Zscaler and Carahsoft announced on August 18 that they are expanding their partnership to push the Zero Trust Exchange into the U.S. small and mid-market segment. I'm a couple weeks late writing this up, so consider this the catch-up post. Standard disclosure: I work at Zscaler, so read the enthusiasm as informed, not neutral.
My first reaction to "reseller partnership expansion" was the same one you probably just had. Channel news. Two companies issue a joint quote about synergy and everybody moves on. Then I read it, and the actual story is not the partnership, it's the admission underneath it: enterprise security has a distribution problem, and nobody likes talking about distribution.
The Threat Model Doesn't Care How Big You Are
The line in the release that matters is that SMB and mid-market organizations get hit by "the same ransomware, phishing and identity-based cyber threats that large enterprises face." That is not marketing. A ransomware crew running a phishing kit does not check your headcount before firing. If anything the smaller org is the better target, because it has the same cloud apps, the same distributed workforce, and the same identity sprawl as the Fortune 500, with a fraction of the security staff to watch it.
So the gap isn't awareness and it isn't the threat. A 400-person company knows it needs zero trust. The gap is that enterprise security has historically been sold, priced, and deployed like enterprise software: long procurement cycles, custom packaging, a professional-services engagement to stand it up, and a renewal negotiation you dread. That model works when you have a procurement team and a security architect. It falls apart when the person buying the security platform is also the person running the help desk.
What They Actually Changed
The pieces of this that are worth noticing are the boring operational ones:
- Standardized bundles. Curated Zero Trust Exchange packages with deployment accelerators, instead of a blank quote and a scoping call.
- Right-sized pricing. Predictable packaging aligned to an SMB budget, bought through Carahsoft's existing reseller network rather than a direct enterprise sales motion.
- Partner enablement. Onboarding playbooks and reference architectures so the reseller who already has the customer relationship can actually deploy and support the thing.
None of that is a product announcement. There's no new feature. It's the same platform with the friction filed off the buying and deployment process, delivered through partners who are already in the room with these customers.
"SMB and mid-market organizations face the same cyber risks as global enterprises, but they need a model built for simplicity, speed and economic predictability."
— Anthony Torsiello, SVP, Global Partner Ecosystem, Zscaler
"A model built for simplicity, speed and economic predictability" is a polite way of saying the old way of buying this stuff was slow, complicated, and unpredictable. Which it was.
Why the Channel Is the Right Move Here
You cannot reach a hundred thousand mid-market companies with a direct sales force. The math doesn't work. Those customers already buy their IT through resellers and solution providers they trust, and Carahsoft has a large distribution network of exactly those partners. Meeting the customer where they already do their purchasing, with a package they can actually digest, is the only version of this that scales.
It also matches the architecture story. The whole zero-trust pitch is that you replace a pile of appliances and legacy security stacks with one cloud-delivered service. That value proposition is arguably stronger for a smaller org, because they have less sunk cost in the old boxes and less tolerance for the operational overhead. The barrier was never whether it made sense for them. It was whether they could buy it without an enterprise-sized effort.
Bottom Line
This announcement has no new technology in it, and that's the point. The Zero Trust Exchange already worked for a 400-person company on paper. What was missing was a way for that company to buy it, pay for it, and deploy it without pretending to be an enterprise. Packaging it into standard bundles and running it through Carahsoft's reseller ecosystem is Zscaler admitting that for a huge slice of the market, the product was never the hard part. The go-to-market was.
Full release: Zscaler and Carahsoft Expand Partnership to Deliver Enterprise-Proven Zero Trust Security to SMB and Mid-Market Customers