Cisco Secure Access
Cisco Secure Access is a cloud-delivered Security Service Edge service for controlling access to internet, SaaS, and private applications.
What Cisco Secure Access is
Cisco Secure Access is a cloud-delivered Security Service Edge service for controlling access to internet, SaaS, and private applications. Its capabilities combine zero trust network access, Secure Web Gateway, CASB, Firewall as a Service, DNS security, Data Loss Prevention, Remote Browser Isolation, and digital experience monitoring. CASB provides visibility and control over SaaS use, including detection of unsanctioned apps. ZTNA grants access to specific applications according to identity, device posture, and contextual policy, with access denied by default. Controls for generative AI applications and agents are intended to help identify shadow AI and reduce sensitive data exposure. Administrators use a cloud-managed console with centralized policy creation and aggregated reporting. Cisco lists integrations including Microsoft Intune, Jamf Pro, ServiceNow, Splunk, Cisco ISE, browsers, and Cisco services; identity-provider examples include Active Directory, Azure AD, and Okta. Subscriptions are licensed per covered user, and pricing depends on user count and term; no price is listed. A 14-day trial is available. Subscriptions include 24x7 technical support, software updates, and onboarding assistance.
Good
- Combines ZTNA, CASB, web gateway, and DNS security.
- CASB can detect unsanctioned SaaS applications.
- AI controls help identify shadow AI.
- Subscriptions include 24x7 technical support.
- A 14-day trial is available.
Watch out
- No public price is listed.
- Licensing is per covered user.
- Pricing varies by user count and subscription term.
- Premium support is an upgrade option.
Who it suits
Cisco describes Secure Access for organizations securing users, devices, applications, and AI agents across office, home, and remote work settings. It suits teams seeking centralized access controls across internet, SaaS, and private applications.
Verdict
Cisco Secure Access combines multiple access and security controls under a cloud-managed console. Organizations should account for per-user licensing and request pricing based on their user count and subscription term.
Plans and prices
From Cisco Secure Access's own pricing page, checked 19 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| DNS Defense free trial | Free | DNS-layer threat blocking · roaming and office protection · cloud malware protection · cloud DLP · 14-day trial |
| Cisco Secure Access subscription | Priced on request | Tiered pricing based on covered-user count and subscription term · standard terms of 12, 36, or 60 months · Essentials and Advantage packages |
| Secure Access Advantage | Priced on request | Advanced Secure Internet Access or Secure Private Access package · user-based licensing · minimum 50 users for SIA/SPA billing SKUs · 12-, 36-, or 60-month subscription; annual or prepaid billing |
| Secure Access Essentials | Priced on request | Secure Internet Access or Secure Private Access · user-based licensing · minimum 50 users for SIA/SPA billing SKUs · 12-, 36-, or 60-month subscription; annual or prepaid billing |
The facts
Each one read from Cisco Secure Access's own pages, with the date it was checked.
What it does
- AI security
- Secure Access discovers generative-AI applications and model repositories and applies controls intended to reduce sensitive-data exposure.checked 19 Oct 2026
- API
- Secure Access exposes a REST API described with OpenAPI 3.x and JSON requests and responses.checked 19 Oct 2026
- API authentication
- The API uses OAuth 2.0 client credentials with short-lived bearer tokens that expire after one hour.checked 19 Oct 2026
- API licence
- API use is governed by Cisco Baseline API License Terms in addition to the customer agreement.checked 19 Oct 2026
- API scope
- Public API resources cover administration, deployments, investigations, policies, reports, DLP events, UEBA and application discovery.checked 19 Oct 2026
- CASB
- CASB provides visibility and control over SaaS application use, including detection of unsanctioned applications.checked 29 Sep 2026
- CASB capability
- CASB visibility identifies sanctioned and unsanctioned SaaS applications and supports policy control over their use.checked 19 Oct 2026
- Compliance
- Cisco lists Secure Access as SOC 2 Type 2, CSA STAR, ISO 27001, ISO 27017 and ISO 27018 certified; ISO 27701 is in process.checked 19 Oct 2026
- Core security functions
- The platform combines ZTNA, secure web gateway, CASB and firewall-as-a-service in one service.checked 19 Oct 2026
- Data protection
- Its DLP controls identify sensitive information and reduce unauthorized movement across internet, SaaS, private-application and endpoint channels.checked 19 Oct 2026
- Documentation depth
- Cisco Help documents deployment, mass installation, Windows/macOS/Linux clients, iOS and Android clients, integrations, APIs, troubleshooting and reporting.checked 19 Oct 2026
- Experience monitoring
- Experience Insights, powered by ThousandEyes, helps identify whether access problems originate with a device, network, application or connection path.checked 19 Oct 2026
- Government compliance
- The compliance page lists FedRAMP Class D and GovRAMP authorization, with CJIS and HIPAA alignment claims.checked 19 Oct 2026
- Identity providers
- The data sheet names Active Directory, Azure AD, and Okta among supported SAML identity provider examples.checked 29 Sep 2026
- Integrations
- Documented integrations include Chrome Enterprise Browser, Microsoft Intune, Jamf Pro, ServiceNow or Splunk event delivery, Microsoft Edge for Business, Island, ISE, Catalyst SD-WAN, Cisco Identity Intelligence and threat-intelligence feeds.checked 19 Oct 2026
- Intended users
- Cisco describes Secure Access for organizations securing users, devices, applications, and AI agents across office, home, and remote work settings.checked 29 Sep 2026
- Licence
- The service is proprietary commercial software sold through Cisco subscriptions rather than open-source licensing.checked 19 Oct 2026
- Limit: complexity
- Independent reviewers repeatedly report difficult initial setup, complex policy design and a steep learning curve for smaller or less specialized teams.checked 19 Oct 2026
- Limit: integrations
- TrustRadius and G2 reviewers cite immature third-party integrations and occasional clunky Duo, ISE, EDR or firewall integration work.checked 19 Oct 2026
- Limit: interface and logging
- TrustRadius reviewers report awkward navigation, incomplete logging, buggy pages and limited troubleshooting visibility.checked 19 Oct 2026
- Limit: pricing
- G2 reviewers describe premium pricing as difficult for smaller organizations and say licensing and feature entitlements can be hard to understand.checked 19 Oct 2026
Where it runs
- App limitation
- The Cisco Secure Client iOS listing includes user complaints about automatic VPN connections, delayed push approvals, login failures and inability to switch VPN groups.checked 19 Oct 2026
The company
- Founded
- 1984checked 28 Sep 2026
- Headquarters
- San Jose, California, United Stateschecked 28 Sep 2026
Alternatives to Cisco Secure Access
- 1
Microsoft Defender for Business
AndroidiOSAPImacOS7.5 - 2
Check Point Harmony SASE
AndroidiOSWebLinux7.3 - 3
iboss Cloud
AndroidiOSWebAPI7.1 - 4
Symantec IT Management Suite
WebAPILinuxmacOS6.8 - 5
Dope Security CASB Neural
Free planWebmacOSWindows6.6Free plan - 6
Cloudflare WAN (formerly Magic WAN)
Free planWeb6.4$7 usage-based