Skip to main content

Zhero Extension Changelog

All notable changes to the Zhero Chrome Extension will be documented in this file.

Version 2.3.0 (2026-03-09)​

Major release introducing ZPA Domain Management for bulk editing application segments, Diagnostic Log Export for troubleshooting, and significant Collaboration Reliability improvements.

New Features​

  • ZPA Domain Management: Manage domains across ZPA Application Segments — bulk edit, bulk delete, move/copy domains between segments, and clone domains to new segments, all with automatic conflict detection and multi-match validation
  • Enhanced Free Trial Experience: The free experience has been upgraded to a 30-day full-featured trial — new users now get access to search, best-practice analysis, and all core UI enhancements from day one, making it easier to evaluate the full potential of ZHERO before committing. Schedule a demo to get a personalized walkthrough on your own tenant
  • Diagnostic Log Export: Attach browser diagnostic logs to feedback submissions for faster troubleshooting, or download them locally as a ZIP — captures console output, network errors, and extension events in the background

Improvements​

  • Collaboration Reliability: Major hardening with bulk tag operations, improved real-time synchronization, and more resilient cache management — reducing conflicts in multi-admin environments
  • Collaboration Security: Enhanced WebSocket security, input validation, and rate limiting across all collaboration operations
  • Collaboration Data Privacy: Added user data deletion and data purge capabilities for compliance requirements

Version 2.2.4 (2026-02-21)​

Expanded export capabilities with four new entity types and improved export menu organization for ONE tenants, plus backend stability improvements.

New Features​

  • SSL Inspection Policy Export: Export your SSL Inspection policies to Excel with full column selection, templates, and collaboration data — available in both ZIA and ONE menus
  • URL Filtering Policy Export: Export URL Filtering policies to Excel with the same advanced export engine features (column reordering, templates, matrix expansion)
  • Cloud Application Control Rule Export: Export Cloud App Control rules to Excel — now accessible directly from the ZIA and ONE export menus
  • ZPA Application Segment Export: Export ZPA Application Segments to Excel — available in the ONE and ZPA export menus
  • Reorganized Export Menu (ONE): The ONE tenant export menu is now split into three clear groups — Common, ZIA, and ZPA — making it easier to find the export you need

Bug Fixes​

  • Improved error handling for ZPA-only tenants: Tenants without ZPA module or admins without ZPA permissions no longer trigger unnecessary error alerts — the extension now gracefully handles these expected conditions

Version 2.2.0 (2026-02-14)​

Major release introducing Shared Pending Changes — a team collaboration layer for change management — plus PDF Export for pending changes.

New Features​

  • Shared Pending Changes: Pending changes now support two separate queues — a personal queue (visible only to you) and a team queue (visible to all members in your tenant group). Switch between "My Changes" and "Team Changes" views using the toggle at the top of the Actions drawer

  • Share with Team: Select one or more personal pending changes and click "Share with Team" to promote them to the shared queue — your team members will see them instantly. Use "Share All" to promote everything at once. The system automatically detects entity conflicts if someone else already shared a change for the same entity

  • Move Back to Personal: Take back your own shared changes by selecting them and clicking "Move to My Changes" — only changes you originally shared can be moved back. Other team members' changes remain in the shared queue

  • Dual-Color Badge: The pending changes badge now uses two colors to distinguish personal and team changes at a glance — so you can immediately see if there are pending items in either queue without opening the drawer

  • Real-Time Sync: Shared pending changes update instantly across all browsers — when a team member shares, removes, or executes a change, your badge count and list refresh automatically without needing to reopen the drawer

  • PDF Export: Export your pending changes to a PDF document with visual entity diff cards — showing before/after comparisons for updates, entity details, and change type indicators. Available for both personal and shared views via the "Export PDF" button in the drawer toolbar

  • Author Attribution: Shared changes display the name of the person who shared them and when they were shared, so you always know who proposed each change

  • Audit Trail for Pending Changes: All pending change executions are now logged in the Collaboration Audit Trail with real before/after entity state — TenantAdmins can see exactly what changed when a pending change was applied, including the full entity diff

Improvements​

  • Entity Diff Cards in Audit Trail: Audit trail entries for executed pending changes now show visual entity cards with before/after diffs — instead of just text references, you can see the actual fields that changed

Version 2.1.36 (2026-02-12)​

Major release introducing the Advanced Export Engine — a unified, customizable export experience across all entity types — plus Collaboration Audit Trail and reliability improvements.

New Features​

  • Advanced Export Engine: All five export types (ZPA Access Policies, URL Filtering Rules, Firewall Rules, Locations, and App Profiles) now share a unified export drawer with a consistent, modern interface — select columns, preview data, and export to Excel from a single, streamlined panel

  • Export Templates: Save and reuse your preferred export configurations as templates — choose which columns to include, set their order, and save the setup for quick one-click exports. Templates are stored per-tenant, so each team can have its own presets

  • Column Reordering: Drag and drop columns in the export drawer to customize the order they appear in your Excel file — no more rearranging spreadsheets after export

  • Collaboration Data in Exports: Excel exports now include collaboration columns (tags, comments, preferred tags) alongside entity data — see your team's annotations directly in the spreadsheet

