Zero-trust network access usually carries a deployment tax: an agent on every device that needs to reach private applications. Agents are friction — they fail to install, lag on updates, and simply cannot run on unmanaged or third-party machines. Agentless access removes that tax for the cases agents cannot cover.

Zscaler, Inc.'s US11811855B1, “Policy based agentless file transfer in zero trust private networks” (issued November 7, 2023; CPC H04L 67/06 — file transfer over networks, and H04L 67/02 — HTTP-based protocols), describes agentless, policy-governed file transfer inside a zero-trust private network. Read it at US11811855B1.

Mechanically, the transfer is brokered through the zero-trust service over standard web protocols, with policy enforced centrally, so a user on an unmanaged device can move files to private resources without first installing endpoint software. The trust decision lives in the broker, not in an agent on the machine — which is the architectural point of zero-trust-network-access done as a service.

Why this is a business story: agentless reach is a competitive wedge in the ZTNA market, where Zscaler, Palo Alto's Prisma Access, and Cloudflare fight over coverage of contractors, BYOD, and partner access. The strategic value is total addressable use cases: every scenario an agent cannot cover is revenue a pure-agent competitor leaves on the table. The long inventor list on this grant signals a substantial internal effort behind the capability.

The grounded read: agentless zero-trust transfer extends secure private access to devices that cannot run an agent, with policy enforced in the broker. Zscaler's 2023 grant names that capability — a coverage wedge in the contested ZTNA market.