Federal agencies now have an authorized way to push zero-trust enforcement out to their field sites, not just their data centers and remote workers.

In a blog post dated August 2, 2026, Zscaler said its Zero Trust Branch offering is available at both FedRAMP Moderate and FedRAMP High. The product pairs the Zero Trust Exchange cloud with an on-site appliance to apply internet access and private application policies and to segment OT and IoT gear at branch and field locations. Zscaler ties the authorization to CISA’s TIC 3.0 Branch Office Use Case for agencies handling local internet and cloud breakout on site.

Most zero-trust programs built under OMB M-22-09 and the CISA Zero Trust Maturity Model have concentrated on headquarters and remote users, leaving distributed offices, labs, and temporary sites as a coverage gap. An authorized branch option closes part of that gap. The impact level is the operational detail to check first, because High authorization is what permits agencies to route more sensitive data through the service.

Note two caveats: The Moderate and High availability claim is single-sourced to Zscaler’s own blog; no FedRAMP Marketplace listing or agency confirmation surfaced independently. A separate Zscaler GovCloud update from July 30, 2026 described the FedRAMP High cloud as “Limited Availability,” which does not match the later “now available” framing. Security leaders should verify the exact impact level and authorization status against the FedRAMP Marketplace before designing branch deployments around it.

Source: Zscaler