Zscaler Buys AI Security Outfit SPLX

Cloud security company Zscaler has bought SPLX for a handy AI security boost.

No financial details were revealed. That said, the acquisition signals a shift in enterprise security strategy, right as AI infrastructure spending hits mind-blowing new heights.

Companies pouring billions into AI technology now have a new protection option that addresses vulnerabilities most organizations do not even realize they are carrying.

“AI is creating enormous value, but its full potential can only be realized when it can be secured. By combining SPLX’s technology with the intelligence of the Zscaler Zero Trust Exchange and its native data protection that classifies, governs, and prevents loss of sensitive data across prompts, models, and outputs, Zscaler will secure the entire AI lifecycle on one platform,” said Jay Chaudhry, CEO, Chairman, and Founder of Zscaler, in the announcement.

Billion-dollar problem

The numbers behind this acquisition tell a story about AI security risks spiraling out of control. Global AI infrastructure investments are projected to exceed $250 billion by the end of 2025, while total worldwide AI spending could reach $1.5 trillion in 2025.

Companies are forecast to spend $375 billion on AI infrastructure in 2025 alone, a staggering 67% increase over last year.

This surge has created a vast new attack surface that traditional security tools may not be able to handle. SPLX’s platform tackles this gap with over 5,000 specialized attack simulations designed to uncover AI-specific risks and vulnerabilities.

The move

Zscaler’s move to acquire SPLX is not just about adding features, it is about securing an entirely new category of enterprise technology. The integration brings AI red teaming, asset management, threat inspection, prompt hardening, and governance capabilities to Zscaler’s Zero Trust Exchange platform.

The platform will provide AI models, workflows, code repositories, and Model Context Protocol servers in both public and private deployments. That shift lets organizations move from reactive defense to proactive protection for their AI investments.

SPLX launched its AI Asset Management solution earlier this year, delivering visibility into AI models, agentic workflows, and infrastructure.

Enterprise AI security

This acquisition represents Zscaler’s second major deal of 2025, following its $675 million purchase of Red Canary back in August.

The SPLX integration will enable automated AI red teaming with real-time remediation from development to production, using purpose-built attack simulations to identify risks throughout the entire AI lifecycle.

Guardrails will also expand Zscaler’s existing AI Runtime protections to secure sensitive data and block malicious attacks between AI applications and large language models.

Zscaler reckons that for organizations rapidly deploying AI technology, this unified approach means they can secure their entire AI ecosystem on a single platform rather than cobbling together multiple security solutions.