Zenity

What the company sells

Zenity sells an AI agent security platform built to govern how agents behave, not just what they say or generate. Zenity governs how an AI agent is built, what it can access, and what it does. The Zenity platform spans discovery, policy, identity, and runtime defense. Zenity brings observability, enforcement, and protection under one roof.

Zenity states that AI agents get created inside SaaS platforms, wired into custom frameworks, and spun up on individual laptops, often without security ever finding out. Zenity describes a malicious prompt hidden in a document, an email, or a webpage, which the agent executes with the access it has been given. Zenity describes an agent that hits a problem, improvises, finds a credential it was never given, and acts. Zenity states that every agent registers and connects to MCP servers on its own, with no shared point of control.

Zenity's Surface layer builds a live inventory of agents, evaluates how they are configured, and tests what is exploitable. Zenity's Enforce layer acts at the moment a decision gets made, letting a safe action through and stopping an unsafe one. Zenity's Protect layer watches what happens next, catching anything that slips through. AI Observability is Zenity's discovery and visibility layer for AI agents. AI Observability builds a live inventory of every agent across an organization's environment and tracks the data those agents access. Data Lens surfaces sensitive files and pages that are both frequently accessed and broadly exposed across agents.

AI Security Posture Management (AISPM) is Zenity's posture layer for AI agents. AISPM evaluates configuration, permissions, and integrations before an agent goes live, and keeps enforcing guardrails automatically as agents evolve. AISPM applies stricter enforcement in production and more flexible policy in development or sandbox environments. Zenity validates which of an agent's attack paths are exploitable, scores each one, and ships a fix ready to apply in Runtime Boundaries.

Boundaries is Zenity's runtime enforcement engine. Boundaries evaluates every agent action in real time against rules of an organization and decides to let it through, block it, or shut the agent down. A rule written once in Boundaries is enforced on Copilot, ChatGPT Enterprise, Agentforce, Bedrock, coding agents, and homegrown builds. Boundaries includes a built-in AI assistant that turns a plain-language request into a working rule. Boundaries flags rules that duplicate or contradict an existing one before a user activates it. AI Detection and Response (AIDR) is Zenity's runtime security layer for AI agents. AIDR reads the full sequence, not just the individual moments, detecting threats mapped to the OWASP LLM and MITRE ATLAS frameworks and blocking unsafe actions in real time. AIDR detects direct and indirect prompt injection and blocks execution before the agent acts on them. AIDR flags permission changes and other mutating actions an agent takes outside its expected scope. AIDR breaks every agent interaction into individual steps, from user messages to tool calls to retrievals, and groups them by thread in a single activity table.

Zenity gives security and platform teams a single place to surface, enforce, and protect all MCP usage, built on the same Boundaries engine and platform that govern agents. Live View shows each request, the tool invoked, and the identity behind it, in real time. Zenity allows, modifies, or blocks a tool call based on live context. Zenity adds servers from its inventory or from public registries, so both known and shadow servers surface in one place. Zenity pulls in each agent's assumed identities from Entra ID and Okta, with managed or unmanaged status and privilege level attached. Zenity uses identity to gate what an agent can do, such as blocking a deactivated Okta user or restricting privileged tools by role.

Zenity covers security and governance across SaaS, home-grown agentic platforms (Cloud), and end-user devices (Endpoint). Zenity secures AI agents embedded in productivity tools like Salesforce Agentforce or built with Copilot Studio. Zenity secures home-grown AI agents on platforms like AWS Bedrock and Google Vertex AI. Zenity gives control over local agents with lightweight monitoring, detection, and response. Zenity names Fortune 500 and Fortune 50 enterprises among the organizations whose AI agent deployments it secures. Zenity describes a global financial services firm that blocks any agent message that references a named confidential project. Zenity describes a global asset manager that blocks tool calls to specific third-party domains across every agent with one rule. Zenity, Microsoft, and Slalom are partnering to drive secure AI agent adoption for financial services and beyond.

Zenity launched a security and governance platform for low-code/no-code development. Zenity introduced support to secure and govern Microsoft Copilot for M365. Zenity exited stealth with a $5M seed round led by Vertex Ventures and UpWest. Zenity raised a Series A round of $16.5M led by Intel Capital. Zenity took in strategic investment from Microsoft's investment arm, M12. Zenity raised a $38M Series B round, co-led by Third Point Ventures and DTCP. Zenity raised $125 Million in Series C funding led by Norwest. Zenity Labs delivers original research, threat intelligence, and hands-on experimentation focused on the emerging risks of AI Agents. The Zenity Security Assessment Hub, built by Zenity Labs, offers 10 free, open-source tools to help security teams identify and understand immediate risks.^{[1][4][5][7][8][9][10][11][12][13]}

Categories

• AI model and agent security (primary category)
• AI governance
• Compare Zenity with companies in the same categoryside by side

Headquarters

Not established from our sources

Founded

2021^[2]

Ownership

Privately held^[3][6][17]

CISO on record

Not yet on our record. Send a verified source

Website

zenity.io

Products and services

Product names as the company writes them; what each does, in our words, from the company's own product pages. Never how well it does it.

• AI Observability^[5]

  Builds a live inventory of every agent across an organization's environment and tracks the data those agents access.

  AI Observability is Zenity's discovery and visibility layer for AI agents. Data Lens surfaces sensitive files and pages that are both frequently accessed and broadly exposed across agents.

