Last CIO Week, we showed you how our network stacks up against competitors across several countries. We demonstrated with our tests that Cloudflare Access is 38% faster than ZScaler (ZPA) worldwide.
Today we wanted to focus on LATAM and show how our network performed against Zscaler and Netskope in Argentina, Brazil, Chile, Colombia, Costa Rica, Ecuador, Mexico, Peru, Uruguay and Venezuela.
With 47 data centers across Latin America and Caribbean, Cloudflare has the largest number of SASE Points of Presence across all vendors, meaning we can offer our Zero Trust services closer to the end user and reduce unwanted latency.
We’ve run a series of tests comparing our Zero Trust Network Access product against Zscaler and Netskope’s comparable products.
For each of these tests, we used 95th percentile Time to First Byte and Response tests, which measure the time it takes for a user to make a request, and get the start of the response (Time to First Byte), and the end of the response (Response). These tests were designed with the goal of trying to measure performance from an end-user perspective.
In this blog we’re going to talk about why performance matters and do a deep dive on what we’re measuring to show that we’re faster.
Why does performance matter?
Performance matters because it impacts your employees' experience and their ability to get their job done. For example, if Anna is connecting to a hosted, protected application like Salesforce to complete some work, she doesn’t want to be waiting constantly for pages to load or to authenticate her requests. In an access-controlled application, the first thing you do when you connect is you log in. If that login takes a long time, you may get distracted with a random message from a coworker and even when you get authenticated, you still want your normal application experience to be snappy and smooth: users should never notice Zero Trust when it’s at its best.
If these products or experiences are slow, then something worse might happen than your users complaining: they may find ways to turn off the products or bypass them, which puts your company at risk. A Zero Trust product suite is completely ineffective if no one is using it because it’s slow.
Ensuring Zero Trust is fast is critical to the effectiveness of a Zero Trust solution: employees won’t want to turn it off and put themselves at risk if they barely know it’s there at all. Services like Zscaler or Netskope may outperform many older, antiquated solutions, but their network still fails to measure up to a highly performant, optimized network like Cloudflare’s.
Cloudflare Access: the fastest Zero Trust proxy
Access control needs to be seamless and transparent to the user: the best compliment for a Zero Trust solution is employees barely notice it’s there. Services like Cloudflare Access and Zscaler Private Access (ZPA) allow users to cache authentication information on the provider network, ensuring applications can be accessed securely and quickly to give users that seamless experience they want. So having a network that minimizes the number of logins required while also reducing the latency of your application requests by delivering the service closer to the user will help keep your Internet experience snappy and reactive.
For these tests, Cloudflare contracted Miercom, a third party who performed a set of tests that was intended to replicate an end-user connecting to a resource protected by Cloudflare, Zscaler and Netskope. Miercom set up application instances in 14 locations around the world, and devised a test that would log into the application through various Zero Trust providers to access certain content. The test methodology is described as follows, but you can look at the full report from Miercom detailing their test methodology here:
User connects to the application from a browser mimicked by a Catchpoint instance - new session
User authenticates against their identity provider
User accesses resource
User refreshes the browser page and tries to access the same resource but with credentials already present - existing session
In this test we evaluated Cloudflare against Zscaler and Netskope accessing applications hosted in two specific regions (Brazil and the US south-west). We tested the response time for an existing session, when a user has already been authenticated and that authentication information can be cached.
Here’s how this data looks for each of the 10 countries we tested across LATAM:
Argentina
| Zero Trust Access - Time to First Byte (App in Brazil) | |
|---|---|
| 95th Percentile (ms) | |
| Cloudflare | 1,203 |
| Netskope | 8,319 |
| Zscaler | 5,961 |
When we drill into the data, we see that Cloudflare is faster when connecting from Argentina to an app hosted in Brazil. Cloudflare’s 95th percentile time to first byte times are 75% faster than Zscaler and 85% faster than Netskope.