  • Matrix Expansion Mode: For entities with multi-value fields (e.g., multiple destinations or applications in a policy rule), choose between flat mode (comma-separated in one cell) or expanded mode (one row per value) for more granular analysis

  • Collaboration Audit Trail: TenantAdmins can now view a complete audit log of all collaboration activity — tag creations, assignments, comments, and deletions — with date range filters, action/target filters, actor search, and Excel export. Available in a new Audit Trail tab in the Collaboration Dashboard

  • Authentication Badge: The ZHERO extension icon now shows an orange "!" badge when you're not authenticated — making it easy to spot when your session has expired

Improvements​

  • Collaboration Error Resilience: Collaboration UI components are now wrapped in error boundaries — if one collaboration feature encounters an issue, the rest of the extension continues working normally

  • Faster Collaboration Loading: Collaboration data now loads via batch queries instead of individual requests, significantly reducing load times on entities with many tags and comments

Bug Fixes​

  • Collaboration Authorization: Fixed an issue where collaboration operations could return false "unauthorized" errors as the number of tenants grew — lookups now use optimized database indexes

Version 2.1.27 (2026-02-10)​

Focused on Experience Center tenant support and Collaboration Dashboard improvements. This release brings full entity and audit log support for Experience Center tenants, a redesigned Activity hub, and multiple reliability fixes.

New Features​

  • Experience Center Entity Support: All ZIA and ZPA entities are now fully available on Experience Center tenants — including entity cards, policy references, and analytics across both ZIA and ZPA entity types within a unified tenant

  • Experience Center Audit Logs: Audit log fetching now works seamlessly on Experience Center tenants with proper pagination and proxy support — both ZIA and ZPA audit logs are accessible from a single tenant

  • Activity Hub: The Collaboration Dashboard Assignments tab has been redesigned into an entity-centric Activity hub — view all tags and comments grouped by entity, with improved filtering and sorting by recent activity

Improvements​

  • Collaboration Gateway Reliability: Backend collaboration operations now include input validation and automatic pagination — ensuring consistent results even with large datasets

Bug Fixes​

  • ZPA Policy List on Experience Center Tenants: Fixed issue where the Impacted Policies section was empty for ZPA entities (Application Segments, Server Groups, etc.) on Experience Center tenants — policies now display correctly regardless of tenant type

  • Collaboration Dashboard Overlay: Fixed issue where opening an entity detail drawer from the Collaboration Dashboard rendered it behind the dashboard instead of above it

  • Entity View Navigation: Fixed issue where certain entities with non-standard ID formats could not be opened from the Collaboration Dashboard

  • Duplicate Tag Assignments: Assigning the same tag twice to an entity no longer creates duplicate entries — the operation is now idempotent

  • Collaboration Timestamps: Fixed inconsistent date display for tag assignments and comments due to timestamp format normalization

  • Troubleshooting Insights Logs: Fixed issue where ZIA Insights logs returned empty results because the user ID was sent in the wrong format

  • ZPA Tenant Initialization: Fixed a startup issue on some environments where the ZPA tenant ID was not correctly resolved — ZHERO now uses a fallback mechanism and reports initialization errors to monitoring

Version 2.1.11 (2026-02-08)​

Security and reliability release focused on tenant isolation for Entity Collaboration, ensuring collaboration data is properly protected across multi-tenant environments.

New Features​

  • Tenant-Isolated Collaboration Gateway: All collaboration operations (tags, comments, tag assignments) now route through a centralized authorization gateway that verifies tenant membership before every read and write — preventing cross-tenant data access

  • Automatic Data Migration on Tenant Merge: When Zscaler ONE merges tenant groups, ZHERO now automatically migrates collaboration data (tags, tag assignments, comments) from the old group to the new one — with intelligent tag deduplication to avoid duplicates

  • Multi-Tenant WebSocket Connections: Real-time collaboration sync now supports simultaneous connections to multiple tenant groups — each tenant gets its own dedicated WebSocket, ensuring updates are properly isolated

Improvements​

  • Smarter Collaboration Button: The collaboration menu button is now hidden when collaboration is not enabled at the tenant level — previously it was visible to all users with the feature flag, even if the TenantAdmin hadn't enabled it yet

  • Better Comment Input UX: Clicking the "add comment" button on entity cards now automatically dismisses the comments tooltip and focuses the text input in the comment popover — faster path from reading comments to writing one

  • Stale Tenant Recovery: If a tenant group is deleted during a merge, ZHERO now automatically detects and re-resolves the tenant group ID instead of silently failing — operations retry transparently with the correct group

Bug Fixes​

  • Search User Resolution: Fixed issue where search results used the wrong user identifier, causing entity links to fail for some users

  • Default Tag Creation: Fixed issue where the three default collaboration tags were not created when enabling collaboration for a new tenant — caused by a permissions change during the security hardening

Version 2.1.5 (2026-02-04)​

Major release introducing Entity Collaboration - a team collaboration system for tagging, commenting, and sharing insights on Zscaler entities across your organization.

