In 2009, a cyber attack known as Operation Aurora spurred Google to take drastic measures and reassess their security protocols. The threat actor, affiliated with China’s People’s Liberation Army, targeted the Gmail accounts of human rights activists in various countries, leading Google to withdraw from the China market. 

In response, Google developed BeyondCorp, a comprehensive Zero Trust network architecture that shifted the perimeter from the network to individual users, thereby replacing the company's traditional VPN-based approach to remote access. Over the decade that followed, BeyondCorp evolved into a complete, secure access control system, protecting both on-premises and remote users' access to Google resources.

Google BeyondCorp Enterprise is a zero-trust and subscription-based security solution provided by Google. It is designed to provide easy and secure on-premise and cloud-based access to valuable corporate applications. Yes, riding on the zero-trust bandwagon is hardly a surprise for Google, considering its pioneering work on this model back in the early 2000s.

Sounds good so far? Let’s see how it works in practice.

 Google BeyondCorp security features 

Google BeyondCorp is a revolutionary security model that has completely transformed the way companies defend their data and applications. With its zero-trust approach, it never trusts any user or device, regardless of if they are inside the corporate network. This paradigm shift is a huge divergence from traditional security models that rely on the trustworthiness of users and devices inside the network. 

Google BeyondCorp ensures that only legitimate users and devices can access company applications and data by using multi-factor authentication. Furthermore, it goes a step further by providing advanced threat detection capabilities. This system constantly monitors and analyzes user activity, searching for any suspicious behavior or signs of a possible breach. If risks are identified, an alert will be sent out with necessary measures being taken to stop further damage. Ultimately, Google BeyondCorp is an effective tool for organizations to protect their data and applications from any internal or external threats.

At the heart of this model is the Zero Trust concept in which nothing is assumed when verifying one’s identity. This means that whenever an employee tries to connect to protected services or assets BeyondCorp will not use the network from which the access request has been made as a reference point for security verification. Instead, it will rely on the specific context relevant to that user and their device. The final outcome should be comprehensive insulation from the cybersecurity risks such as data leakage, malware and phishing attacks, theft of corporate information, etc.

The BeyondCorp solution employs several different security features to ensure users are protected from credential theft and accidental exposure. This is done by granting access only when both a device certificate and user credentials are presented. There is also the On-premises Connector which enables Google Cloud-based Identity-Aware Proxy traffic to travel to and from virtual machines and applications outside the Google Cloud. 

Moreover, the Threat and Data Protection Services provides security intelligence and helps prevent data leakage, malware, and malicious sites. Plus, with the Endpoint Verification feature, administrators can generate a list of devices and set security requirements for each one. Additionally, with the Access Context Manager, custom zero-trust access policies can be quickly created and deployed, with access limits depending on the credential strength and time. 

Rounding out the supported security features are application-based segmentation, one-time passwords, SMS codes, 2SV keys, push notifications, pre- and post-login risk assessments, SSL certificate management, global load balancing, and DDoS protection. All these features are perfectly integrated with the popular Chrome browser, providing users with an agentless and proxy-less solution.

Management features 

The BeyondCorp security model is an effective way to protect your organization's valuable data - and it all starts with the four key pillars of its design that extend into its management features.

Pillar One: Device identity requires all users’ devices to be registered in the system, with up-to-date security patches and a strong cryptographic key for extra security.

Pillar Two: User database and SSO ensures that changes in the organization's teams and roles are always reflected in the access system.

Pillar Three: Removing trust from the network and always-on access control means that each connection is encrypted and authenticated, no matter where it's from.

Pillar Four: An internet-facing access proxy is essential to ensure that only users with verified identities and trusted devices can access the organization's services.

BeyondCorp puts these four pillars together to create a comprehensive, secure system, so you can rest assured your data is safe. The management of these pillars can be done using the Chrome browser, in an easily accessible and oddly familiar way.