Cloudflare is also faster when connecting from Argentina to an app hosted in the United States (South West Region). Cloudflare’s 95th percentile time to first byte times are 70% faster than Zscaler and 68% faster than Netskope:
| Zero Trust Access - Time to First Byte (App in US West) | |
|---|---|
| 95th Percentile (ms) | |
| Cloudflare | 1,587 |
| Netskope | 5,082 |
| Zscaler | 5,299 |
Brazil
| Zero Trust Access - Time to First Byte (App in Brazil) | |
|---|---|
| 95th Percentile (ms) | |
| Cloudflare | 1,525 |
| Netskope | 3,799 |
| Zscaler | 3,916 |
When we drill into the data, we see that Cloudflare is faster when connecting from Brazil to an app hosted in Brazil. Cloudflare’s 95th percentile time to first byte times are 61% faster than Zscaler and 59% faster than Netskope.
Cloudflare is also faster when connecting from Brazil to an app hosted in the United States (South West Region). Cloudflare’s 95th percentile time to first byte times are 58% faster than Zscaler and 59% faster than Netskope:
| Zero Trust Access - Time to First Byte (App in US West) | |
|---|---|
| 95th Percentile (ms) | |
| Cloudflare | 1,603 |
| Netskope | 3,989 |
| Zscaler | 3,894 |
Chile
| Zero Trust Access - Time to First Byte (App in Brazil) | |
|---|---|
| 95th Percentile (ms) | |
| Cloudflare | 714 |
| Netskope | 3,000 |
| Zscaler | 3,157 |
When we drill into the data, we see that Cloudflare is faster when connecting from Chile to an app hosted in Brazil. Cloudflare’s 95th percentile time to first byte times are 77% faster than Zscaler and 76% faster than Netskope.
Cloudflare is also faster when connecting from Chile to an app hosted in the United States (South West Region). Cloudflare’s 95th percentile time to first byte times are 80% faster than Zscaler and 79% faster than Netskope:
| Zero Trust Access - Time to First Byte (App in US West) | |
|---|---|
| 95th Percentile (ms) | |
| Cloudflare | 648 |
| Netskope | 3,113 |
| Zscaler | 3,290 |
Colombia
| Zero Trust Access - Time to First Byte (App in Brazil) | |
|---|---|
| 95th Percentile (ms) | |
| Cloudflare | 1,628 |
| Netskope | 2,699 |
| Zscaler | 4,763 |
When we drill into the data, we see that Cloudflare is faster when connecting from Colombia to an app hosted in Brazil. Cloudflare’s 95th percentile time to first byte times are 65% faster than Zscaler and 39% faster than Netskope.
Cloudflare is also faster when connecting from Colombia to an app hosted in the United States (South West Region). Cloudflare’s 95th percentile time to first byte times are 59% faster than Zscaler and 56% faster than Netskope:
| Zero Trust Access - Time to First Byte (App in US West) | |
|---|---|
| 95th Percentile (ms) | |
| Cloudflare | 1,466 |
| Netskope | 3,351 |
| Zscaler | 3,623 |
Costa Rica
| Zero Trust Access - Time to First Byte (App in Brazil) | |
|---|---|
| 95th Percentile (ms) | |
| Cloudflare | 1,432 |
| Netskope | 2,036 |
| Zscaler | 2,110 |
When we drill into the data, we see that Cloudflare is faster when connecting from Costa Rica to an app hosted in Brazil. Cloudflare’s 95th percentile time to first byte times are 32% faster than Zscaler and 29% faster than Netskope.
Cloudflare is also faster when connecting from Costa Rica to an app hosted in the United States (South West Region). Cloudflare’s 95th percentile time to first byte times are 36% faster than Zscaler and 32% faster than Netskope:
| Zero Trust Access - Time to First Byte (App in US West) | |
|---|---|
| 95th Percentile (ms) | |
| Cloudflare | 1,387 |
| Netskope | 2,044 |
| Zscaler | 2,191 |
Ecuador
| Zero Trust Access - Time to First Byte (App in Brazil) | |
|---|---|
| 95th Percentile (ms) | |
| Cloudflare | 1,134 |
| Netskope | 2,002 |
| Zscaler | 2,206 |
When we drill into the data, we see that Cloudflare is faster when connecting from Ecuador to an app hosted in Brazil. Cloudflare’s 95th percentile time to first byte times are 48% faster than Zscaler and 43% faster than Netskope.