New Features​

  • Entity Collaboration (Premium, Limited Availability): New team collaboration system for Zscaler entities - add tags, comments, and notes to any entity (policies, segments, users, etc.) and share insights with your team in real-time

  • Collaborative Tags: Create and assign custom tags to entities for categorization, status tracking, or workflow management - tags can be public (team-visible) or private (personal organization)

  • Entity Comments: Add threaded comments to any entity - share context, document decisions, or flag issues for team review. TenantAdmins can moderate comments across the organization

  • Preferred Tags: Mark a tag as "preferred" on an entity to highlight it in entity cards and inline views - quickly see the most important categorization at a glance

  • Collaboration Dashboard: Central hub to manage all collaboration data - view tag usage statistics, browse all assignments and comments, and perform data health checks

  • Real-time Sync: Changes sync instantly across all team members via WebSocket - see updates from colleagues without refreshing the page

  • ZPA Access Policy Export: New export drawer for ZPA Access Policies - export to Excel with two modes: Flat (one row per policy) or Expanded (one row per rule condition for detailed analysis)

  • IP/CIDR Analysis: Analysis templates can now detect when an IP address is contained within a CIDR range - useful for identifying overlapping network definitions across policies

Improvements​

  • Entity "Not Found" UX: When navigating to an entity that doesn't exist (deleted or wrong tenant), you now see a clear error message instead of a broken interface

  • Error State Menus: When ZHERO encounters errors loading data, menu options that depend on that data are now hidden to avoid confusion

  • ZPA Application Segments: Application segments now display in a more compact EntityList format with improved readability

Version 2.0.4 (2026-01-14)​

Major release introducing the Troubleshooting Engine (Premium, Beta) - a comprehensive tool for diagnosing user access issues with traffic flow visualization, policy analysis, and ZIA Insights integration.

New Features​

  • Troubleshooting Engine (Premium, Beta): New interactive troubleshooting tool for diagnosing user access issues - select a user, device, and destination to visualize traffic flow through your Zscaler configuration with a Sankey diagram showing the path from device groups through forwarding profiles

  • Traffic Flow Visualization: Interactive Sankey diagram that shows how traffic flows through your Zscaler configuration - from device groups through App Profiles, ZCC settings, and Forwarding Profiles to the final destination. The diagram automatically updates when you change the selected user, device, or destination criteria

  • Policies Tab: Analyze which URL Filtering, SSL Inspection, Firewall, and other policies would apply to your troubleshooting scenario - see policy matches with clear indicators for ALLOW/BLOCK actions and rule priorities

  • HAR File Analysis: Upload browser HAR files to analyze actual network requests and correlate them with your Zscaler policies - quickly identify which requests are blocked or allowed

  • ZIA Insights Integration: Connect to ZIA Insights Logs to view real traffic data for your selected user and time range - see actual transactions, blocked requests, and policy hits

  • Session Management: Save and restore troubleshooting sessions to continue investigations later or share scenarios with colleagues

  • IdP Certificate Monitoring: New analysis template that monitors IdP certificate expiration dates and alerts you before certificates expire - prevent authentication outages proactively

  • ZPA Criteria Entities: Full support for ZPA policy condition entities with clickable links, entity cards, and detailed drawers - including Users, User Groups, Platforms, Client Types, Posture Profiles, Trusted Networks, Machine Groups, Server Groups, App Connector Groups, and Risk Factor Types

  • Reload Menu for All Users: The Reload menu is now accessible to all users, allowing manual refresh of cached data when needed

Improvements​

  • Smart Search: Criteria picker now requires minimum 3 characters before searching to reduce unnecessary API calls and improve performance

  • Faster Analysis Engine: Optimized the Analysis Template Manager with parallel batch processing and improved caching - the Analysis Drawer now shows a real-time progress indicator during initial analysis, and results update incrementally instead of waiting for all analyses to complete

Bug Fixes​

  • Device Loading: Fixed issue where device information wasn't loading correctly in certain scenarios
  • Analysis Re-run: Fixed issue where force re-running an analysis wouldn't bypass the cache properly

Version 1.6.81 (2025-12-21)​

Major enhancements to ZPA Application Segment analysis with smart detection and URL source tracking across ZIA and ZPA.

New Features​

  • ZPA Application Segment Detection: New visual indicators for Application Segments containing wildcard domains (*.example.com) or network segments (CIDR notation like 192.168.1.0/24) - magenta dot for Multi-Match configurations, orange for wildcards/network segments

  • Port Service Mapping: Network ports in Application Segments now display service names (HTTP, HTTPS, SSH, RDP, etc.) with tooltips - making it easier to understand what services are configured

  • URL Source Tracking: URLs now show their source with colored indicators - blue for ZIA, green for ZPA, split dot for both - helping you understand where each URL is configured

  • ZPA App Segments in URL View: When viewing URL details, you can now see which ZPA Application Segments contain that URL - useful for understanding application access paths

  • ZPA Source in URL Export: URL exports now include ZPA source information and Application Segment references - complete visibility into URL configurations across both platforms

Improvements​

  • Search Menu Shortcut: Updated keyboard shortcut to Ctrl/CMD + J for better accessibility
  • Faster ZPA URL Lookup: Optimized URL lookups for ZPA-sourced URLs by skipping unnecessary API calls
  • Better ZPA UI Context: Improved URL display for ZPA tenants showing relevant information and hiding ZIA-specific sections
  • URL Category Detection: Added "MALICIOUS" to the list of detected URL categories for more accurate threat identification

Bug Fixes​

  • SSL Inspection Templates: Fixed device exception templates for SSL Inspection analysis
  • Tenant Type Handling: Fixed errors when switching between different tenant types

Version 1.6.63 (2025-12-15)​

Quick fix for SSL Inspection Report compatibility.

