AI Compliance Vendors

Zenity

AI agent security and governance for SaaS, homegrown and coding agents: discovery, posture, identity-aware runtime enforcement and detection

Visit website
Last checked October 30, 2026

Quick facts: Zenity is an AI compliance vendor founded in 2021 and headquartered in New York, United States. The vendor publicly documents coverage for SOC 2. Pricing is usage-based. Profile last checked October 30, 2026; sources are cited at the bottom of this page.

About Zenity

Zenity is a security and governance platform for AI agents: agents inside SaaS tools, agents built in-house on cloud AI platforms, and coding and personal agents on employee devices. It was co-founded by Ben Kliger (CEO) and Michael Bargury (CTO). It launched in April 2021 as a security platform for low-code/no-code development, added support for enterprise AI copilots in November 2023 and now focuses on agents. Research and development is in Tel Aviv, and go-to-market and operations are led from New York. Zenity says it has more than 230 employees. Its company page lists a $5 million seed round (November 2021), a $16.5 million Series A led by Intel Capital (September 2023), a strategic investment from Microsoft's M12 (July 2024), a $38 million Series B co-led by Third Point Ventures and DTCP (October 2024) and a $125 million Series C led by Norwest (August 2026). Zenity released a new version of its platform in August 2026, organized in three parts. Surface covers AI Observability (an inventory of agents, MCP servers, tools and data access, including agents built without security review), AISPM (configuration and permission checks before agents go live) and Exposure Management (which access paths are actually exploitable). Enforce covers Runtime Boundaries, which checks each agent action in real time and allows it, blocks it or shuts the agent down, including multi-step chains such as data exfiltration or privilege escalation; Agentic Identity, which gates actions on the identity an agent acts for in Okta or Microsoft Entra ID; and MCP Security, a gateway that allows, modifies or blocks tool calls and flags tool poisoning, rug pulls, shadow servers and over-scoped servers. Protect is AIDR, which detects direct and indirect prompt injection, data exfiltration, tool misuse and memory poisoning with LLM-based intent detection. Zenity names Microsoft 365 Copilot, Copilot Studio, Power Platform, ChatGPT Enterprise, Claude Enterprise, Salesforce Agentforce, ServiceNow, Amazon Bedrock and AgentCore, Google Vertex AI and Microsoft Foundry among the platforms it covers. For coding agents such as Cursor, Claude Code, Codex and GitHub Copilot, it collects activity through native agent hooks and OpenTelemetry and enforces policy through its MCP gateway. It sends agent findings to AWS Security Hub (in OCSF format) and to ServiceNow SecOps. **AI compliance coverage** Zenity maps its detections to the OWASP LLM Top 10 and MITRE ATLAS. We found no mapping on its site to the EU AI Act, the NIST AI RMF or ISO 42001. Its trust center says Zenity holds SOC 2 Type II and is ISO 27001 compliant and ISO 27701 compliant; reports are available on request. **Who it's for** Large enterprises running many agents across Microsoft, Salesforce, ServiceNow and OpenAI platforms, plus homegrown and coding agents, that want one policy layer over all of them. Zenity says most of its customers are Fortune 500 or Global 2000 companies; SoftBank Corp. is the only one named, in its Series C announcement. Gartner named Zenity a Cool Vendor in Agentic AI TRiSM (September 2025), and Zenity quotes an April 2026 Gartner report calling it the company to beat in AI agent governance.

Featured in

Zenity is ranked in the following independent collections.

Attestations held

Third-party security attestations and certifications Zenity documents on their own materials. These are point-in-time auditor opinions, not regulatory compliance. Always request the current report or certificate directly from the vendor before relying on it.

SOC 2 (Service Organization Control 2)

Attestation · United States (AICPA)

Certified

Zenity features

Capabilities Zenity markets publicly. Inclusion means the feature is documented on the vendor's site — not that it's best-in-class. Last checked October 30, 2026.

Agent Tracing

End-to-end visibility into multi-step LLM agent runs: tool calls, intermediate reasoning, token usage, latency, and errors at each step.