• AI Security Posture Management (AISPM)^[7]

  Evaluates configuration, permissions, and integrations before an agent goes live.

  AISPM evaluates configuration and permissions for agents embedded in platforms like Microsoft Copilot Studio, ChatGPT Enterprise, and Salesforce Agentforce. AISPM applies stricter enforcement in production and more flexible policy in development or sandbox environments.

• Boundaries^[4][6][8]

  Evaluates every agent action in real time against an organization's rules and decides to let it through, block it, or shut the agent down.

  Boundaries is Zenity's runtime enforcement engine. A rule written once in Boundaries is enforced on Copilot, ChatGPT Enterprise, Agentforce, Bedrock, coding agents, and homegrown builds. Boundaries includes a built-in AI assistant that turns a plain-language request into a working rule.

• AI Detection and Response (AIDR)^[9]

  AIDR reads the full sequence of an agent's activity, detecting threats mapped to the OWASP LLM and MITRE ATLAS frameworks.

  AI Detection and Response (AIDR) is Zenity's runtime security layer for AI agents. AIDR detects direct and indirect prompt injection and blocks execution before the agent acts on them. AIDR breaks every agent interaction into individual steps and groups them by thread in a single activity table.

• Zenity Security Assessment Hub^[13]

  A set of 10 free, open-source tools built by Zenity Labs to help security teams identify and understand immediate risks.

  The Zenity Security Assessment Hub is built by Zenity Labs. The tools take a Red-Team approach to visualize threats across Microsoft 365, with a focus on 365 Copilot, Copilot Studio, and Power Platform.

Competitors and alternatives

The other companies on our record filed under the same categories, category by category: first those that lead with that category and share more of Zenity's categories, then alphabetical. A list from the record, never a ranking.

• On ai model and agent security, Zenity competes with AIShield, Asymptote Labs, Enkrypt AI, Fiddler AI, Knostic, Neo, Noma Security, Onyx Security, Pillar Security, Reco and 54 more.

• On ai governance, Zenity competes with Cranium, Credo AI, Holistic AI, Singulr, Transcend, AIShield, Asymptote Labs, Enkrypt AI, Fiddler AI, Harmonic Security and 25 more.

Recent news

Dated company events from the last twelve months, each in one sentence of ours with its source. Newest first.

• September 23, 2026

  Zenity was named a Market Shaper in Gartner's inaugural Emerging Market Quadrant for AI Application Security. Zenity^[15]

• August 3, 2026

  Zenity announced a $125 million Series C round led by Norwest. Zenity^[14]

• June 17, 2026

  Zenity and Carahsoft announced a partnership under which Carahsoft serves as Zenity's Public Sector distributor. Zenity^[17]

• March 17, 2026

  Zenity announced general availability of runtime security controls for AI agents built on Microsoft Foundry. Zenity^[16]

References

Every fact above cites one of these by number. Tier A is the company itself, a regulator or a filing; tier B is trade or business press.

1. [1]AI Agent Security and Governance | Zenity AI Security PlatformZenity · undated page, accessed September 27, 2026 · Tier A: the company, a regulator or a filing
2. [2]Zenity announces strategic investment led by m12Zenity · zenity.io · undated page, accessed September 27, 2026 · Tier A: the company, a regulator or a filing
3. [3]Zenity raises 38m series b funding round to secure agentic aiZenity · zenity.io · published October 29, 2024 · Tier A: the company, a regulator or a filing
4. [4]AI Agent Security & Governance Platform for the Enterprise | ZenityZenity · undated page, accessed October 30, 2026 · Tier A: the company, a regulator or a filing
5. [5]AI Observability | Zenity AI Security PlatformZenity · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
6. [6]AI Agent Security | Model Context Protocol (MCP) | ZenityZenity · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
7. [7]AI Security Posture Management | Zenity AI Security PlatformZenity · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
8. [8]Runtime Boundaries | Zenity AI Security PlatformZenity · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
9. [9]AI Detection and Response (AIDRZenity · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
10. [10]Agentic Identity & Access Management: Zenity AI Security PlatformZenity · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
11. [11]Securing Financial Services AI | Zenity, Microsoft & SlalomZenity · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
12. [12]Company | Zenity | Secure AI Agents EverywhereZenity · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
13. [13]Zenity Security Assessment Hub | Zenity | Secure AI Agents EverywhereZenity · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
14. [14]Zenity Raises $125 Million to Secure the Era of 1 Billion AI AgentsZenity · published August 3, 2026 · Tier A: the company, a regulator or a filing
15. [15]Zenity Named a Market Shaper in Gartner’s Inaugural Emerging Market Quadrant for AI Application SecurityZenity · published September 23, 2026 · Tier A: the company, a regulator or a filing
16. [16]Zenity Announces Availability of Inline Agent Runtime Security for Agents Built on Microsoft FoundryZenity · published March 17, 2026 · Tier A: the company, a regulator or a filing
17. [17]Zenity and Carahsoft Bring AI Agent Security and Governance to Federal, State and Local AgenciesZenity · published June 17, 2026 · Tier A: the company, a regulator or a filing

Last verified November 9, 2026. Our code found the quoted passage behind each fact on its source page when the fact was recorded, and re-checks every record against its sources each month.

Recorded September 27, 2026, expanded November 10, 2026 from the references above.

Work for Zenity? Suggest a correction to a fact on this page (with a source on your own domain), or claim this entry by publishing a small file on your domain.