Bug Fixes​

  • SSL Inspection Report: Fixed an issue where SSL Inspection analysis report would fail to generate due to Zscaler's deprecation of the SKYPE cloud application - report now works correctly with the updated cloud app catalog

Version 1.6.61 (2025-12-15)​

Enhanced policy table stability with scroll fix and new toggle controls for ZHERO enhancements.

New Features​

  • Policy Table Enhancement Toggle: New toggle switch above policy tables lets you enable/disable ZHERO enhancements on-the-fly - useful when you need to see the original Zscaler interface or troubleshoot display issues. Toggle state is remembered per table.

Improvements​

  • Smooth Scrolling in Policy Tables: Fixed scroll flickering when scrolling through large policy tables (Firewall, SSL Inspection, URL Filtering, etc.) - ZHERO now properly handles Zscaler's virtualized table rendering for a smoother experience

  • Better Policy Table Compatibility: Updated support for Zscaler console interface changes in policy pages - ensures ZHERO enhancements continue working with the latest Zscaler UI updates

Bug Fixes​

  • OneAPI Form Button: Fixed issue where the Save button in OneAPI configuration was incorrectly disabled even when all fields were valid

Version 1.6.52 (2025-12-05)​

Improved stability for ONE tenants and better error handling when accessing features that require specific licenses.

Bug Fixes​

  • ONE Tenant ZPA Access: Fixed errors that occurred on ONE tenants without ZPA license when accessing ZPA-related features (Application Segments, Application Segment Groups, Access Policies) - the extension now gracefully shows empty data instead of displaying errors

  • Client Forwarding Policies: Fixed Client Forwarding Policies not loading correctly on ONE tenants - now properly retrieves and displays policy data for ZPA features

  • Tenant Data Handling: Improved reliability when tenant data is temporarily unavailable - the extension now handles these scenarios gracefully instead of showing error messages

Version 1.6.47 (2025-11-27)​

Expanded ZPA platform compatibility with support for additional domains, plus improved feature flag handling for users with group-based permissions.

Improvements​

  • Multi-Domain ZPA Support: ZHERO now works with additional ZPA administration domains including admin.zpatwo.net - organizations using alternate Zscaler Private Access domains can now use ZHERO seamlessly with automatic domain detection and configuration

Bug Fixes​

  • Feature Flag Group Membership: Fixed an issue where feature flags based on user group membership weren't being applied correctly after login - users with group-based feature access (like ZPA or ONE console enablement) now receive their flags immediately after authentication

Version 1.6.42 (2025-11-24)​

Significant improvements to ZPA policy visualization, unreachability analysis, and traffic troubleshooting for Premium users, plus better handling of deleted entities.

New Features​

  • ZPA Policy Conditions Visualization (Premium): New visual bracket display for ZPA Access Policy and Client Forwarding Policy conditions - see AND/OR logic relationships at a glance with semantic icons for different operand types (platforms, device posture, SCIM groups, trusted networks, country codes) making complex policy logic instantly understandable

  • Comprehensive Unreachability Detection (Premium): Expanded unreachable assignment analysis to 18 entity types including cloud apps, departments, device groups, device trust levels, IP groups, locations, network services, users, user groups, and ZPA application segments - automatically identify entities that can never be matched due to impossible policy criteria combinations, helping you clean up orphaned or misconfigured assignments

  • Interactive Traffic Flow Visualization (Premium, WIP): New Sankey diagram for troubleshooting traffic paths - hover over entity nodes (App Profiles, Forwarding Profiles, etc.) to view detailed entity cards, visualize how traffic flows through device groups, tunnels, and forwarding decisions with interactive exploration

Improvements​

  • Deleted Entity Indicators: Users, user groups, and departments now display visual deleted state badges when they've been removed but are still referenced in policies - makes it easier to identify and clean up stale policy references

  • Enhanced Policy Matching: Improved "ANY" policy matching logic for ZIA entities with better reliability and feature flag handling - more accurate analysis when policies use wildcards or broad matching criteria

  • Better Entity Display: Added compact mode for entity inline components for denser layouts, plus improved rendering of ZPA conditions with clearer visual hierarchy and semantic context

Bug Fixes​

  • ZPA Cross-Tenant Data: Fixed critical issue where ZPA cache wasn't cleared between tenant switches, potentially showing data from a previous tenant - now properly isolated per tenant

  • Firewall Rule Dependencies: Corrected dependency grouping for network services and network applications in firewall policies - ensures accurate unreachability detection for firewall rules

Version 1.6.9 (2025-11-17)​

Refinements to OneAPI security and firewall QUIC analysis for Premium users.

