Skip to content
SPECIFICTION
Get listed

Cisco Secure Access

umbrella.cisco.com

Free trial WebWindowsmacOSLinuxiOSAndroid
Visit umbrella.cisco.com
Spec score 8.8 #1 of 27 in Cloud Access Security Broker Software

What it is

Cisco Secure Access is a cloud-delivered Security Service Edge solution that protects access to internet, SaaS, and private applications. It combines zero trust network access, Secure Web Gateway, CASB, Firewall as a Service, DNS security, Data Loss Prevention, Remote Browser Isolation, and digital experience monitoring. CASB provides visibility and control over SaaS use, including detection of unsanctioned applications. ZTNA grants application-specific access using identity, device posture, and contextual policy, with access denied by default. Controls for generative AI applications and agents are intended to help identify shadow AI and reduce sensitive data exposure. Administration uses a cloud-managed console for centralized policy creation and aggregated reporting. Listed integrations include Microsoft Intune, Jamf Pro, ServiceNow, Splunk, Cisco ISE, browsers, and Cisco services; identity-provider examples include Active Directory, Azure AD, and Okta. Subscriptions are licensed per covered user, with price depending on user count and term; no price is listed. A 14-day trial is available. Subscriptions include 24x7 technical support, software updates, and onboarding assistance. Cisco describes the service for organizations securing users, devices, applications, and AI agents across office, home, and remote settings.