Cloudflare is also faster when connecting from Ecuador to an app hosted in the United States (South West Region). Cloudflare’s 95th percentile time to first byte times are 46% faster than Zscaler and 40% faster than Netskope:
| Zero Trust Access - Time to First Byte (App in US West) | |
|---|---|
| 95th Percentile (ms) | |
| Cloudflare | 1,179 |
| Netskope | 1,976 |
| Zscaler | 2,210 |
Mexico
| Zero Trust Access - Time to First Byte (App in Brazil) | |
|---|---|
| 95th Percentile (ms) | |
| Cloudflare | 2,334 |
| Netskope | 2,882 |
| Zscaler | 3,537 |
When we drill into the data, we see that Cloudflare is faster when connecting from Mexico to an app hosted in Brazil. Cloudflare’s 95th percentile time to first byte times are 34% faster than Zscaler and 19% faster than Netskope.
Cloudflare is also faster when connecting from Mexico to an app hosted in the United States (South West Region). Cloudflare’s 95th percentile time to first byte times are 56% faster than Zscaler and 53% faster than Netskope:
| Zero Trust Access - Time to First Byte (App in US West) | |
|---|---|
| 95th Percentile (ms) | |
| Cloudflare | 1,249 |
| Netskope | 2,679 |
| Zscaler | 2,880 |
Peru
| Zero Trust Access - Time to First Byte (App in Brazil) | |
|---|---|
| 95th Percentile (ms) | |
| Cloudflare | 609 |
| Netskope | 2,425 |
| Zscaler | 2,992 |
When we drill into the data, we see that Cloudflare is faster when connecting from Peru to an app hosted in Brazil. Cloudflare’s 95th percentile time to first byte times are 79% faster than Zscaler and 74% faster than Netskope.
Cloudflare is also faster when connecting from Peru to an app hosted in the United States (South West Region). Cloudflare’s 95th percentile time to first byte times are 80% faster than Zscaler and 73% faster than Netskope:
| Zero Trust Access - Time to First Byte (App in US West) | |
|---|---|
| 95th Percentile (ms) | |
| Cloudflare | 827 |
| Netskope | 3,108 |
| Zscaler | 4,189 |
Uruguay
| Zero Trust Access - Time to First Byte (App in Brazil) | |
|---|---|
| 95th Percentile (ms) | |
| Cloudflare | 1,242 |
| Netskope | 3,556 |
| Zscaler | 4,467 |
When we drill into the data, we see that Cloudflare is faster when connecting from Uruguay to an app hosted in Brazil. Cloudflare’s 95th percentile time to first byte times are 72% faster than Zscaler and 65% faster than Netskope.
Cloudflare is also faster when connecting from Uruguay to an app hosted in the United States (South West Region). Cloudflare’s 95th percentile time to first byte times are 60% faster than Zscaler and 48% faster than Netskope:
| Zero Trust Access - Time to First Byte (App in US West) | |
|---|---|
| 95th Percentile (ms) | |
| Cloudflare | 1078 |
| Netskope | 2,101 |
| Zscaler | 2,726 |
Venezuela
| Zero Trust Access - Time to First Byte (App in Brazil) | |
|---|---|
| 95th Percentile (ms) | |
| Cloudflare | 1,272 |
| Netskope | 3,451 |
| Zscaler | 3,800 |
When we drill into the data, we see that Cloudflare is faster when connecting from Venezuela to an app hosted in Brazil. Cloudflare’s 95th percentile time to first byte times are 66% faster than Zscaler and 63% faster than Netskope.
Cloudflare is also faster when connecting from Venezuela to an app hosted in the United States (South West Region). Cloudflare’s 95th percentile time to first byte times are 85% faster than Zscaler and 77% faster than Netskope:
| Zero Trust Access - Time to First Byte (App in US West) | |
|---|---|
| 95th Percentile (ms) | |
| Cloudflare | 685 |
| Netskope | 2,984 |
| Zscaler | 4,627 |