New Features​

  • OneAPI Permission Validation (Premium): Real-time permission checking when configuring OneAPI credentials - ZHERO now validates your API permissions upfront and provides specific guidance on required roles (ZIA Super Admin, ZCC Super Admin) with clear warnings if permissions are missing, preventing authentication issues before they occur

  • Enhanced QUIC Leak Detection (Premium): Improved firewall QUIC leak analysis now detects exposure on both UDP:443 and UDP:80 ports - get port-specific severity ratings (HIGH for UDP:443, MEDIUM for UDP:80 only) and more accurate remediation recommendations based on which ports are actually exposed

Improvements​

  • OneAPI Connection Testing: Added dedicated connection test functionality with force refresh capability - verify your OneAPI credentials work correctly and have proper permissions before saving, with detailed error messages explaining exactly what's missing

  • Better Error Messages: OneAPI configuration errors now include specific permission requirements (e.g., "ZIA Super Admin role required") instead of generic authentication failures - makes troubleshooting credential issues much faster

Version 1.6.0 (2025-11-13)​

Major update bringing ZPA Access Policy support, device OTP management, and Experience Center compatibility for Premium users.

New Features​

  • ZPA Access Policy Management (Premium): Full support for viewing, analyzing, and understanding ZPA Access Policies and Client Forwarding Policies - see which application segments are referenced, track policy dependencies, and visualize traffic inspection (INTERCEPT actions in green) vs bypassed traffic (BYPASS actions in red)
  • ZPA Application Segment Groups (Premium): Added support for Application Segment Groups with detailed cards and drawers showing all contained application segments and policy references
  • Device OTP Display: View one-time passwords (OTP) for registered devices directly in the device drawer - essential for device operations and troubleshooting authentication issues
  • Experience Center Support (Premium): ZHERO now works seamlessly with Zscaler's unified Experience Center console (console.zscaler.com) with optimized menu positioning and sizing to avoid interface conflicts

Improvements​

  • Enhanced JWT Token Management: Implemented multi-level retry strategy for ZPA tenant authentication with automatic token validation and refresh - dramatically improved reliability when switching between tenants or after extended sessions, with clear feedback when manual interaction is needed
  • Better Device Management: Devices now require OneAPI configuration to load, with helpful tooltips explaining requirements when the feature is unavailable - prevents confusion and provides clear guidance for setup
  • Smarter Error Handling: Improved handling of device-not-found scenarios and expired authentication sessions with typed error classes that provide better feedback instead of generic error messages
  • ZPA Profile Support (Premium): Added retrieval of app profiles and client forwarding profiles in ZPA tenants, giving you complete visibility into traffic forwarding configurations
  • IOT and Workload Locations: Added support for IOT and WORKLOAD location profile types, expanding coverage for specialized deployment scenarios
  • Clear Search UX: Added clear buttons to all search inputs for easier reset and improved search experience across the extension

Bug Fixes​

  • IndexedDB Version Handling: Fixed issues where IndexedDB upgrade processes could become blocked during extension updates, preventing proper initialization
  • JWT Token Caching: Resolved critical issue where expired JWT tokens remained cached, causing authentication failures - tokens are now validated before use and properly refreshed when needed
  • Session Expiration: Improved handling of expired sessions during tenant initialization with graceful recovery and clear user feedback
  • Error Type Detection: Fixed ordering in error type checks to prevent JWT/CSRF misclassification that could lead to incorrect error handling

Version 1.5.44 (2025-11-06)​

Quick bug fix release improving search functionality and user interface interactions.

Bug Fixes​

  • Search Bar Interaction: Fixed an issue where the draggable search bar would interfere with drawers and modal dialogs - you can now properly type in text areas, select text, and interact with forms inside entity drawers without the search bar moving unexpectedly in the background

Version 1.5.42 (2025-11-06)​

Performance improvements and enhanced user experience with URL lookup automation, incognito mode support, and new network application entities.

New Features​

  • Network Application Entities: Added support for Layer 7 network applications and groups - view predefined Zscaler traffic types and custom application groups directly in your policies, with full integration including clickable links and detailed entity cards
  • Incognito Mode Detection: ZHERO now gracefully handles private browsing mode by detecting when you're in an incognito window and providing clear feedback - no more initialization errors or unexpected behavior in private tabs

Improvements​

  • Automated URL Lookup: Enabling URL Lookup in settings now automatically starts processing your URL inventory in the background - no need for manual triggering, the system handles everything seamlessly
  • Faster Export Performance: URL inventory export now provides detailed timing logs to help you track processing speed, with improved batch processing that can handle up to 20 URLs simultaneously (doubled from 10)
  • Optimized Bulk Analysis: Entity analysis engine now processes items in parallel batches using smart error handling - significantly faster processing when analyzing large numbers of URLs, rules, or policies while maintaining reliability
  • Business Email Validation: Account signup now validates email addresses to ensure business domains only - prevents registration with personal email providers for better account security and compliance

Version 1.5.38 (2025-11-04)​

Performance improvements and reliability enhancements for URL Export and cloud app analysis features.

Improvements​

  • Faster URL Analysis: URL parsing performance improved by 85% through intelligent caching, making URL export and analysis significantly faster, especially for large URL inventories
  • Optimized Policy Analysis: Enhanced caching system for policy configurations reduces processing time when analyzing entities and running analysis templates
  • Real-Time Progress Tracking: URL analysis now provides live progress updates during OneAPI lookups, so you can monitor the status of long-running operations
  • Better OneAPI Session Management: Improved authentication and token refresh logic for more reliable OneAPI connections, reducing authentication errors during URL lookups

Bug Fixes​

  • Cloud App Data Sync: Fixed an issue where changes to cloud application rules weren't immediately reflected in the UI when viewing apps by name - data now updates correctly in real-time
  • URL Export Data Validation: Enhanced data completeness checks help identify configuration issues before exporting, ensuring more reliable export results

Version 1.5.29 (2025-10-28)​

Foundation work for Experience Center support alongside continued improvements to reliability and performance.