Access policies can be managed and controlled via the administration console whenever the users sign into the Chrome browser from any platform. The management of their accounts can be done via Chrome Enterprise, Google Workspace, or Cloud Identity.

The Endpoint Verification feature is a great tool for administrators that allows them to gain valuable insights on the devices from which corporate assets are being accessed. With this data, you can tailor access policies such as password management, safe browsing, and extension management. Moreover, you can also enforce BeyondCorp Enterprise threat and data controls at the profile level to protect users from malicious websites, monitor access to sensitive data, and submit suspicious files for analysis. Additionally, security event reporting for managed user profiles provides you with information about the activities of high-risk users, data protection, and threat reports.

Google BeyondCorp interface 

Finding your way around with Google BeyondCorp should be easy, at least if you are familiar with any of Google’s products, such as the Chrome browser.

Upon signing in to a new profile, accessing protected profiles via Chrome is as intuitive as it gets. In line with predefined access policies, end users may be asked to submit additional information when signing on, including two-factor authentication. What follows involves just taking note of provided instructions for the completion of the Google sign-in process.

The Google BeyondCorp interface is the ideal solution for efficient user access management, combining user-friendliness, intuitive design and powerful features. Whether accessing from any location, device, or internet connection, the interface offers granular access control for admins to tailor permissions for each user, group or device. In addition, real-time monitoring enables admins to detect and respond to any suspicious behavior. Detailed logs and reports make it easy to trace user activity and stay in line with company policies and regulations. Ultimately, the Google BeyondCorp interface simplifies and secures user access control.

Pricing 

When it comes to Google BeyondCorp, one size definitely does not fit all. Tailored to suit the specific needs of organizations, this powerful platform provides flexible pricing plans that accommodate different budgets and company sizes. With the free trial period, new users can try the service out before opting for a paid subscription. 

The Enterprise plan starts at $6 per user per month, while the Essentials plan starts at $4 per user per month. However, keep in mind that there is a minimum contract cost for Enterprise at $14,000 and $10,000 for Essentials. On top of that, Google offers a custom quote for companies which aim to have a custom solution for their business.

The easiest way to decide if six dollars is too much for what is being offered here is to check the list of both paid and baseline features here. 

Final verdict 

The renowned Google BeyondCorp Enterprise provides an effortless, swift and affordable route to achieve a zero-trust model implementation. Minimizing security incidents, thwarting malicious assaults and minimizing your exposure are just a few of the benefits of this renowned option. Not to mention, Google's trusted brand and seamless integration of the Chrome browser makes this a highly desirable choice. While Google devotees will find the price of entry to be more than suitable, others who want to test out the zero-trust approach will be delighted with what BeyondCorp Enterprise can do for their security.

• Check out our best business VPN

Cooler Master CK720: Two-minute review

I’m sure I’m not alone when I say that the top gaming keyboard manufacturers really need to throw their hats in the keyboard modding ring. They have been but the going was slow, with Razer releasing its Razer PBT keycap upgrade sets and coiled cables back in 2020, Roccat just rolling out the first keyboard in its popular Vulcan line with removable keycaps in 2022, and HyperX only launching its customized keycaps this year.

Luckily, some of the best gaming keyboard brands are starting to pick up the pace, especially with the release of the Cooler Master CK720, CM’s first foray into the hot-swappable, mod-friendly enthusiast keyboard game. It isn’t the first one to get there, with the Corsair K70 Pro Mini Wireless hitting the shelves a few months earlier. 

However, it is a promising early attempt that makes me look forward to what comes next. And, I probably would rate it as one of the best mechanical keyboards for beginners who want to get into keyboard modding. 

This is a 65% keyboard, which in my opinion is the perfect compromise. It keeps some of the vital dedicated keys – like the arrow keys – while maintaining a small footprint that’s ideal for smaller or nomadic setups. And, while it isn’t the lightest I’ve tested, it won’t be a struggle lugging it around in your backpack if you want to bring it to the office, even if that office is at a resort in Hawaii.

