Back to vendors
Z

Zeron

Also known as: Zeron, ZAK, Zeron ADK, Cyber Navigator, QBER

Visit site
Security / SOC agentindependentVerified 2026-07-08

Cyber risk intelligence platform with a Cyber Navigator posture and quantification suite plus ZAK, an open source Agent Development Kit for building and governing autonomous cybersecurity agents with policy guardrails.

Zeron is a cyber risk intelligence company whose platform helps organizations understand, quantify, and reduce cyber risk, and which has extended into agentic security with ZAK, an open source Agent Development Kit for building, deploying, and governing autonomous cybersecurity agents. The Cyber Navigator (Cyber Risk Posture Management) platform unifies attack surface, compliance, and defence modules into a single view, converts technical findings into business aligned financial impact scores using the QBER model, and covers external attack surface, internal risk and insider threats, compliance mapping, and Vendor Pulse third party risk. Zeron Intelligence (ZIN) applies graph based risk modeling, representing complex environments as dependency graphs, and risk propagation and action simulation that evaluates projected impact before execution, with explainable reasoning paths.

ZAK (Zeron ADK) is the open source (Apache 2.0) framework at the core, available in Python, Node.js, and Go. Every agent is defined in a single human readable YAML file via a Universal Security Agent Definition Language capturing identity, intent, capabilities, boundaries, and reasoning mode, and every tool call passes through a policy engine with six guardrails that are not configurable to off, so every action is policy gated before it executes. A Security Intelligence Fabric acts as connective tissue unifying data, orchestrating autonomous agents, and enabling real time risk decisions, supporting patterns such as coordinated red team and blue team agents, autonomous financial risk quantification, behavioral insider threat agents, and continuous control auto tuning.

Zeron integrates Jira, Slack, ServiceNow, Splunk, AWS, GCP, GitHub, and PagerDuty, offers enterprise SSO via SAML and OIDC, and logs every agent action and policy decision for export. It deploys on prem, in the cloud, or hybrid. Founded in India with a focus on BFSI, healthcare, and public sector, Zeron aligns controls to standards including RBI-CSF, ISO 27001, and DPDPA, and sits on the PCI Security Standards Council India-South Asia Regional Engagement Board.

Vendor details

Canonical URL

https://zeron.one

Category

Security / SOC agent

Subcategory

Cyber risk intelligence and security agent development

Funding status

Private; India based (founders Sanket Sarkar, Snehanjan Chatterjee, Swarnali Singha); PCI Security Standards Council India-South Asia board; customers across BFSI, healthcare, and public sector

Company status

independent

Use cases & customers

Primary use cases

Cyber risk quantification and posture managementAttack surface and exposure managementBuilding and governing autonomous security agents (ZAK)Compliance mapping and audit readinessThird party and vendor risk management

Target customers

CISOs and security leaders in BFSI, healthcare, and public sectorRisk, compliance, and GRC teamsSecurity engineers building autonomous agents

Deployment options

SaaS (Zeron cloud)On-premCloudHybrid

Integrations

Connects Jira, Slack, ServiceNow, Splunk, AWS, GCP, GitHub, and PagerDuty across the security stack; enterprise SSO via SAML/OIDC; every agent action, tool call, and policy decision logged and exportable; ZAK Agent Development Kit available in Python, Node.js, and Go under Apache 2.0.

In practice

A CISO uses Cyber Navigator to convert technical findings into financial impact scores with the QBER model and prioritize remediation by business exposure

A security engineer defines a red team agent in a single YAML file with ZAK, and every tool call passes through the six guardrail policy engine before executing

Behavioral agents identify an insider threat with predicted impact and root cause while control auto tuning closes a misconfiguration gap in real time