New Features​

  • Experience Center Foundations: ZHERO is laying the groundwork for supporting Zscaler's unified Experience Center console, bringing the same powerful analytics and insights you enjoy with ZIA to the next generation of Zscaler's platform - stay tuned for more updates as this capability evolves

Improvements​

  • Enhanced URL Export: The URL Inventory Export now provides better visibility into data completeness with improved error handling and configuration validation, helping you identify any gaps in your exported data
  • Faster Performance: Continuous performance optimizations ensure ZHERO remains responsive and efficient even as we add new capabilities
  • Smoother Entity Loading: Improved data fetching logic reduces unnecessary reloads when viewing entity details, making navigation more fluid

Bug Fixes​

  • Consistent Error Messages: Centralized error handling across API operations provides clearer feedback when issues occur, making troubleshooting easier
  • Improved Reliability: Fixed edge cases in data processing that could cause inconsistent behavior in certain scenarios

Version 1.5.1 (2025-10-12)​

Major performance enhancement with backend URL lookup cache system that dramatically reduces API calls and improves loading speed.

New Features​

  • Backend URL Lookup Cache (Opt-in): Introducing a centralized cache system that shares URL categorization results across all ZHERO users - your extension now checks the backend cache first before calling Zscaler APIs, resulting in up to 95% reduction in API calls and significantly faster page loads. Perfect for multi-administrator environments where only the first admin to look up a URL actually uses OneAPI - all other team members instantly get the cached results from ZHERO's backend, eliminating redundant API calls. All URLs are stored completely anonymously with no connection to your tenant or organization. This feature is opt-in and requires enabling OneAPI credentials for URL_LOOKUP in the settings - you have full control over participation.
  • Smart Privacy Filter: Only categorized URLs are synced to the backend cache, ensuring your internal/private domains remain confidential and never leave your browser
  • Three-Tier Caching Strategy: Fresh cache (less than 30 days) for instant results, stale cache (30-60 days) used while refreshing in background, and missing/old (over 60 days) fetched from Zscaler OneAPI
  • URL Lookup Settings: New settings panel to configure and monitor cache performance with real-time statistics showing cache hits, API calls saved, and sync status

Improvements​

  • Faster Loading: Experience dramatically faster page loads when working with URLs - the first user to look up a URL helps all other users benefit from cached results
  • Reduced API Usage: Backend cache system means fewer calls to Zscaler APIs, improving overall responsiveness and reducing rate limit issues for your entire team
  • Automatic Background Sync: URL lookups are automatically synced to the backend cache in the background without interrupting your workflow

Bug Fixes​

  • Permission Error Handling: Fixed authentication errors during tenant initialization (ZHERO-51)
  • API Error Conversion: Improved error handling by properly converting API error objects to Error instances

Version 1.4.72 (2025-10-07)​

Enhanced reliability and accuracy for administrators with restricted permissions.

Improvements​

  • Enhanced Permission Handling: Administrators with limited role-based access now experience smoother navigation with graceful handling of inaccessible features - no more unnecessary error messages for features outside your permission scope

Bug Fixes​

  • Analysis Suggestions Accuracy: Fixed an issue where the analysis engine could incorrectly suggest modifications to security settings that administrators with limited permissions couldn't access or view
  • URL Export Visibility: The URL Inventory Export feature is now correctly visible in the Free version as intended

Version 1.4.69 (2025-10-05)​

Introducing comprehensive URL Inventory & Analytics export with intelligent cloud app discovery and advanced policy usage tracking.

New Features​

  • URL Inventory Export: Export your complete URL configuration to Excel with over 20 customizable columns including wildcard detection, custom category assignments, policy impact metrics, and URL relationship mapping
  • OneAPI Cloud App Discovery: Automatically identify and categorize URLs with cloud application detection - see which URLs map to SaaS applications, their security classes, and standard URL categories through seamless OneAPI integration with real-time progress tracking
  • Advanced Policy Usage Analytics: Track exactly where each URL is referenced across your firewall, DNS, forwarding, and IPS rules with intelligent filtering that excludes generic "ANY" references, plus visibility into PAC files and App Profiles usage
  • Smart URL Analysis: Instantly identify zero-impact URLs (highlighted in gray), detect wildcard patterns, count custom category memberships, and map URL hierarchies for efficient policy cleanup and optimization projects

Version 1.4.67 (2025-09-25)​

Introducing powerful Firewall Rules export capability with comprehensive traffic analytics and enhanced location reporting.

New Features​

  • Firewall Rules Excel Export: Export all your firewall rules to a beautifully formatted Excel report with complete configuration details, traffic analytics showing the last 30 days of activity, and automatic color coding that highlights disabled rules and BLOCK actions - making policy review and audit incredibly efficient
  • Enhanced Location Export: Location exports now include firewall traffic columns alongside web insights, giving you a complete view of both web and firewall traffic volumes and percentages in a single comprehensive report

Version 1.4.65 (2025-09-25)​

Enhanced analytics capabilities with firewall traffic analysis and improved data privacy protection.

