Zenity

Zenity is an AI agent security and governance platform for enterprise security teams. It inventories agents across SaaS, cloud and homegrown, and endpoint environments, enforces policy on what they can access and do, and detects threats at runtime. The company launched in 2021 as a security platform for low-code/no-code development and now focuses on AI agents and copilots.

What It Is

Zenity is a security platform built around the idea that agents execute decisions, not just code paths or requests. Rather than filtering prompts or model outputs, it governs how agents are built, what they can reach, and what they do. Zenity says traditional AppSec, DLP, EDR/XDR, CNAPP and CSPM tools lack visibility into how agents reason and chain actions.

How the Platform Works

The platform is organized into three layers: Surface, Enforce and Protect.

• Surface builds a live inventory of agents and the data they touch (AI Observability), evaluates configuration and permissions against policy (AISPM), and validates which attack paths are exploitable, with fixes that can be applied in Runtime Boundaries (AI Exposure Management).
• Enforce applies policy at the moment of action, allowing safe actions and stopping unsafe ones. Related capabilities include Boundaries, Agentic Identity and MCP Security.
• Protect detects, investigates and responds to threats through AI Detection and Response (AIDR), mapped to OWASP and MITRE ATLAS. Zenity describes this as intent-based detection that examines the full execution path, including tool calls, memory access, data usage and control flow.

Coverage and Use Cases

Zenity groups coverage by agent type: agentic SaaS (such as Salesforce Agentforce and Copilot Studio), cloud and homegrown agents (such as AWS Bedrock and Google Vertex AI), and personal and coding agents on endpoints through lightweight monitoring, detection and response. Use-case pages cover data leakage, shadow AI, destructive actions, compliance and citizen development. Zenity Labs publishes research on agent attack techniques.