Zeron
Also known as: Zeron, ZAK, Zeron ADK, Cyber Navigator, QBER
Cyber risk intelligence platform with a Cyber Navigator posture and quantification suite plus ZAK, an open source Agent Development Kit for building and governing autonomous cybersecurity agents with policy guardrails.
Zeron is a cyber risk intelligence company whose platform helps organizations understand, quantify, and reduce cyber risk, and which has extended into agentic security with ZAK, an open source Agent Development Kit for building, deploying, and governing autonomous cybersecurity agents. The Cyber Navigator (Cyber Risk Posture Management) platform unifies attack surface, compliance, and defence modules into a single view, converts technical findings into business aligned financial impact scores using the QBER model, and covers external attack surface, internal risk and insider threats, compliance mapping, and Vendor Pulse third party risk. Zeron Intelligence (ZIN) applies graph based risk modeling, representing complex environments as dependency graphs, and risk propagation and action simulation that evaluates projected impact before execution, with explainable reasoning paths.
ZAK (Zeron ADK) is the open source (Apache 2.0) framework at the core, available in Python, Node.js, and Go. Every agent is defined in a single human readable YAML file via a Universal Security Agent Definition Language capturing identity, intent, capabilities, boundaries, and reasoning mode, and every tool call passes through a policy engine with six guardrails that are not configurable to off, so every action is policy gated before it executes. A Security Intelligence Fabric acts as connective tissue unifying data, orchestrating autonomous agents, and enabling real time risk decisions, supporting patterns such as coordinated red team and blue team agents, autonomous financial risk quantification, behavioral insider threat agents, and continuous control auto tuning.
Zeron integrates Jira, Slack, ServiceNow, Splunk, AWS, GCP, GitHub, and PagerDuty, offers enterprise SSO via SAML and OIDC, and logs every agent action and policy decision for export. It deploys on prem, in the cloud, or hybrid. Founded in India with a focus on BFSI, healthcare, and public sector, Zeron aligns controls to standards including RBI-CSF, ISO 27001, and DPDPA, and sits on the PCI Security Standards Council India-South Asia Regional Engagement Board.
Vendor details
Canonical URL
https://zeron.one
Category
Security / SOC agent
Subcategory
Cyber risk intelligence and security agent development
Funding status
Private; India based (founders Sanket Sarkar, Snehanjan Chatterjee, Swarnali Singha); PCI Security Standards Council India-South Asia board; customers across BFSI, healthcare, and public sector
Company status
independent
Use cases & customers
Primary use cases
Target customers
Deployment options
Integrations
Connects Jira, Slack, ServiceNow, Splunk, AWS, GCP, GitHub, and PagerDuty across the security stack; enterprise SSO via SAML/OIDC; every agent action, tool call, and policy decision logged and exportable; ZAK Agent Development Kit available in Python, Node.js, and Go under Apache 2.0.
In practice
A CISO uses Cyber Navigator to convert technical findings into financial impact scores with the QBER model and prioritize remediation by business exposure
A security engineer defines a red team agent in a single YAML file with ZAK, and every tool call passes through the six guardrail policy engine before executing
Behavioral agents identify an insider threat with predicted impact and root cause while control auto tuning closes a misconfiguration gap in real time
Sources & related URLs
Capability coverage
11.5 / 14 capabilities · 82%
| Integrations & Tool CallingConnects Jira, Slack, ServiceNow, Splunk, AWS, GCP, GitHub, and PagerDuty across the security stack, with enterprise SSO via SAML and OIDC and a Security Intelligence Fabric unifying data and orchestrating agents. zeron.one homepage retrieved 2026-07-08. | Full |
|---|---|
| Workflow OrchestrationThe Security Intelligence Fabric orchestrates autonomous agents and enables real time risk decisions, supporting coordinated red team and blue team agents, risk quantification engines feeding compliance workflows, and continuous control auto tuning. zeron.one homepage and ADK blog retrieved 2026-07-08. | Full |
| Knowledge Grounding & RAGZeron Intelligence uses graph based risk modeling representing complex environments as dependency graphs for accurate risk reasoning, with a security intelligence graph grounding agent decisions and risk propagation simulation before execution. zeron.one zeron-intelligence page and homepage retrieved 2026-07-08. | Full |
| Human Oversight & GuardrailsEvery tool call an agent makes passes through a policy engine with six guardrails that are not configurable to off, so every action is policy gated before it executes, with risk propagation and action simulation evaluating projected impact before execution. zeron.one ADK blog and zeron-intelligence page retrieved 2026-07-08. | Full |