New Features​

  • Firewall Traffic Analysis: View and analyze firewall traffic data directly in your policies and locations, providing deeper insights into network usage patterns
  • Traffic Data for Locations: Monitor both web and firewall traffic volumes for individual locations and location groups with percentage calculations
  • PII Redaction: Enhanced privacy protection with automatic redaction of personally identifiable information in error reports

Bug Fixes​

  • Location Name Display: Fixed text rendering in location name cells to ensure proper visibility of all location information

Version 1.4.59 (2025-09-14)​

Major enhancement to the Free version with the introduction of entity information popups and analysis engine capabilities, previously exclusive to premium users.

New Features​

  • Entity Information Popups (Free Version): The Free version now includes interactive popups that display essential entity information directly in your Zscaler admin interface, making policy management more efficient even without a premium subscription
  • Analysis Engine (Free Version): For the first time, Free users can access the powerful analysis engine that automatically scans your configurations and provides actionable insights to improve your security posture
  • Beta Badge Indicators: Analysis templates now display beta badges to clearly identify features under development, helping you understand which analyses are experimental

Improvements​

  • Enhanced Free User Experience: While premium users enjoy full details and advanced features, Free users now benefit from core functionality that was previously unavailable, significantly improving the value of the free tier
  • Premium Feature Visibility: Added clear visual indicators throughout the interface to help you discover advanced premium features when you're ready to upgrade
  • Consistent UI Design: Consolidated all feature notices with improved styling and visibility for a more professional and intuitive user experience

Bug Fixes​

  • Display Priority: Fixed badge display order to show beta indicators first for better visibility
  • Tooltip Messaging: Improved tooltip text to provide clearer information about feature availability and limitations

Version 1.4.56 (2025-07-31)​

Enhanced URL category management and improved analysis template engine with QUIC traffic detection and inter-template communication.

New Features​

  • QUIC Traffic Analysis: New analysis template to detect and analyze QUIC protocol traffic patterns in your network configurations
  • Inter-Template Communication: Analysis templates can now share data and results with each other through dependency injection
  • URL Category Management: Added ability to move, copy, and edit URL categories directly from the interface while preserving their type
  • Device Trust Level Support: New entity type for analyzing device trust configurations with dedicated UI components
  • Manual Page Rescan: Added menu option to manually trigger UI enhancements on any Zscaler admin page

Improvements​

  • Template Performance: Enhanced analysis execution with shouldExecute checks to prevent unnecessary template runs
  • Entity List Actions: Added copy list functionality to entity menus for easier data export
  • Default Firewall Rules: Extended enhancement capabilities to include default firewall rules
  • Premium Template Indicators: Visual indicators for premium templates with automatic sorting by priority

Bug Fixes​

  • Dependency Injection: Fixed issues with ATM template dependency injection system
  • Template Execution: Resolved unnecessary template executions by adding proper execution checks

Version 1.4.41 (2025-07-20)​

Major improvements to policy management workflow with intelligent actions, enhanced SSL inspection analysis, and improved performance.

New Features​

  • Actions Drawer with Dependencies: New drag-and-drop interface for managing pending changes with automatic dependency tracking and execution order optimization
  • Multi-Select Actions: Ability to select and execute multiple actions at once with dependency-aware processing
  • Compact View Mode: Toggle between detailed and compact views for better visibility when managing many pending changes
  • SSL Inspection Templates: Added analysis templates for Apple and Android Enterprise device exceptions with automatic policy recommendations
  • Placeholder ID Resolution: Automatic resolution of references between pending entities, enabling complex multi-step configurations

Improvements​

  • Enhanced Filtering: Added filtering capabilities in the pending changes drawer to quickly find specific actions
  • Analysis Performance: Reduced analysis execution frequency from 30 to 10 seconds for faster issue detection
  • URL Categories Display: Now shows description field in URL category cards for better context
  • Duplicate Detection: Improved API activity tracking to prevent duplicate entries in audit logs

Bug Fixes​

  • Analysis Filter Persistence: Fixed issue where filter selections were lost when refreshing analysis results
  • SSL Severity Scoring: Adjusted severity levels to better reflect actual risk for catch-all rules
  • CDN Bypass Detection: Refined severity scoring based on wildcard domain depth for more accurate risk assessment

Version 1.4.17 (2025-07-19)​

Advanced analysis capabilities and enhanced stability for One API integration.

New Features​

  • Analysis Template Engine: Added powerful best practice analysis capabilities to automatically detect security and compliance issues
  • SSL Inspection CDN Bypass Detection: New analysis template that identifies potential CDN bypass issues in SSL inspection rules with severity scoring

Improvements​

  • One API Stability: Enhanced One API integration with automatic retry logic for rate limit errors, ensuring more reliable data fetching
  • App/Forwarding Profiles Export: Improved Excel export functionality with enhanced formatting and customizable columns
  • Performance Optimization: Implemented intelligent caching and deduplication to reduce API calls and improve response times

Bug Fixes​

  • Changelog Display: Fixed issue where changelog modal would close unexpectedly during app refresh
  • DOM Handling: Improved content script stability with better DOM mutation handling

Version 1.4.0 (2025-07-13)​

Implemented One API integration for: enhanced visibility into App Profiles, Forwarding Profiles, and PAC Files. Preemptive url Lookup for all urls.

