ZEST Security
zestsecurity.io
What it is
ZEST Security is an exposure management platform focused on resolving vulnerabilities across cloud, code, containers, infrastructure as code, applications, and the supply chain. It simulates fixes and mitigations to identify resolution paths intended to lower risk with less effort. Its listed AI agents cover asset mapping, root cause analysis, prioritization, impact simulation, code generation, policy and guardrail analysis, and resolution building. ZEST supports AWS, Azure, and GCP, and says it has more than 50 integrations across security tools; named integrations include GitHub, GitLab, Terraform, Jira, Slack, ServiceNow, Qualys, Rapid7, Tenable, Snyk, and Wiz. The company says deployment takes minutes through a read-only cloud account and built-in connectors, and that the platform does not directly change cloud environments. It also says each customer has a separate tenant hosted in the US or Europe, customer data is not sent to external AI services, and its in-house language model runs within its AWS infrastructure. ZEST states it is SOC 2 compliant. Pricing is on request, with a 14-day trial; support hours vary by plan.
Spec sheet
- Product
- ZEST describes itself as an agentic exposure management platform for remediating vulnerabilities across cloud, code, containers, IaC, applications, and supply chain.Read 3 Oct 2026 · zestsecurity.io
- Intended users
- The company says its mission is to help security teams move from managing a risk backlog to resolving it.Read 3 Oct 2026 · zestsecurity.io
- Deployment
- ZEST says deployment takes minutes by creating a read-only cloud account and connecting security tools through built-in connectors.Read 3 Oct 2026 · zestsecurity.io
- Integrations
- The integrations page lists AWS, Azure, GCP, GitHub, GitLab, Terraform, Jira, Slack, ServiceNow, Qualys, Rapid7, Tenable, Snyk, Wiz, and other tools.Read 3 Oct 2026 · zestsecurity.io
- Compliance
- ZEST states that it is SOC 2 compliant.Read 3 Oct 2026 · zestsecurity.io
- Founded
- 2023Read 28 Sep 2026 · zestsecurity.io
- Access and production changes
- ZEST says it uses read-only cloud access and does not directly change customers’ cloud environments.Read 3 Oct 2026 · zestsecurity.io
- AI agents
- The listed agents handle technical asset mapping, root cause analysis, risk prioritization, impact simulation, code generation, cloud policy analysis, guardrail analysis, and resolution building.Read 3 Oct 2026 · zestsecurity.io
- AI data handling
- ZEST says customer data is not sent to external AI services and its in-house LLM runs within its AWS infrastructure.Read 3 Oct 2026 · zestsecurity.io
- Cloud support
- ZEST says it supports AWS, Azure, and GCP in multi-cloud environments.Read 3 Oct 2026 · zestsecurity.io
- Hosting
- ZEST says it is hosted on AWS and gives each customer a separate tenant hosted in the US or Europe.Read 3 Oct 2026 · zestsecurity.io
- Integration breadth
- ZEST says it supports more than 50 integrations across CSPM, vulnerability management, SCA, and ASPM solutions.Read 3 Oct 2026 · zestsecurity.io
- Resolution planning
- Its platform simulates possible fixes and mitigations to identify pathways that reduce the most risk with the least effort.Read 3 Oct 2026 · zestsecurity.io
- Support limits
- The pricing page lists US working-hours technical support for the trial and Security Teams packages and 24/7 support for Enterprise.Read 3 Oct 2026 · zestsecurity.io
Plans and prices
Strong points and limits
Strong points
- Supports AWS, Azure, and GCP.
- Lists more than 50 integrations.
- Uses read-only cloud access.
- Includes vulnerability resolution planning.
Limits
- No free plan is listed.
- Trial lasts 14 days.
- Pricing is available on request.
- Trial support is limited to US working hours.
Who it suits
ZEST Security is aimed at security teams looking to move from tracking risk to resolving vulnerabilities across cloud and software environments. Its read-only access model may suit teams that do not want the platform directly changing cloud environments.
Verdict
ZEST combines multi-cloud exposure management with simulated resolution paths and integrations across security tools. Pricing requires a request, and the listed trial is limited to 14 days.
Where Specifiction places it
- Exposure Management Software#15 of 207.2