Spec sheet

What it does
Cisco Secure Access is a cloud-delivered Security Service Edge service that securely connects users, devices, applications and AI agents.Read 19 Oct 2026 · umbrella.cisco.com
Intended users
Cisco describes Secure Access for organizations securing users, devices, applications, and AI agents across office, home, and remote work settings.Read 29 Sep 2026 · cisco.com
Platforms
Cisco Secure Client supports Windows, macOS, Linux, iOS, and Android; clientless browser-based ZTNA is also available.Read 29 Sep 2026 · cisco.com
Trial
Cisco provides a Secure Access free trial, and says customers can purchase a subscription during the trial or contact their sales representative to request an extension.Read 29 Sep 2026 · cisco.com
API
Secure Access exposes a REST API described with OpenAPI 3.x and JSON requests and responses.Read 19 Oct 2026 · developer.cisco.com
Integrations
Documented integrations include Chrome Enterprise Browser, Microsoft Intune, Jamf Pro, ServiceNow or Splunk event delivery, Microsoft Edge for Business, Island, ISE, Catalyst SD-WAN, Cisco Identity Intelligence and threat-intelligence feeds.Read 19 Oct 2026 · cisco.com
Compliance
Cisco lists Secure Access as SOC 2 Type 2, CSA STAR, ISO 27001, ISO 27017 and ISO 27018 certified; ISO 27701 is in process.Read 19 Oct 2026 · cisco.com
Support
Subscriptions include SWSS Enhanced support with 24x7 cloud-security support, software updates, onboarding and adoption assistance; Premium adds prioritized handling and an assigned expert.Read 19 Oct 2026 · cisco.com
Headquarters
San Jose, California, United StatesRead 28 Sep 2026 · umbrella.cisco.com
Founded
1984Read 28 Sep 2026 · umbrella.cisco.com
AI security
Secure Access discovers generative-AI applications and model repositories and applies controls intended to reduce sensitive-data exposure.Read 19 Oct 2026 · umbrella.cisco.com
API authentication
The API uses OAuth 2.0 client credentials with short-lived bearer tokens that expire after one hour.Read 19 Oct 2026 · developer.cisco.com
API licence
API use is governed by Cisco Baseline API License Terms in addition to the customer agreement.Read 19 Oct 2026 · developer.cisco.com
API scope
Public API resources cover administration, deployments, investigations, policies, reports, DLP events, UEBA and application discovery.Read 19 Oct 2026 · developer.cisco.com
App limitation
The Cisco Secure Client iOS listing includes user complaints about automatic VPN connections, delayed push approvals, login failures and inability to switch VPN groups.Read 19 Oct 2026 · apps.apple.com
CASB
CASB provides visibility and control over SaaS application use, including detection of unsanctioned applications.Read 29 Sep 2026 · umbrella.cisco.com
CASB capability
CASB visibility identifies sanctioned and unsanctioned SaaS applications and supports policy control over their use.Read 19 Oct 2026 · umbrella.cisco.com
Core security functions
The platform combines ZTNA, secure web gateway, CASB and firewall-as-a-service in one service.Read 19 Oct 2026 · umbrella.cisco.com
Data protection
Its DLP controls identify sensitive information and reduce unauthorized movement across internet, SaaS, private-application and endpoint channels.Read 19 Oct 2026 · umbrella.cisco.com
Documentation depth
Cisco Help documents deployment, mass installation, Windows/macOS/Linux clients, iOS and Android clients, integrations, APIs, troubleshooting and reporting.Read 19 Oct 2026 · cisco.com
Experience monitoring
Experience Insights, powered by ThousandEyes, helps identify whether access problems originate with a device, network, application or connection path.Read 19 Oct 2026 · umbrella.cisco.com
Government compliance
The compliance page lists FedRAMP Class D and GovRAMP authorization, with CJIS and HIPAA alignment claims.Read 19 Oct 2026 · cisco.com
Identity providers
The data sheet names Active Directory, Azure AD, and Okta among supported SAML identity provider examples.Read 29 Sep 2026 · cisco.com
Licence
The service is proprietary commercial software sold through Cisco subscriptions rather than open-source licensing.Read 19 Oct 2026 · cisco.com
Limit: complexity
Independent reviewers repeatedly report difficult initial setup, complex policy design and a steep learning curve for smaller or less specialized teams.Read 19 Oct 2026 · g2.com
Limit: integrations
TrustRadius and G2 reviewers cite immature third-party integrations and occasional clunky Duo, ISE, EDR or firewall integration work.Read 19 Oct 2026 · trustradius.com
Limit: interface and logging
TrustRadius reviewers report awkward navigation, incomplete logging, buggy pages and limited troubleshooting visibility.Read 19 Oct 2026 · trustradius.com
Limit: pricing
G2 reviewers describe premium pricing as difficult for smaller organizations and say licensing and feature entitlements can be hard to understand.Read 19 Oct 2026 · g2.com
Maker company facts
LinkedIn lists Cisco as a public company founded in 1984, headquartered in San Jose, California, with more than 10,001 employees.Read 19 Oct 2026 · linkedin.com
Maker legal name
Crunchbase identifies the maker as Cisco Systems, Inc.Read 19 Oct 2026 · crunchbase.com
Management
Cisco provides a cloud-managed console, unified client, centralized policy creation, AI-assisted policy generation and aggregated reporting.Read 19 Oct 2026 · cisco.com
Mobile requirements
Client-based ZTNA documentation lists iOS 17.2, Android 12 or newer depending on Knox mode, Android 14+ for the Zero Trust Access app, and Android-based ChromeOS support.Read 19 Oct 2026 · cisco.com
Notable limits
Cisco Secure Access subscriptions are licensed per covered user, and the ordering guide says pricing varies by user count and subscription term.Read 29 Sep 2026 · cisco.com
Notable news
Cisco announced Cisco Secure Access as generally available on September 13, 2023, describing it as an evolution of Umbrella Secure Internet Gateway with added ZTNA and VPNaaS.Read 19 Oct 2026 · blogs.cisco.com
Praise: remote access
G2 reviewers commonly describe smooth remote access, centralized control, strong identity integration and an effective replacement for legacy VPN access.Read 19 Oct 2026 · g2.com
Praise: unified security
TrustRadius reviewers repeatedly praise consolidating ZTNA, FWaaS and DNS security, along with centralized dashboards and straightforward initial deployment.Read 19 Oct 2026 · trustradius.com
Rating on Apple App Store
3.9 out of 5 from 2.1K ratings for Cisco Secure ClientRead 19 Oct 2026 · apps.apple.com
Rating on G2
4.3 out of 5 from 70 reviewsRead 19 Oct 2026 · g2.com
Rating on Gartner Peer Insights
4.9 out of 5 from 94 ratingsRead 19 Oct 2026 · gartner.com
Rating on GetApp
4.0 out of 5 from 2 reviewsRead 19 Oct 2026 · getapp.com
Rating on TrustRadius
8.9 out of 10 from 67 reviewsRead 19 Oct 2026 · trustradius.com
Security capabilities
It combines ZTNA, Secure Web Gateway, CASB, Firewall as a Service, DNS security, Data Loss Prevention, Remote Browser Isolation, and digital experience monitoring.Read 29 Sep 2026 · cisco.com
Self-hosting
Cisco describes Secure Access as cloud-delivered and provides Cisco-hosted service components, not a self-hosted deployment edition.Read 19 Oct 2026 · umbrella.cisco.com
System requirements
Cisco Secure Client supports vendor-maintained generally available operating-system releases unless release notes state otherwise; Secure Access client packages require version 5.1.17 or newer on Windows, macOS and Linux.Read 19 Oct 2026 · cisco.com
Threat intelligence
Cisco Talos threat intelligence supplies threat blocking and investigation data for Secure Access protections.Read 19 Oct 2026 · cisco.com
Umbrella transition
Cisco says Umbrella renewals continue through January 2028 and support through January 2029 while customers transition to Secure Access.Read 19 Oct 2026 · umbrella.cisco.com
VPNaaS
VPN as a Service supports private applications and traffic types that are not suitable for application-specific ZTNA.Read 19 Oct 2026 · umbrella.cisco.com
Zero trust
ZTNA grants application-specific access using identity, device posture, and contextual policy, with access denied by default.Read 29 Sep 2026 · umbrella.cisco.com

