# Zenity

> Enterprise AI agent security and governance platform that discovers agents, enforces policy, and detects runtime threats across SaaS, cloud, and endpoints.

Zenity is an AI agent security and governance platform for enterprise security teams. It inventories agents across SaaS, cloud and homegrown, and endpoint environments, enforces policy on what they can access and do, and detects threats at runtime. The company launched in 2021 as a security platform for low-code/no-code development and now focuses on AI agents and copilots.

## What It Is

Zenity is a security platform built around the idea that agents execute decisions, not just code paths or requests. Rather than filtering prompts or model outputs, it governs how agents are built, what they can reach, and what they do. Zenity says traditional AppSec, DLP, EDR/XDR, CNAPP and CSPM tools lack visibility into how agents reason and chain actions.

## How the Platform Works

The platform is organized into three layers: Surface, Enforce and Protect.

- **Surface** builds a live inventory of agents and the data they touch (AI Observability), evaluates configuration and permissions against policy (AISPM), and validates which attack paths are exploitable, with fixes that can be applied in Runtime Boundaries (AI Exposure Management).
- **Enforce** applies policy at the moment of action, allowing safe actions and stopping unsafe ones. Related capabilities include Boundaries, Agentic Identity and MCP Security.
- **Protect** detects, investigates and responds to threats through AI Detection and Response (AIDR), mapped to OWASP and MITRE ATLAS. Zenity describes this as intent-based detection that examines the full execution path, including tool calls, memory access, data usage and control flow.

## Coverage and Use Cases

Zenity groups coverage by agent type: agentic SaaS (such as Salesforce Agentforce and Copilot Studio), cloud and homegrown agents (such as AWS Bedrock and Google Vertex AI), and personal and coding agents on endpoints through lightweight monitoring, detection and response. Use-case pages cover data leakage, shadow AI, destructive actions, compliance and citizen development. Zenity Labs publishes research on agent attack techniques.

## Features
- AI Observability and live agent inventory
- AI Security Posture Management (AISPM)
- AI Exposure Management with exploitability validation
- Runtime Boundaries policy enforcement
- Agentic Identity and access management
- MCP Security
- AI Detection and Response (AIDR) mapped to OWASP and MITRE ATLAS
- Coverage across SaaS, cloud and endpoint agents
- Intent-based detection over agent execution paths
- Compliance-ready reporting

## Integrations
Salesforce Agentforce, Microsoft Copilot Studio, Microsoft 365 Copilot, AWS Bedrock, Amazon Bedrock AgentCore, Google Vertex AI, Microsoft Foundry, ChatGPT Enterprise, Claude Enterprise, Power Platform, ServiceNow, Salesforce

## Platforms
WEB

## Pricing
Paid

## Links
- Website: https://zenity.io
- EveryDev.ai: https://www.everydev.ai/tools/zenity