Capability coverage

11.5 / 14 capabilities · 82%

Integrations & Tool CallingConnects Jira, Slack, ServiceNow, Splunk, AWS, GCP, GitHub, and PagerDuty across the security stack, with enterprise SSO via SAML and OIDC and a Security Intelligence Fabric unifying data and orchestrating agents. zeron.one homepage retrieved 2026-07-08. Full
Workflow OrchestrationThe Security Intelligence Fabric orchestrates autonomous agents and enables real time risk decisions, supporting coordinated red team and blue team agents, risk quantification engines feeding compliance workflows, and continuous control auto tuning. zeron.one homepage and ADK blog retrieved 2026-07-08. Full
Knowledge Grounding & RAGZeron Intelligence uses graph based risk modeling representing complex environments as dependency graphs for accurate risk reasoning, with a security intelligence graph grounding agent decisions and risk propagation simulation before execution. zeron.one zeron-intelligence page and homepage retrieved 2026-07-08. Full
Human Oversight & GuardrailsEvery tool call an agent makes passes through a policy engine with six guardrails that are not configurable to off, so every action is policy gated before it executes, with risk propagation and action simulation evaluating projected impact before execution. zeron.one ADK blog and zeron-intelligence page retrieved 2026-07-08. Full
Security, Identity & GovernanceEnterprise SSO via SAML/OIDC, every agent action, tool call, and policy decision logged and exportable, agent definitions capturing identity, permissions, and boundaries, and alignment to RBI-CSF, ISO 27001, and DPDPA. zeron.one homepage, ADK blog, and about page retrieved 2026-07-08. Full
Observability & AuditabilityEvery agent action, tool call, and policy decision is logged and exportable, with explainable AI providing transparent reasoning paths, and the CRPM dashboard giving stakeholder specific real time risk views. zeron.one homepage and zeron-intelligence page retrieved 2026-07-08. Full
Memory & State PersistenceThe platform maintains a centralized risk repository with real time tracking and a living, adaptive system of intelligence via the security intelligence graph, but a dedicated agent memory construct is not separately documented. zeron.one cyber-navigator page and homepage retrieved 2026-07-08. Partial
Deployment & Data ResidencyDeploys seamlessly on premises, in the cloud, or hybrid, with SaaS hosted on Zeron cloud (AWS, Azure) or self hosted on the customer's own servers with local data storage and full control. zeron.one deployment page retrieved 2026-07-08. Full
Prebuilt Agents, Templates & PacksPrebuilt CRPM modules (Attack Surface, Compliance, Defence, Vendor Pulse) plus ZAK's YAML based agent templates and five primitive definition language let teams stand up agents from concept to execution in a day. zeron.one cyber-navigator, deployment, and ADK blog retrieved 2026-07-08. Full
Triggers & Channel CoverageThe platform provides 24/7 visibility into internal and external attack surface for early detection and proactive response, with agents that detect, correlate, and prioritize threats in real time and continuously monitor and auto tune controls. zeron.one home and homepage retrieved 2026-07-08. Full
Model Flexibility & RoutingAgents are defined with a reasoning mode in the YAML definition language and ZAK includes an AI driven decision intelligence layer, but customer selectable models or routing across providers is not documented. zeron.one ADK blog and zeron-intelligence page retrieved 2026-07-08. Partial
APIs, SDKs & MCP ExtensibilityZAK is an open source (Apache 2.0) Agent Development Kit available in Python, Node.js, and Go for building, deploying, and governing autonomous cybersecurity agents, with a Universal Security Agent Definition Language and API based integrations. zeron.one homepage and ADK blog retrieved 2026-07-08. Full
Testing, Debugging & OptimizationRisk propagation and action simulation evaluate actions based on projected impact before execution, and ZAK lets developers build agents from concept to execution in a day, but a dedicated agent testing or evaluation harness is not separately documented. zeron.one zeron-intelligence and deployment pages retrieved 2026-07-08. Partial
Browser & Computer UseNo browser or computer use capability documented; agents operate across the security stack via integrations and the Security Intelligence Fabric rather than driving a browser or desktop. zeron.one pages retrieved 2026-07-08. Unable to verify

Recent platform changes

No recent material changes tracked yet.

Pricing

Contact sales (ZAK ADK is free and open source)

modular products (CRPM, Vendor Pulse, Insure Pulse); ZAK open source

Contact onlyMedium variable costFree tier

What is public

That ZAK ADK is free and open source under Apache 2.0 and the deployment options (SaaS vs on prem) are public; platform dollar figures are not.

Billing mechanics

The ZAK Agent Development Kit is open source (Apache 2.0, free). The commercial CRPM platform, Vendor Pulse, and Insure Pulse are sold via a sales led motion, SaaS subscription (Zeron cloud) or self hosted on prem.

Cost watchouts

The open source ZAK ADK is free, but the CRPM platform, Vendor Pulse, and Insure Pulse are commercial; self hosted deployment shifts infrastructure cost to the customer.

Variable cost rationale

The open source ADK is free, but the commercial platform likely scales with assets, modules, or users, and self hosted deployment adds infrastructure cost; no public metering exists so platform exposure is inferred.

Additional watchouts

The free ADK does not include the commercial risk platform; self hosted deployment carries infrastructure cost.

Sales call required

Yes — required for paid access

Free / trial

ZAK Agent Development Kit is free and open source (Apache 2.0); platform via demo and early access

Key ambiguities

Platform pricing is unpublished; the split between the free open source ADK and the commercial platform is clear but platform figures are not.

Missing data

Commercial platform pricing figures, billing axis, contract terms.

Verified 2026-07-08

Contact us

Found a vendor we missed? Have feedback on the index? We'd love to hear from you.