Plans and prices

DNS Defense free trial Free 14-day trial DNS-layer threat blocking · roaming and office protection · cloud malware protection · cloud DLP Read 19 Oct 2026 · cisco.com
Cisco Secure Access subscription Priced on request Tiered pricing based on covered-user count and subscription term · standard terms of 12, 36, or 60 months · Essentials and Advantage packages Read 29 Sep 2026 · cisco.com
Secure Access Advantage Priced on request 12-, 36-, or 60-month subscription; annual or prepaid billing Advanced Secure Internet Access or Secure Private Access package · user-based licensing · minimum 50 users for SIA/SPA billing SKUs Read 19 Oct 2026 · cisco.com
Secure Access Essentials Priced on request 12-, 36-, or 60-month subscription; annual or prepaid billing Secure Internet Access or Secure Private Access · user-based licensing · minimum 50 users for SIA/SPA billing SKUs Read 19 Oct 2026 · cisco.com

Every Cisco Secure Access plan and price →

Strong points and limits

Strong points

  • Combines ZTNA, CASB, web gateway, and DLP.
  • ZTNA uses identity, device posture, and contextual policy.
  • Includes controls for generative AI applications and agents.
  • Centralizes policy creation and aggregated reporting.
  • Subscriptions include 24x7 technical support.

Limits

  • No public price is listed.
  • Pricing varies by covered-user count and term.
  • No free plan is listed.
  • ISO 27701 certification is in process.

Who it suits

Cisco Secure Access suits organizations seeking to protect access for users, devices, applications, and AI agents across office, home, and remote work. Its per-user licensing and term-dependent pricing call for a quote based on the organization’s coverage needs.

Cisco Secure Access in depth

Read the full write-up

Cisco Secure Access is a cloud-delivered security service edge platform for controlling access to internet, SaaS, and private applications. It is best suited to organizations protecting users, devices, applications, and AI agents across office and remote work. Its broad security coverage and centralized management are compelling, but per-user licensing and multi-year terms call for careful budgeting.

Overview

Secure Access combines zero-trust network access (ZTNA), a secure web gateway, cloud access security broker (CASB), firewall as a service, DNS security, data loss prevention (DLP), remote browser isolation, and digital experience monitoring. That breadth can reduce the number of separate controls a security team has to manage. It is a more substantial commitment than a standalone proxy or filtering tool, however, and its value depends on using enough of the suite to justify a subscription.

ZTNA grants access to specific applications based on identity, device posture, and contextual policy, denying access by default. CASB provides visibility and control over SaaS use, including detection of unsanctioned applications. Controls for generative AI applications and agents help teams identify shadow AI and reduce sensitive-data exposure.

Key features

Centralized administration: A cloud-managed console, unified client, centralized policy creation, and aggregated reporting bring management together. This suits teams seeking consistent policy across users and applications; organizations that need only one narrow control may not benefit from the breadth.