New Features​

  • One API Integration: Added support for One API that provides information and exportable reports on app profiles, forwarding profiles, and PAC files. Learn how to configure One API

Version 1.3.40 (2025-06-23)​

Enhanced filtering options and improved user sign-up experience.

Improvements​

  • URL Table Filtering: Added new "does not contain" filter for URLs and ability to filter by categories and apps in the lookup column.
  • Sign-Up Flow: Improved account creation and confirmation process with better feedback and automatic handling of confirmation steps.

Version 1.3.35 (2025-06-15)​

Improved searchbar functionality and optimized cloud app data loading.

Improvements​

  • Cloud App Performance: Implemented just-in-time information fetching to improve speed and reduce API usage.

Bug Fixes​

  • Search Bar: Fixed issue where users couldn't enter text due to selection problem.

Version 1.3.31 (2025-06-12)​

Enhanced search engine performance for faster URL & Port lookups. Ctrl+CMD+J will automatically search for selected text.

Improvements​

  • Search Engine Speed: Optimized search algorithm for faster URL & Port processing and lookup operations.

New Features​

  • Search Engine: Added instant search functionality accessible with CTRL/CMD+J shortcut on selected text (limited availability).

Version 1.3.27 (2025-06-09)​

Enhanced search capabilities for quick access to entities.

New Features​

  • Search Engine: Added new global search functionality accessible from the main menu or with CTRL/CMD+J shortcut (limited availability).

Version 1.3.17 (2025-06-08)​

Improvements​

  • Cloud App Management: Added ability to directly edit sanctioned state for cloud applications from the UI.

Version 1.3.16 (2025-06-08)​

Enhanced UI with support for users and departments.

New Features​

  • User and Department Analysis: Added support for analyzing user and department entities with policy inheritance.
  • UI: Added new UI components for displaying user and department information in various formats.

Version 1.3.7 (2025-06-04)​

Enhanced SSL Inspection analytics capabilities.

New Features​

  • Legacy TLS Analysis: Added new analysis to identify SSL inspection configurations using legacy TLS versions.
  • SSL Inspection Traffic Analysis: Added new 30-day traffic analytics for SSL inspection configurations.

Version 1.3.0 (2025-06-03)​

Completely redesigned Analysis UI for better user experience and improved usability.

Improvements​

  • Redesigned Analysis UI: Enhanced suggestion cards with clearer layout and improved readability.
  • Better Visualization: Improved presentation of analysis results with more intuitive icons and status indicators.
  • Action Controls: Optimized placement of action buttons for running analysis and applying changes.
  • Visual Hierarchy: Improved organization of analysis details to highlight the most important information.
  • Responsive Design: Better layout handling for different screen sizes and content types.

Version 1.2.49 (2025-05-28)​

Improved user authentication experience.

Improvements​

  • Authentication Flow: Enhanced signup & login process for a smoother user experience.

Version 1.2.46 (2025-05-26)​

New smart analysis templates (beta), and improved UI for analysis

Version 1.2.31 (2025-05-20)​

UI improvements.

Improvements​

  • UI Enhancement: Reimplemented analysis renderer for better HTML rendering and formatting + improved redundant url analysis output.
  • UI Consistency: Updated notifications progress indicator to be less ambiguous.
  • Usability: Hidden ANY policies in popover to simplify interface.

Version 1.2.26 (2025-05-18)​

Performance and Security best practices enhancements.

Improvements​

  • Lazy Loading: Added lazy loading for entities to reduce initial load time.
  • Performance: Added caching for analysis & suggestions engine to reduce calculations.
  • TLS Security: Highlighting Minimum TLS Version when it's lower than 1.2 as per security best practices.

Version 1.2.00 (2025-05-12)​

First release (limited availability) of the Analysis & Suggestions engine.

New Features​

  • Added Analysis & Suggestions engine .
  • Added check on Redundant URL Entries (severity: low) in url categories.

Version 1.1.00 (2025-05-10)​

Improved onboarding experience.

New Features​

  • Added onboarding modal with a quick tour of the extension features.

Improvements​

  • Added new Cloud Apps name translations from last Zscaler's ZIA update.

Version 1.0.28 (2025-05-10)​

Improved stability and error management for a better user experience.

New Features​

  • Added advanced error handling system with warning notifications for synchronization issues and ZHERO upgrades.

Version 1.0.24 (2025-05-09)​

Changelog for new versions of Zhero Chrome Extension.

New Features​

  • New changelog modal.
  • Implemented extension update detection and data reset functionality when required.

Improvements​

  • Added tenant data update method to refresh CSRF token in API engine.

Bug Fixes​

  • Policy fetch error: Added BLOCK_RESET as an option for firewall rule actions.

Version 1.0.9 (2025-05-05)​

New Features​

  • Detection of policies relative to an entity/criteria due to Criteria field set to ANY (Limited Availability).
  • Detection of "unreachable" policies for a given entity/criteria (because there is an ANY policy before it).

Bug Fixes​

  • DB Upgrade problems

Version 1.0.0 (2025-05-04)​

Initial public release of Zhero.

Intro?

New Features​

  • Update & Show Diff engine for entities (Limited Availability)