A cloud-delivered Security Service Edge platform that receives user and branch traffic, inspects it in the cloud, and forwards it to its destination. It consolidates secure web gateway, cloud access security broker, DNS-layer security, cloud firewall, and zero-trust private application access into one service with a single policy and reporting console. Traffic reaches it through client software, network tunnels, or DNS forwarding rather than through on-premises inspection appliances.