latency and maintain greater control over traffic inspection and policy enforcement.
“Service providers and channel partners often face significant integration and operational challenges when delivering traditional SASE solutions built on SD-WAN overlays and cloud-based PoPs,” said Shamus McGillicuddy, vice president of research at Enterprise Management Associates (EMA).
“For too long, SASE has been synonymous with centralized cloud inspection and vendor-controlled infrastructure,” said Murat Balaban, founder and CEO of Zenarmor.
“We built Zenarmor differently. Our architecture was designed from day one to enforce security wherever users and applications operate, without forcing traffic through external PoPs or service chains. This new channel program aligns our go-to-market with that architectural reality. It empowers partners to deliver the entire SASE stack as a distributed, high-performance service they control. Partners are no longer reselling someone else’s cloud, they are operating their own modern, omnipresent SASE infrastructure,” Balaban continued.
Enabling new managed security revenue streams
The vendor said the program allows partners to deliver full SASE functionality, including Zero Trust Network Access (ZTNA), secure internet access, and inline inspection, without complex service chaining or multi-vendor orchestration.
For MSPs and MSSPs, the model is designed to accelerate onboarding and time-to-revenue while preserving data sovereignty.
Because inspections occur locally, organizations in regulated industries or regions with strict data-residency requirements can avoid sending sensitive traffic outside their geographic boundaries.
“Zenarmor gives us the ability to deliver SASE as a distributed service without sacrificing performance or control,” said Bugra Gumus, the CEO of Los Angeles-based MSP Silvercloud Security and Technology Solutions.
“Eliminating forced backhaul and accelerating deployment has reshaped how we deliver differentiated managed security services to our customers. Because it can be deployed across a wide variety of operating systems, we can establish a seamless security chain that begins at the user’s device and extends all the way to the cloud server. This flexibility, combined with the ability to manage VPN access through granular policies, offers our customers immense ease of use. Ultimately, the agility of the installation process provides a significant time-saving advantage for both our team and the end-users we serve,” Gumus said.
ISP and CPE opportunities
Zenarmor is also targeting ISPs looking to monetize existing customer premises equipment (CPE).
The company said its OpenWRT-based deployment model allows providers to transform deployed CPE into SASE enforcement points without hardware refreshes or cloud-based service insertion.
“At Spectrum, we are seeing that the biggest risk today isn’t inside a traditional perimeter, it is in how people work,” said Mark Weinberger, the Client Solutions Director at Spectrum Networks, a leading Australian ISP.
“Users are remote, mobile, and constantly moving between networks. The old gateway-only model no longer reflects reality. Zenarmor enables us to shift enforcement closer to the endpoint while maintaining full visibility and control, allowing us to offer modern Zero Trust security that fits today’s distributed environments,” Weinberger added.