Zenity

What is Zenity?

Zenity is a security and governance platform that gives enterprises visibility and control over the AI agents and low-code apps their staff build and use. Its website frames the goal as letting organisations decide exactly what their agents can and cannot do.

The platform works in three layers. A discovery layer builds a live inventory of agents across SaaS, custom and endpoint deployments and assesses their configuration. An enforcement layer applies runtime boundaries at decision points, and a protection layer handles detection and response after actions run.

Zenity was co-founded by chief executive Ben Kliger and chief technology officer Michael Bargury. Globes reported in August 2026 that the Israeli-founded company raised $125 million in a Series C round led by Norwest, and that most of its customers are Fortune 500 or Global 2000 organisations, including SoftBank Corp.

Key Features

Agent inventory and runtime boundaries matter most in Zenity, because security teams cannot govern AI agents they have not found or cannot stop.

• AI Observability: Zenity builds a live inventory of AI agents, recording who owns each one, what it can access and how it behaves. This gives security teams one register across SaaS, custom and endpoint agents.
• AI Security Posture Management: The AISPM module reviews agent configuration and permissions against policy. Teams can spot over-shared or over-permissioned agents, such as those exposed to the whole tenant, and fix them before they become an incident.
• Exposure Management: This module checks which identified risks form real, exploitable paths across agent deployments. Prioritising validated exposures helps busy teams fix the issues that matter first rather than chasing every alert.
• Runtime Boundaries: Runtime Boundaries evaluate agent actions as they happen and can steer or block unsafe ones. This moves governance from after-the-fact reporting to prevention at the point an agent makes a decision.
• AI Detection and Response: AIDR monitors agent activity after execution and maps detections to OWASP and MITRE ATLAS frameworks. Familiar framework labels make findings easier for security operations teams to triage and report.
• Agent identity and MCP security: Zenity lists agentic identity and access management alongside protection for Model Context Protocol connections. These features cover how agents authenticate and which external tools they are allowed to call.

Pros

Breadth of coverage is why enterprises shortlist Zenity, since one platform spans Microsoft, Salesforce, ServiceNow and major cloud AI services.

• Wide platform coverage: The platform page names Copilot Studio, Agentforce, ServiceNow, AWS Bedrock, Vertex AI and Azure AI Foundry, among others. Large organisations can govern several agent ecosystems from one console.
• Full lifecycle approach: Discovery, posture, runtime enforcement and detection sit in one product. Teams avoid buying and integrating separate point tools for inventory, configuration review and threat response, which simplifies reporting and ownership.
• Recognised by analysts: Zenity cites recognition from Gartner as a Market Shaper in AI application security and a Cool Vendor in agentic AI TRiSM. This gives risk committees an external reference during procurement.
• Reported customer results: Anonymised case figures on the homepage include 90 per cent of vulnerabilities remediated in four months at a Fortune 20 firm. Another cites an 80 per cent risk reduction across 150,000 resources.
• Framework-aligned findings: Detections map to OWASP and MITRE ATLAS categories. Security analysts can slot AI agent findings into existing reporting and threat models rather than learning a new taxonomy.

Cons

Opaque pricing is Zenity’s main weakness, because the site offers demos only and gives no indication of cost before a sales conversation.

• No public pricing: Zenity does not list plans or prices on its website. Smaller security teams cannot judge affordability until they have gone through a demo and a quote process.
• Enterprise focus: Messaging and case studies centre on Fortune 500 and Global 2000 buyers. Mid-sized firms with a handful of agents may find the platform more than they need.
• Deployment details limited: The pages we read do not explain how connectors are deployed or what access they require. Technical teams should request architecture documentation early in any evaluation.
• Compliance claims not shown: We did not find certifications such as SOC 2 or ISO 27001 on the pages read. Procurement teams should ask for audit reports and data handling terms directly.
• Coverage varies by platform: Depth of control is likely to differ between ecosystems such as Copilot Studio and custom agents. Test the specific platforms you rely on during a proof of concept.

Who is Using Zenity?

Security teams at large regulated enterprises use Zenity most, with Globes citing customers in finance, healthcare, pharmaceuticals, energy and manufacturing.

• CISOs and security leaders: Security leaders use it to gain oversight of agent adoption across the business. They report risk posture to boards and set policy for acceptable agent behaviour.
• Security operations teams: SOC analysts use detection and response features to investigate suspicious agent activity. Framework mapping helps them prioritise and document incidents.
• Governance and compliance teams: Risk and compliance staff use the inventory to track who owns each agent and what data it touches. This supports audits and internal AI policies.
• Platform owners: Teams running Power Platform, Copilot Studio or Agentforce use posture checks to find over-shared agents. They fix permissions before wider rollout.

Pricing

Zenity sells through quote-based enterprise contracts, and its website offers demos rather than a public price list (official site, checked October 2026).

Futurepedia reports a 30-day free trial, but the official site shows only demo requests, so treat that claim as unconfirmed.

Disclaimer: enterprise security contracts usually scale with the number of users, agents or platforms covered, so request a written quote for your environment.

What Makes Zenity Unique?

Purpose-built agent security is Zenity’s core differentiator: it treats AI agents as actors that need inventory, permissions and runtime limits, much as identity tools treat human users. General cloud or SaaS security tools often see agents only indirectly through logs.

Zenity also came from low-code governance, so it covers business-built agents in tools such as Power Platform and Copilot Studio as well as developer-built ones. That mix suits enterprises where agents are created by business users rather than only by engineering teams.

Compatibilities and Integrations

Zenity connects to the major enterprise agent platforms, from Microsoft and Salesforce to the main cloud AI services and enterprise chat assistants.

• Microsoft: Copilot Studio, Microsoft 365 Copilot, Power Platform and Azure AI Foundry are named on the platform page. These cover both business-built and developer-built agents.
• Salesforce and ServiceNow: Salesforce Agentforce and ServiceNow are listed as supported agentic SaaS platforms. Coverage helps teams govern agents embedded in CRM and IT workflows.
• Cloud AI services: AWS Bedrock and Google Vertex AI are listed for custom agents. This extends oversight to agents engineering teams build on cloud models.
• Enterprise assistants: ChatGPT Enterprise and Claude Enterprise appear among supported platforms. Security teams can include staff-facing assistants in the same inventory.

Zenity Tutorials

Evaluating Zenity typically runs through six stages, from the first demo to policy enforcement across your agent platforms.

1. Request a demo on the Zenity website and share which agent platforms you use.
2. Agree a proof of concept scope covering two or three key platforms.
3. Connect those platforms and review the generated agent inventory.
4. Triage posture findings, starting with over-shared or over-permissioned agents.
5. Define runtime boundaries for high-risk actions and test them in a controlled setting.
6. Route detections to your security operations process and review results with stakeholders.

How We Rated It

Zenity scores 3.9 out of 5, with wide platform coverage and lifecycle controls offset by opaque pricing and limited public technical detail.

Summary

Zenity suits large enterprises that need to find, assess and control AI agents spread across Microsoft, Salesforce, ServiceNow and cloud AI platforms. Its main limitation is transparency, since pricing, deployment architecture and certifications are not published on the pages we read. Security teams gain a single inventory plus runtime controls instead of piecing together logs from each platform. We rate it highly for coverage and function but lower for cost clarity. Before buying, run a proof of concept on the agent platforms your staff use most and ask for audit reports.