Skip to content
Globe User Gray
Secure Dynamics MSSP
Co-manage 360 MSSP

Zscaler Managed Service for VARs

Sell Zscaler as a co-managed service, delivering comprehensive security while maintaining a strong, ongoing customer relationship. This approach positions you as a trusted advisor, offering tailored support, optimizing security, and deepening customer loyalty.

  • No channel conflict. You simply sell to the customer and we do the heavy work. The customer still pays you on your terms.
  • Fast turnaround. In as little as one day, including the entire sales process, we can start onboarding any customer. 
  • Simple. Start with as few as 20 users/month (Annual Term Required) and ramp up monthly as needed. We ensure you have the visibility into how many seats/licenses are in use. 
Existing Customer Support
MSSP RACI
Roles & Responsibilities

Who does what?

In managed services, clear accountability is essential. It’s important to define who is ultimately accountable (A), who is responsible (R) for execution, and who needs to be consulted (C) or informed (I) along the way.

With Co-Manage 360, SecureDynamics takes full responsibility and accountability, ensuring seamless service delivery—while keeping the VAR partner actively engaged throughout the process.

The result? The customer benefits from a fully managed experience while maintaining their trusted VAR as the key driver of their success—just as it should be.

ZIA

Included Zscaler capabilities 

  • Content Filtering

  • Antivirus & Anti-spyware

  • SSL Inspection & Private Cert

  • Cloud Application Control

  • Advanced Threat Protection

  • Inline Web DLP for Internet/SaaS, Private and Gen AI Apps

  • Cyber Browser Isolation Standard

  • Advanced Firewall

  • Standard Sandbox

  • Guest WiFi using DNS Control

  • Nanolog Streaming Service (NSS)

  • 6 month Logging & Reporting

  • ZDX Standard: Preset

  • Client Connector Only

  • ZIA Data Transfer fair use

Included managed operations (what we run day-to-day)

  • Policy build/tuning (URL, app control, SSL inspection posture, threat controls)

  • Advanced Firewall operations: rulebase governance, change control, troubleshooting, and policy tuning

  • Logging/NSS enablement and operational troubleshooting

  • Incident triage + escalation coordination

Explicitly not included (unless separately scoped)

  • Endpoint management (patching, EDR operations, device remediation)

  • Operating the customer’s SIEM/SOC platform (we support log delivery; we don’t become the SOC tool owner)

ZPA

Included Zscaler capabilities

  • Log Streaming Service

  • Health Monitoring

  • Standard Device Posture

  • Source IP Anchoring

  • Browser Access

  • 10 App Segments

  • 20 App Connectors

  • 14 Day Logging & Reporting

  • ZPA Data Transfer fair use

Included managed operations (what we run day-to-day)

  • App segmentation + access policy governance (least-privilege patterns)

  • App Connector health monitoring + troubleshooting (reachability, DNS, routing, connector registration)

  • Browser Access / Source IP anchoring operational support (when used)

  • Posture policy troubleshooting as it relates to ZPA access decisions

  • Escalation management as needed (SecureDynamics engages Zscaler Support) 

ZDX

Included Zscaler capabilities

  • ZDX Standard (baseline visibility + experience metrics)

Included managed operations (what we run day-to-day)

  • Baselines + alerting configuration (noise-controlled)

  • Triage workflows: isolate ISP vs device vs ZIA vs ZPA vs SaaS causes

  • Reporting cadence (executive-friendly summaries + actionable tuning recommendations)

Explicitly not included (unless separately scoped)

  • Endpoint engineering (drivers/Wi-Fi stack/OS corruption triage)

  • Owning SaaS admin platforms (e.g., M365 tenant administration)

Let's go!

Exclusively for all US-Based Zscaler Partners

Just fill out the request form and we will have a quote back to you within one business day, targeting within an hour.

This will come to you, not your end customer. As with any other distribution opportunity, you will just use this to create your own customer-facing sales package - adding your own margin and any overlay services, of course.

As always, feel free to reach out to us for any pre-sales support. Our team of Zscaler sales experts are here to help. 

Frequently Asked Questions

💰 How Do VARs Get Paid? It’s Simple!

You invoice your customer directly, based on your contract with them. Then, SecureDynamics invoices you—at a lower cost—so you retain your margin and maximize profitability.

It’s straightforward, transparent, and designed to keep you in control of your customer relationships while we provide the backend support.

What are the prerequisites for selling?

To get started, you simply need to be a registered Zscaler partner in the U.S.—or in Canada, as long as you can transact in USD. That’s it! ✅

Ready to start selling? Let’s make it happen!

How do we co-manage, exactly?

While SecureDynamics handles most of the heavy lifting, co-management ensures you stay front and center with your customers. Here’s what that looks like:

✅ Customer Relationship: Your customers continue to see you as their trusted value-added partner. We operate behind the scenes, delivering services on your behalf.

✅ Seamless Ticket Flow: You stay in the loop on all trouble tickets and proactive changes—we keep you informed, not in the dark.

✅ Expert Consulting: Need support on customer calls? We’ll join you as needed, helping reinforce the ongoing value of your services.

With SecureDynamics, you get all the support—without losing control.

How does Fair Use data transfer work? Will customers see overage charges?

Velocity Premium includes Fair Use data transfer, measured at the aggregate pool level across all managed services users.  Under normal usage patterns, customers should not see data-transfer overage charges.

Budgetary planning baselines (not per-customer caps):

  • ZIA: ~10GB per user per month (planning baseline)

  • ZPA: ~3GB per user per month (planning baseline)

These baselines are used for planning and are pooled across the program, not metered as strict per-customer limits. If the aggregate pool usage exceeds the aggregate provisioned capacity in a month, the program terms allow a data transfer true-up on the monthly invoice.  We monitor and proactively remediate abnormal consumption patterns to avoid that outcome.

What happens if the customer doesn't pay?

At SecureDynamics, we understand that cash flow matters. If a customer isn’t paying, we’ll work with you in good faith to help you recover what’s owed.

🔹 Your Responsibility as a VAR: If your customer doesn’t pay, SecureDynamics still requires payment to cover the Zscaler subscription. This means you are effectively extending credit to your customer.

🔹 Suspension Option: If non-payment persists, you can formally request that we suspend the customer’s access to Zscaler services.

🔹 No Direct Engagement: SecureDynamics is your distribution partner, not a competing Zscaler VAR. Taking a customer direct is never an option. However, if your business relationship with the customer needs to change, we can work together to migrate them to another Zscaler VAR.

We’ve got your back—let’s navigate this together! 💪