Recently at DEF CON 2025, UK security researchers from AmberWolf demonstrated severe vulnerabilities across three major ZTNA vendors, affecting major vendors in the cybersecurity space. The findings point to alarming flaws, authentication bypasses and privilege escalation attacks, that could potentially compromise thousands of organizations relying on these platforms for secure remote access.

Our Response: No Impact, No Compromise

As soon as this research was made public, our team conducted a comprehensive review of all published technical details, blog updates, and statements from AmberWolf and the impacted vendors.

We’re proud to say:

✅ No vulnerabilities were identified in our platform solution as part of this research.

While the AmberWolf report specifically highlighted SAML-related flaws in platforms such as Zscaler and Netskope, it’s important to clarify that our ZTNA solution does not share the same vulnerability.

“The SAML implementation has undergone extensive review. It employs strict signature validation and robust SAML flows, making the specific attack vector described in the AmberWolf research inapplicable to our product.”

Our engineering teams and partners have prioritized security by design, ensuring resilience even against evolving attack vectors.

The Real Lesson: Zero Trust Isn’t a Checkbox

These recent findings serve as a reminder that labeling a solution as “Zero Trust (NA)” isn’t enough. The effectiveness of any ZTNA platform depends not only on how it’s built, but also on how it’s configured, monitored, and maintained over time.

Security isn’t a one-time implementation—it’s an ongoing process. That’s why it’s critical to have a trusted partner by your side: one who continuously evaluates the evolving threat landscape, validates your setup, and ensures that your Zero Trust strategy actually holds up under pressure. This isn’t just about technical flaws; it’s about how organizations choose their security partners.

What You Should Demand from Your ZTNA Provider:

  • Secure-by-design architecture
  • Rigorous third-party audits and code reviews
  • Transparent vulnerability disclosures
  • Timely and reliable patching processes
  • Continuous monitoring and support from trusted experts

Choose Trust That’s Earned, Not Assumed

Today’s security landscape leaves no room for assumptions. Choosing a ZTNA solution is more than a procurement decision—it’s a long-term commitment to operational integrity and risk reduction.

At Open Systems we work closely with our technology partners to ensure that our customers are protected by solutions that don’t just talk about Zero Trust but live and breathe it—securely, transparently, and continuously.

Want to know more about how we can help secure your Zero Trust journey?

Contact Us