Though it's a mostly simple-looking keyboard, many of the Cooler Master CK720’s parts are customizable or replaceable. It’s hot-swappable, meaning you can pull out the existing switches with a switch puller and replace them with other switches. 

Naturally, its PBT doubleshot keycaps, available in black and white, are removable and replaceable as well; so is its cable so you can switch it out to your favorite coiled cable as I did. In fact, so is its top plate, although removing that one – you have to pull a small, hidden lever to loosen and remove it – can be such a pain it’s almost not worth it. Cooler Master currently does not sell top plates in different colors and designs anyway.

Remove the top plate, however, and you’ll be able to access the rest of the keyboard parts. Not that you’d want to as CM has taken pains to make it a well-built board. It’s fitted with the brand’s new pre-lubed stabilizers as well as two separate silicone dampening pads (one on the PCB and one on the bottom cover).

There’s a three-way multi-function knob, also known as a rotary encoder, at the top right corner that works with media controls by default but whose functions can be remapped on the MasterPlus software. You can use it to cycle through RGB lighting effects, as navigation keys, to access macros, and more.

While we’re on the subject, installing MasterPlus opens the keyboard up to a whole world of customizations. Being a mini keyboard, it already comes with on-the-fly shortcuts, but the software just gives you a whole lot more control over your per-key lighting, remapping, and macros. I highly recommend downloading it.

Without it, the Cooler Master CK720 is already an incredible gaming keyboard. Its standard 1,000Hz polling rate was more than enough to keep up with games like Cyberpunk 2077 and battling rot monsters and bosses in Kena: Bridge of Spirits during my testing. Plus, I didn’t experience any latency due to its wired connectivity.

As great as it is for gaming, it’s also an incredible keyboard for productivity. In fact, as far as enjoying a satisfying typing experience, this is one of the best keyboards I’ve ever used. That’s thanks in part to the Kailh Box V2 red switches it’s fitted with (both white and brown switch variants are also available) as well as due to the stabilizers inside. As a result, those keys not only deliver that satisfying linear feel, but are also very smooth and stable.

Mech keys, especially clicky ones, tend to be loud, but the addition of the two dampening pads here are somewhat successful at minimizing the noise. While I have used much quieter keyboards, the CK720 isn’t too bad either. I just wish that my linear red version delivered a more thocky sound, but what I’m getting is something between that and a clacky sound. That’s not a deal-breakers per se, but if you’re more discerning about your keyboard’s sound profile, you’ll want to do a sound test first.

Cooler Master CK720: Price & availability

• How much does it cost?  $115.99 / £93.07 / AU$172.67 
• When is it available? Available now
• Where can you get it? Available in the US, UK, and Australia

The Cooler Master CK720’s price tag is about on par with many enthusiast mech keyboards in its class. It’ll set you back $115.99 / £93.07 / AU$172.67, which is probably more than most people would pay for a keyboard but is just about what most enthusiasts would spend on a new keyboard to add to their collection.

In the best mini gaming keyboards realm, however, it’s actually cheaper than the competition. The wireless Razer BlackWidow V3 Mini Hyperspeed, for example, is an eye-watering $199.99 / £189.99 / AU$329.95 while the wired Roccat Vulcan II Mini will set you back $149.99 / £129.99 / AU$259.95. Both have a mini layout; unlike the CK720, neither is hot-swappable.

The CK720 is now readily available in the US, the UK, and Australia.

•  Value: 4.5 / 5 

Cooler Master CK720: Specs

Should you buy the Cooler Master CK720?

Buy it if...

Don't buy it if...

Cooler Master CK720: Also consider

How I tested the Cooler Master CK720

• Spent a few weeks testing it
• Used it mostly for gaming and work
• Tested its features and performance as well as did some modding

I tested the Cooler Master CK720 for a few weeks, using it as my gaming keyboard and my main keyboard for work. I tested it with games like Cyberpunk 2077, Kena: Bridge of Spirits, and Hogwarts Legacy. I also used it to compose emails and write articles.