Web and data controls: Inline and API-based controls, SSL inspection, web filtering, custom blocklists, safe search, filtering schedules, DLP, and advanced activity reports support layered oversight. These controls offer more than basic URL filtering, though they require licensing each covered user.

Integrations and identity: Cisco lists integrations with Microsoft Intune, Jamf Pro, Chrome Enterprise Browser, Microsoft Edge for Business, Island Enterprise Browser, ServiceNow, Splunk, Cisco ISE, Catalyst SD-WAN, and Cisco Identity Intelligence. Supported SAML identity provider examples include Active Directory, Azure AD, and Okta, giving organizations several familiar options for connecting identity and operations.

Compliance and support: Cisco lists SOC 2 Type 2, CSA STAR, ISO 27001, ISO 27017, and ISO 27018 certifications; ISO 27701 is in process. Subscriptions include Software Support Enhanced, with 24x7 technical support, software updates, and onboarding assistance; Premium support is an upgrade.

Pricing

Cisco Secure Access is paid software with custom pricing based on covered-user count and subscription term. The subscription has Essentials and Advantage packages, with standard terms of 12, 36, or 60 months. This model can suit organizations budgeting for a broad security suite, but multi-year commitments and per-user licensing make it important to match the covered-user count and package to actual needs.

A 14-day free trial is available. Customers can purchase a subscription during the trial or ask their sales representative for an extension. There is no free plan, so teams that need ongoing access without a paid subscription should look elsewhere.

Platforms

The platform is cloud-deployed with hybrid deployment support and runs across Windows, macOS, Chrome OS, iOS, Android, DNS networks, and Cisco network devices. The broader platform listing also includes Linux, web, and API. HTTP/HTTPS proxy protocols are supported, making the service relevant to organizations protecting web access as well as private applications.

Who it's for

Secure Access is aimed at organizations securing users, devices, applications, and AI agents across office, home, and remote work. It is a strong fit for teams that want identity-aware private access, SaaS oversight, web and DNS security, and data protection under centralized policy. It is less suitable for buyers seeking a simple standalone proxy, a free plan, or a short-term commitment.

Pros and cons

Pro: Combines ZTNA, web and DNS security, CASB, DLP, browser isolation, and other capabilities, which can consolidate access-security operations.

Pro: SaaS and generative AI visibility help security teams find unsanctioned apps and reduce sensitive-data exposure.

Pro: Software Support Enhanced includes round-the-clock technical support, updates, and onboarding assistance.

Con: Per-user licensing and terms of 12, 36, or 60 months can make costs and commitment significant, particularly for teams that need only a narrow subset of the suite.

Con: There is no free plan, and the trial lasts 14 days unless an extension is requested.

Alternatives

For a longer evaluation window, Check Point Harmony SASE offers a 30-day trial before a license is required. Cato Client is another paid option with commercial licenses purchased through Cato for one or more years.

Zscaler Private Access may fit buyers focused on private access: its Standard option is limited to 5% of users, while the broader ZPA Platform is also available at custom pricing. For a free tier, Cloudflare Gateway includes up to 50 users and 24 hours of standard log retention; its paid pay-as-you-go option is $7 a month.

iboss Cloud is a paid alternative whose Zero Trust Core includes web filtering, basic CASB controls, HTTPS decryption, and cloud connector agents. For a free, open-source interactive HTTPS proxy, mitmproxy is a narrower alternative. Skyhigh Private Access is another paid private-access option. Privoxy is free software for buyers seeking a no-cost proxy rather than a broad security suite.

Compare the wider categories of Security Service Edge Software, Cloud Access Security Broker Software, Data Loss Prevention Software, Browser Isolation Software, DNS Filtering Software, and Forward Proxy Software to focus on a particular layer.

Verdict

Choose Cisco Secure Access if your organization needs broad access security and wants policy and reporting centralized across office and remote users. The principal reason to choose it is the combination of private access, web and SaaS controls, data protection, and AI visibility in one service. Look elsewhere if you need only a single security function, a free plan, or to avoid a multi-year, per-user commitment.

Verdict

Cisco Secure Access brings multiple access-security capabilities under a cloud-managed console, with centralized policy and reporting. A 14-day trial is listed, but subscription pricing depends on covered users and term and is available on request.

Where Specifiction places it

Alternatives to Cisco Secure AccessAll alternatives →