SECURITY ATLAS / EVALUATION BRIEF
Zenity AI Agent Security Platform
Research reviewed: 2026-10-18
https://atlasofsecurity.com/landscape/vendors/zenity-agent-security/

THE ATLAS TAKE
Zenity is worth evaluating when the first problem is understanding which agents exist, how they are configured and what they can reach across supported enterprise environments. Surface, Enforce and Protect should be treated as distinct control areas rather than one undifferentiated prevention claim. Atlas would begin with discovery accuracy and a small number of validated permission findings, then examine the remediation path actually available. The useful outcome is an owner who can reduce a specific exposure and prove the change. An attractive agent inventory alone does not demonstrate runtime interception of an unsafe action.

SCOPE
Scope the evaluation to the selected Surface connectors. Enforce and Protect capabilities require their own integration and entitlement review.

WORTH A LOOK WHEN
Enterprise teams establishing agent inventory, ownership and permission posture across supported connected environments.

THINK TWICE WHEN
The selected connectors cannot observe the required agent environment or the buyer needs unintegrated runtime blocking.

IMPLEMENTATION
1. Create a connector coverage matrix
Map actual agent builders and environments to supported connections, required permissions and refresh expectations.

2. Reconcile known agent ownership
Validate a sample of agents, identities and resources against platform-native records.

3. Close one exposure end to end
Assign an owner, approve permission reduction and verify effective access after the change.

OPERATING REALITY
Connector permissions and freshness need continuous ownership. Agent owners should validate inventory relationships and remediate findings, while security staff distinguish configured access from observed use. Platform, permission or agent-version changes should trigger reassessment so a previously reviewed graph does not become a static inventory of yesterday’s environment.

COMMERCIAL CONSIDERATIONS
Quote the selected Surface connectors and posture scope explicitly. Price Enforce, Protect and any runtime integration separately and include connector administration and remediation work.
- Connected environments and covered agent scope
- Selected posture, observability and control modules
- Connector permissions, remediation and operational integration

EVALUATION PLAN / PROPOSED TESTS, NOT COMPLETED RESULTS
1. Reconcile a known agent roster
Acceptance evidence: Retain discovered, missing and incorrectly associated records.
Owner: __________  Pass criterion: __________
Observed result: __________  Evidence location: __________

2. Validate one excessive-permission finding
Acceptance evidence: Show the underlying platform permission and meaningful resource access.
Owner: __________  Pass criterion: __________
Observed result: __________  Evidence location: __________

3. Remediate and rescan the test exposure
Acceptance evidence: Capture owner approval, effective target access and finding resolution.
Owner: __________  Pass criterion: __________
Observed result: __________  Evidence location: __________

QUESTIONS FOR THE VENDOR
- Which agents are discovered by each connector?
- How are effective permissions calculated?
- Which findings have an integrated enforcement path?

EVIDENCE GAPS
- Atlas has not independently measured discovery completeness or posture accuracy.
- Confirm exact connector scope, refresh behavior and integrated remediation permissions.

SOURCES
Zenity: Surface, Enforce, and Protect (Product information)
https://zenity.io/platform
Zenity: AI Observability data and environment scope (Product information)
https://zenity.io/platform/ai-observability
Zenity: AISPM configuration and remediation (Product information)
https://zenity.io/platform/ai-security-posture-management

Use synthetic fixtures in an authorized environment. Agree rollback and acceptance criteria before enforcement.
Documentation research and Atlas analysis. Independent hands-on effectiveness, effort, and complete price remain unassessed.