I made sure to mod it to see how easy it is to customize, removing the keycaps and switches as well as top plate and replacing the former two with keycaps and switches from my collection.

As a keyboard enthusiast, I own a small collection of mechanical keyboards, many of them hot-swappable and I customize when I find the time. I’ve also been testing keyboards, from productivity ones to gaming options, for years now, even before I joined the TechRadar Editorial team.

Read more about how we test

First reviewed April 2023

ZScaler Private Access (ZPA) is an innovative, cloud-based zero-trust solution that offers a smooth, secure connection between distant devices and confidential applications on the public cloud or within a data center. By keeping these applications shielded from the internet, they remain out of reach for unauthorized users. ZPA is compatible with both managed and unmanaged devices, granting protection to any private application, not just web apps. Built with a zero-trust network access (ZTNA) basis, users are connected to outbound authorization, instead of extending the network as with older VPNs. This way, IP addresses are always hidden and DDoS is not an option.

As a welcome bonus, ZPA wants to get its job done better than any virtual private network (VPN) while cutting down on fat when it comes to maintenance demands, costs, and security risks. If you are into protecting access to private assets and applications across the cloud, data centers, or just wherever you keep your enterprise resources, Zscaler Private Access is surely worthy of your attention.

Now, let’s see why this is the case.

Zscaler Private Access security features

Zscaler Private Access markets its security model around the idea of intelligent restriction of access to internal services and applications of an organization. At the same time, it wants to position itself as a safer alternative to VPNs by eliminating the need to connect to one’s network to get access to applications.

ZPA may appear to be a promising solution for secure corporate access, but its performance leaves much to be desired for a variety of reasons. Of Zscaler's 150 Point-of-Presences (PoP), ZPA is only available from 50 locations, leading to greater latency as user data must be sent back to a PoP before reaching the corporate data center. Additionally, these PoPs are nothing more than virtual machines hosted on Amazon Web Services, rendering them incapable of controlling routing or scaling resources to meet demand. 

Moreover, Zscaler data centers rely on the internet to connect with each other instead of utilizing a private backbone. This means that WAN traffic is exposed to the variability and poor performance of the public internet, even for data used to manage the service. Though private backbone and WAN optimization could greatly improve performance, these technologies are not available with Zscaler.

Performance issues aside, ZPA offers great security features that can rival the best solutions on the market. Rather than going with an alternative, you can implement a collection of context-driven access rules controlling entry to internal resources based on the necessities of a particular task at hand. This implies that obtaining these assets occurs without network access, which, as expected, reduces the risks associated with this attack vector.

This distinction sets ZPA apart from the Zscaler Internet Access (ZIA) solution offered by the same company, which focuses on delivering web access to public applications. With ZPA, your organization benefits from single sign-on (SSO) authentication for all utilized applications and customizable access policies that can be tailored and expanded according to your requirements.

Management features

One of ZPA's shining highlights is its centralized policy management, offering administrators the opportunity to establish highly specific access policies for different users and teams across the organisation. Policies can be crafted according to user roles, locations, devices, and more, guaranteeing only authorised personnel can gain access to particular applications. This centralized strategy simplifies the handling of access policies and furnishes enhanced transparency into who has entry to which resources.

ZPA effortlessly meshes with popular identity and access management (IAM) solutions, like Active Directory, SAML and OAuth, enabling organizations to use their existing user authentication processes to ensure a smooth and secure user experience. In tandem with IAM best practices, ZPA makes sure that access to critical data is thoroughly regulated and monitored.

ZPA is built on the principles of Zero Trust, which means that it assumes that no user, device, or application can be trusted by default. ZPA provides continuous authentication and authorization, only granting access to the specific applications a user is authorized to use. This approach helps prevent unauthorized access and reduces the risk of lateral movement within the network by malicious actors.