Audit Logging

Tamper-evident logging of governance events (approvals, model changes, policy decisions) required by EU AI Act Article 12 and similar regulations.

AI Incident Response

Documented workflows for detecting, investigating, and remediating AI-related incidents including bias events, safety failures, and security breaches.

Prompt Injection Defense

Detection and mitigation of malicious prompts intended to bypass system instructions or exfiltrate data.

Data Leakage Prevention

Inspection of LLM outputs to block PII, secrets, and regulated data from leaving the boundary.

Shadow AI Detection

Discovery of unsanctioned AI tools and model usage across an organization.

AI Discovery

Inventory of AI assets, models, prompts, and datasets across an enterprise environment.

Runtime Enforcement

Inline policy enforcement on AI inputs and outputs at request time.

Attack Surface Mapping

Identification of exposed AI components, APIs, and prompts that could be targeted.

Policy Enforcement

Mechanism for applying organizational and regulatory policies to AI usage at runtime.

Behavioral Monitoring

Continuous observation of AI system behavior for drift, anomalies, and policy violations.

Industries served

Integrations

Documented by Zenity in public product materials.

  • Okta
  • Microsoft Entra ID
  • Amazon Bedrock
  • Google Vertex AI
  • ServiceNow
  • OpenTelemetry
  • AWS Marketplace

Zenity pricing

No prices on zenity.io. On AWS Marketplace, the Zenity listing for AWS Security Hub Extended is usage-based: $130 per resource a month for Observability, $16 per million tokens a month for Runtime Protection (AI Firewall, AIDR) and $2 per million tokens a month for Guardrails for AWS, with a 30-day free trial. Zenity's main AWS Marketplace listing is sold by private offer. Checked October 30, 2026.

Pros and cons of Zenity

Pros

  • One policy layer for three kinds of agents: SaaS agents (Microsoft 365 Copilot, Copilot Studio, ChatGPT Enterprise, Claude Enterprise, Agentforce, ServiceNow), homegrown agents on Bedrock, Vertex AI and Microsoft Foundry, and coding agents such as Cursor, Claude Code, Codex and GitHub Copilot.
  • Runtime Boundaries checks each agent action before it runs and can allow it, block it or shut the agent down; Zenity says about a third of its built-in rules catch multi-step chains such as data exfiltration or privilege escalation.
  • Identity-aware enforcement through Okta and Microsoft Entra ID, for example stopping an agent whose human owner has been deactivated.
  • MCP gateway that allows, modifies or blocks tool calls in live context and flags tool poisoning, rug pulls, shadow servers and over-scoped servers.
  • Policy tools that reduce false blocks: prebuilt rule snippets, a plain-language policy assistant, conflict detection and a preview mode showing what a rule would have caught.
  • Usage-based prices published on AWS Marketplace for its Security Hub Extended listing, with a 30-day free trial.

Cons

  • No prices on zenity.io; the AWS Marketplace prices cover only the Security Hub Extended listing, and the main listing is sold by private offer.
  • No mapping to the EU AI Act, NIST AI RMF or ISO 42001 on its site; detections are mapped to OWASP and MITRE ATLAS only.
  • Product pages don't say how enforcement is deployed on each SaaS platform, and we found no public product documentation. Inline prevention for Microsoft Foundry was labeled a preview at its November 2025 launch.
  • No human-approval step is described: Runtime Boundaries allows, blocks or shuts down the agent.
  • Customer references are anonymized (for example 'Fortune 20 Technology'); SoftBank Corp. is the only named customer.
  • The platform's modules don't include red teaming or model scanning, so pre-launch testing needs another tool.

