ZEST Security
ZEST Security describes its product as an agentic exposure management platform for resolving vulnerabilities across cloud, code, containers, infrastructure a…
What ZEST Security is
ZEST Security describes its product as an agentic exposure management platform for resolving vulnerabilities across cloud, code, containers, infrastructure as code, applications, and supply chain. It simulates potential fixes and mitigations to identify pathways intended to reduce risk with less effort. Its listed agents handle asset mapping, root cause analysis, risk prioritization, impact simulation, code generation, cloud policy and guardrail analysis, and resolution building. It supports AWS, Azure, and GCP in multi-cloud environments and says it offers more than 50 integrations across security categories. Named integrations include GitHub, GitLab, Terraform, Jira, Slack, ServiceNow, Qualys, Rapid7, Tenable, Snyk, and Wiz. The company says deployment takes minutes using read-only cloud access and built-in connectors, and that it does not directly change customer cloud environments. It also says customer data stays out of external AI services and its in-house language model runs within its AWS infrastructure. Each customer has a separate tenant hosted in the US or Europe; ZEST states that it is SOC 2 compliant. Pricing is on request, with a 14-day trial listed.
Good
- Supports AWS, Azure, and GCP.
- Lists more than 50 security integrations.
- Uses read-only cloud access and does not directly change environments.
- Separate customer tenants are hosted in the US or Europe.
- Lists a 14-day trial.
Watch out
- No free plan is listed.
- Pricing is available on request.
- Trial support is limited to US working hours.
Who it suits
It is presented for security teams looking to move from tracking a risk backlog toward resolving exposures. The multi-cloud support and security-tool integrations may fit teams working across several cloud providers and security systems.
Verdict
ZEST combines exposure analysis, suggested resolution paths, and security-tool integrations across cloud and code environments. Its stated read-only access and data-handling approach may matter to teams evaluating how the platform interacts with their systems.
Plans and prices
From ZEST Security's own pricing page, checked 3 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Free | Free | 1 cloud project/account · configuration-only drift detection · limited AI prioritization · single IaC · 1 security stack integration · US working-hours support · 14-day trial |
| Enterprise | Priced on request | 300 cloud projects/accounts · AWS, Azure, and GCP · unlimited code repository and security stack integrations · 24/7 support · Yearly subscription |
| Security Teams (lean teams) | Priced on request | 100 cloud projects/accounts · AWS, Azure, and GCP · up to 5 security stack integrations · single code repository integration · US working-hours support · Yearly subscription |
The facts
Each one read from ZEST Security's own pages, with the date it was checked.
What it does
- Access and production changes
- ZEST says it uses read-only cloud access and does not directly change customers’ cloud environments.checked 3 Oct 2026
- AI agents
- The listed agents handle technical asset mapping, root cause analysis, risk prioritization, impact simulation, code generation, cloud policy analysis, guardrail analysis, and resolution building.checked 3 Oct 2026
- AI data handling
- ZEST says customer data is not sent to external AI services and its in-house LLM runs within its AWS infrastructure.checked 3 Oct 2026
- Cloud support
- ZEST says it supports AWS, Azure, and GCP in multi-cloud environments.checked 3 Oct 2026
- Compliance
- ZEST states that it is SOC 2 compliant.checked 3 Oct 2026
- Deployment
- ZEST says deployment takes minutes by creating a read-only cloud account and connecting security tools through built-in connectors.checked 3 Oct 2026
- Hosting
- ZEST says it is hosted on AWS and gives each customer a separate tenant hosted in the US or Europe.checked 3 Oct 2026
- Integration breadth
- ZEST says it supports more than 50 integrations across CSPM, vulnerability management, SCA, and ASPM solutions.checked 3 Oct 2026
- Integrations
- The integrations page lists AWS, Azure, GCP, GitHub, GitLab, Terraform, Jira, Slack, ServiceNow, Qualys, Rapid7, Tenable, Snyk, Wiz, and other tools.checked 3 Oct 2026
- Intended users
- The company says its mission is to help security teams move from managing a risk backlog to resolving it.checked 3 Oct 2026
- Product
- ZEST describes itself as an agentic exposure management platform for remediating vulnerabilities across cloud, code, containers, IaC, applications, and supply chain.checked 3 Oct 2026
- Support limits
- The pricing page lists US working-hours technical support for the trial and Security Teams packages and 24/7 support for Enterprise.checked 3 Oct 2026
The company
- Founded
- 2023checked 28 Sep 2026
Money
- Resolution planning
- Its platform simulates possible fixes and mitigations to identify pathways that reduce the most risk with the least effort.checked 3 Oct 2026
Alternatives to ZEST Security
- 1
AttackIQ Platform
Free planWebAPILinuxmacOS7.9From $4,995 a month - 2
runZero
Free planWebAPILinuxmacOS7.8Free plan - 3
Mondoo CSPM
Free planOpen sourceWebAPIExtensionLinux7.7Free plan - 4
Obsonis Exposure Management Platform
AndroidiOSWebAPI7.0From $25 a month - 5
Qualys Enterprise TruRisk Platform
AndroidiOSWebAPI6.9 - 6
CrowdStrike Falcon Surface
WebLinuxmacOSWindows6.6