With ZPA's application segmentation, each application is kept separate from other applications and network resources, significantly decreasing the attack surface and keeping compromises in one application from putting the others or network resources in jeopardy. This application segmentation is essential in safeguarding sensitive data and maintaining a secure security posture within the organization.

Zscaler Private Access interface

The living and the beating heart of the Zscaler Private Access is the ZPA Admin Portal which is chock-full of dashboards that you would expect to see when promised a bird’s eye view of your resources, users, and infrastructure.

The ZPA interface is designed to provide a streamlined and intuitive way of managing your organization's private access configuration. Divided into several sections, you can easily manage different aspects of the solution. 

The Dashboard provides an overview of the ZPA environment with real-time stats and graphs to quickly identify potential issues. Connectors establish secure connections between ZPA and your private apps. The Applications section lets you configure and manage accessible apps and define access rules. With the Policies section, you can create granular access policies based on user identity, device posture, location, and more. 

The Identities section lets you manage user and group identities, and the Settings section allows you to configure global settings. Finally, ZPA provides powerful reporting and analytics to understand usage patterns, identify security risks, and optimize your private access deployment.

The interface also features a range of diagnostic features, including those that notify you of user activity, user status, app connector status, ZPA private service edge status, etc. 

To make things easier, you can have your ZPA automatically identify and notify you of the applications the access to which is being requested by users, or do everything manually. The same interface is used to set up specific policies that regulate access to apps, with an option to make all other applications virtually invisible and unroutable to unauthorized users. 

You can install Zscaler Client Connector to any of your devices, including mobile platforms, in order to manage access to applications from any location. The Connector is easily accessed by providing SAML 2.0-based SSO credentials.

Pricing

Gaining access to Zscaler Private Access requires you to remain tight-lipped on pricing - so, though they prioritize convenience and accessibility, learning more about their plans and prices takes a bit of time talking to their "cloud security specialist". However, we hope that you have the tolerance to endure the secrecy. 

The cost of Zscaler Private Access is determined by various elements such as setup size, optional extras, and supplementary modules. We advise that you get in touch with Zscaler directly to obtain personalized rates based on your organization's needs. Subscriptions are generally invoiced on a yearly basis, and it is possible to configure the solution swiftly, making it an opportune and useful choice for companies striving to protect their private app access.

ZPA offers a selection of editions tailored for each company and their unique situation. This selection of Professional, Business and Transformation Editions provides an extensive array of services. The Professional edition is a great entry-level solution with its array of core functions, while the Business Edition caters to a corporate user-base with its range of on-premise and remote workforce friendly features. Last but certainly not least, the Transformation Edition gives customers the ability to maximize application workloads and business-to-business customers.

Conclusion

In a nutshell, Zscaler Private Access emerges as a solid contender for firms looking to bolster their network security via a zero-trust approach. Boasting seamless integration and an intuitive interface, this solution caters to businesses of all sizes.

However, costs can fluctuate depending on several factors. Therefore, it's crucial to evaluate your company's specific needs and ponder the potential benefits of harnessing this security tool. We urge you to contact Zscaler for a tailored quote and conduct additional research to make an informed choice.

Ultimately, embracing Zscaler Private Access hinges on a comprehensive analysis of your organization's needs, financial capacity, and long-term goals. So, assess wisely, and choose accordingly.

There’s a lot of potential in Dead Island 2; the creative settings and gory gameplay are truly outlandish and were often the highlight of my time in Hell-A, but unfortunately, no amount of gruesome finishing kills or giant animatronic spiders could make me relish the time I spent in this zombocalypse. 

However, if you’re out of multiplayer games to play with friends and have Xbox Game Pass, then Dead Island 2 is definetly worth checking out, as it will be on Xbox’s subscription service from day one. Sadly, there aren’t many other reasons to jump into this apocalyptic game, not when many better alternatives are available.  