Alternatives to Zenity

Noma Security

Compare Zenity vs Noma Security

Lasso Security

Compare Zenity vs Lasso Security

Prisma AIRS

Compare Zenity vs Prisma AIRS

Cisco AI Defense

Compare Zenity vs Cisco AI Defense

WitnessAI

Compare Zenity vs WitnessAI

Pillar Security

Compare Zenity vs Pillar Security

Frequently asked

What is Zenity?+

Zenity is an AI agent security and governance platform co-founded by Ben Kliger and Michael Bargury. It inventories agents and MCP servers across SaaS platforms, cloud AI platforms and developer devices, checks their configuration and permissions, enforces rules on each agent action at runtime and detects threats such as prompt injection, data exfiltration and tool misuse. Research and development is in Tel Aviv; go-to-market and operations are led from New York.

How much funding has Zenity raised?+

Zenity raised a $125 million Series C led by Norwest in August 2026, with Qumra Capital, SoftBank Vision Fund 2, Hitachi Ventures and LG Technology Ventures joining earlier investors Vertex Ventures, Third Point Ventures, DTCP and Intel Capital. Its company page also lists a $5 million seed round (2021), a $16.5 million Series A (2023), a strategic investment from Microsoft's M12 (2024) and a $38 million Series B (2024). SecurityWeek puts the total at $180 million.

How much does Zenity cost?+

Zenity doesn't publish prices on its website. Its AWS Marketplace listing for AWS Security Hub Extended is usage-based: $130 per resource a month for Observability, $16 per million tokens a month for Runtime Protection and $2 per million tokens a month for Guardrails for AWS, with a 30-day free trial. Other deals, including its main AWS Marketplace listing, are private offers.

Which AI agent platforms does Zenity cover?+

Zenity names Microsoft 365 Copilot, Copilot Studio, Power Platform, ChatGPT Enterprise, Claude Enterprise, Salesforce Agentforce and ServiceNow for SaaS agents; Amazon Bedrock and AgentCore, Google Vertex AI and Microsoft Foundry for homegrown agents; and Cursor, Claude Code, Codex and GitHub Copilot for coding agents. Coverage depth can differ by platform, so ask for a demo on the ones you run.

Does Zenity support the EU AI Act, NIST AI RMF or ISO 42001?+

Not directly. Zenity maps its detections to the OWASP LLM Top 10 and MITRE ATLAS, but we found no mapping on its site to the EU AI Act, the NIST AI RMF or ISO 42001. Its inventory, policy and detection records can serve as evidence, but a governance platform would still be needed for risk assessments and documentation.

What are the alternatives to Zenity?+

The closest alternatives in this directory are Noma Security, Lasso Security, Palo Alto Networks Prisma AIRS, Cisco AI Defense, WitnessAI and Pillar Security. Each discovers AI agents and enforces policy on what they do at runtime. See /best/ai-agent-security-tools for how they compare.

Sources

Keep reading

Guide
AI guardrails: what they are, how they work and which to use
What AI and LLM guardrails are, where they sit, what they catch and miss, what standards expect, and how open-source, c…
Best of
Best AI Red Team Tools 2026
5 picks
Best of
Best AI Security Vendors 2026: Platforms and Companies Ranked
9 picks
Best of
Best AI Agent Security Tools 2026: Agentic AI Security Compared
8 picks
Guide
AI Governance Tools for Startups: A Pragmatic 2026 Buyer's Guide
A pragmatic buyer's guide for early-stage startups: free and open-source AI governance tools (Promptfoo, Giskard, Langf…
Framework
SOC 2 (Service Organization Control 2) — framework guide
FAQ
Procurement questions to ask
Frameworks, certifications, pricing, red-team, references
Vendor
Prediction Guard
Self-hosted AI control plane that applies runtime policy controls to models, agents and MCP tools inside the customer's own infrastructure

See an error or outdated detail?

Profiles carry a last-checked date. If something is out of date or wrong, send a correction and we will review it.

Submit a correction

Work at Zenity?

Claim this profile for free to propose corrections; every change is still checked by our editors. Paid options add your own material or a labeled spot higher in directory lists. They never change the facts, coverage or review on this page.

Claim · freePremium · $990/yrFeatured · $600/qtr

What each option includes, and what money can’t buy