| Security, Identity & GovernanceEnterprise SSO via SAML/OIDC, every agent action, tool call, and policy decision logged and exportable, agent definitions capturing identity, permissions, and boundaries, and alignment to RBI-CSF, ISO 27001, and DPDPA. zeron.one homepage, ADK blog, and about page retrieved 2026-07-08. | Full |
| Observability & AuditabilityEvery agent action, tool call, and policy decision is logged and exportable, with explainable AI providing transparent reasoning paths, and the CRPM dashboard giving stakeholder specific real time risk views. zeron.one homepage and zeron-intelligence page retrieved 2026-07-08. | Full |
| Memory & State PersistenceThe platform maintains a centralized risk repository with real time tracking and a living, adaptive system of intelligence via the security intelligence graph, but a dedicated agent memory construct is not separately documented. zeron.one cyber-navigator page and homepage retrieved 2026-07-08. | Partial |
| Deployment & Data ResidencyDeploys seamlessly on premises, in the cloud, or hybrid, with SaaS hosted on Zeron cloud (AWS, Azure) or self hosted on the customer's own servers with local data storage and full control. zeron.one deployment page retrieved 2026-07-08. | Full |
| Prebuilt Agents, Templates & PacksPrebuilt CRPM modules (Attack Surface, Compliance, Defence, Vendor Pulse) plus ZAK's YAML based agent templates and five primitive definition language let teams stand up agents from concept to execution in a day. zeron.one cyber-navigator, deployment, and ADK blog retrieved 2026-07-08. | Full |
| Triggers & Channel CoverageThe platform provides 24/7 visibility into internal and external attack surface for early detection and proactive response, with agents that detect, correlate, and prioritize threats in real time and continuously monitor and auto tune controls. zeron.one home and homepage retrieved 2026-07-08. | Full |
| Model Flexibility & RoutingAgents are defined with a reasoning mode in the YAML definition language and ZAK includes an AI driven decision intelligence layer, but customer selectable models or routing across providers is not documented. zeron.one ADK blog and zeron-intelligence page retrieved 2026-07-08. | Partial |
| APIs, SDKs & MCP ExtensibilityZAK is an open source (Apache 2.0) Agent Development Kit available in Python, Node.js, and Go for building, deploying, and governing autonomous cybersecurity agents, with a Universal Security Agent Definition Language and API based integrations. zeron.one homepage and ADK blog retrieved 2026-07-08. | Full |
| Testing, Debugging & OptimizationRisk propagation and action simulation evaluate actions based on projected impact before execution, and ZAK lets developers build agents from concept to execution in a day, but a dedicated agent testing or evaluation harness is not separately documented. zeron.one zeron-intelligence and deployment pages retrieved 2026-07-08. | Partial |
| Browser & Computer UseNo browser or computer use capability documented; agents operate across the security stack via integrations and the Security Intelligence Fabric rather than driving a browser or desktop. zeron.one pages retrieved 2026-07-08. | Unable to verify |
Pricing
Contact sales (ZAK ADK is free and open source)
modular products (CRPM, Vendor Pulse, Insure Pulse); ZAK open source
What is public
That ZAK ADK is free and open source under Apache 2.0 and the deployment options (SaaS vs on prem) are public; platform dollar figures are not.
Billing mechanics
The ZAK Agent Development Kit is open source (Apache 2.0, free). The commercial CRPM platform, Vendor Pulse, and Insure Pulse are sold via a sales led motion, SaaS subscription (Zeron cloud) or self hosted on prem.
Cost watchouts
The open source ZAK ADK is free, but the CRPM platform, Vendor Pulse, and Insure Pulse are commercial; self hosted deployment shifts infrastructure cost to the customer.
Variable cost rationale
The open source ADK is free, but the commercial platform likely scales with assets, modules, or users, and self hosted deployment adds infrastructure cost; no public metering exists so platform exposure is inferred.
Additional watchouts
The free ADK does not include the commercial risk platform; self hosted deployment carries infrastructure cost.
Sales call required
Yes — required for paid access
Free / trial
ZAK Agent Development Kit is free and open source (Apache 2.0); platform via demo and early access
Key ambiguities
Platform pricing is unpublished; the split between the free open source ADK and the commercial platform is clear but platform figures are not.
Missing data
Commercial platform pricing figures, billing axis, contract terms.
Related vendors
- 7AI — Swarming agentic SOC from the Cybereason founders: sixty plus domain…
- Airrived — Agentic OS that unifies SOC, GRC, IAM, vulnerability management, IT,…
- Assail — Autonomous red teaming platform (Ares) whose AI agents discover,…
- Astelia — AI native exposure management platform from Israeli National Red…
- Capsule Security — Runtime security layer for AI agents that detects and blocks unsafe…
- Clutch Security — Universal non human identity security platform that discovers,…