Dead Island 2 price and release date

• What is it? A sequel to Techland’s 2011 zombie survival game 
• Release date: April 21, 2023 
• Price: $69.99 / £59.99 / AUS$109.95 
• What can I play it on? PC, PS5, Xbox Series X|S 

You brought a knife to a gunfight

One of my favorite aspects of the original Dead Island was the focus and dependence on melee. As someone who’s played their fair share of zombie games, it was refreshing to have one title ignore firearms, for the most part. With this in mind, at least initially, Dead Island 2’s customization and upgrade options for its melee weapons filled me with delight.

While the customization was cool, it did nothing more than add a couple of perks and flare to your weapons. In actuality, when you’re fighting through ravenous hordes of zombies, there’s little time to sit down and reflect on which pointy stick you want to use.

Like the weapons, the joy of using gory finish moves was overshadowed by frustrating gameplay. Thankfully, you won’t get hit by bystanding zombies while trying to finish off one of their friends. However, taking the time to combo can put you at a disadvantage as zombies armed with explosives, toxic spew, and a shocking voice surround you. Having to single-handedly fight off seemingly never-ending hordes of aggressive yet stupid zombies quickly lost its appeal as it began to feel like I was swatting annoying horse flies rather than fulfilling my role as the killer protagonist. 

Handling the undead crowds eventually improved after the first firearms were introduced in Dead Island 2; relying on guns isn’t very Dead Island-like. The first few instances of gun use turned this sequel into a literal corridor shooter as I ran through containment corridors and the sewers. Why would I take the time to combo and use my hard-won melee weapons when I could shoot a zombie in the head and call it a day? 

The problem of guns does ease up at points, particularly during boss battles when you’re encouraged to utilize the environment fully. However, these short reliefs don’t compensate for the overwhelming frustration that followed me around Dead Island 2 like a lost puppy. 

Better with friends

My time playing Dead Island 2 was a bit of a chore. However, it definitely gave my neighbours something interesting to listen to as I screamed at my TV. Needless to say, I won’t be rushing back to play singleplayer in my spare time, though, with friends, it could be different. 

While Dead Island 2 is doable, if unspectacular, in singleplayer, it seems like multiplayer is definitely the way to go. Armed with all your modded weapons and a group of trustworthy and endurant friends, this survival zombie game has the potential for some high-octane game nights. Much like the Dead Island 2 preview, taking on hordes of relentless zombies while trying to shimmy a key card off of a buff, dead security guard seems like it would be easier with a coordinated group.  

Falling short

Despite the frustrating nature of Dead Island 2, there seemed to be potential in the eye-grabbing environments and F.L.E.S.H. dismemberment system. However, gore is a staple of the zombie genre, so doing it well isn't an achievement, it's an expectation. 

This isn’t Dambuster Studios's first failure to revitalize a series. Homefront: The Revolution is another example of great prospects with poor execution. That, too, was a sequel picking up the pieces from another developer, and much like with that game, Dead Island 2 falls short at the final hurdle.

During my time playing Dead Island 2, I was met with the occasional bug that would freeze and then position my character in a slightly different location, which was incredibly disorientating when fighting tons of the undead. I also noticed that some of the directional prompts weren’t accurate. For example, when trapped in a movie studio and waiting for an elevator, I was told to defend myself until it arrived. In actuality, I needed to kill all the zombies before I could escape. While this is a small issue, it drastically changed how I played Dead Island 2; no one likes having to psychoanalyse what the devs actually want you to do.  

All of these smaller aspects took away from the more enjoyable experiences in Dead Island 2; even in parts I enjoyed, I always had a bad taste left in my mouth. But for those who are still curious and have Game Pass on PC or Xbox Series X|S, then by all means, have at it; but please don’t go alone.  

• Dead Island 2 launches alongside a feature you're either going to love or hate