Zero Networks is a network security company that stops attackers, ransomware and misbehaving AI agents from moving sideways once they are inside a network. It does this with automated microsegmentation and identity-based access control for assets on-premises, in the cloud and in OT and IoT environments.
The platform is aimed at security teams that want zero trust segmentation without months of manual rule writing. It discovers assets and identities without agents, learns how they really communicate, and then enforces tight rules automatically.
At A Glance
| Vendor | Zero Networks |
|---|---|
| Category | Microsegmentation, identity segmentation and zero trust remote access |
| Identities covered | Users, admin and privileged accounts, service accounts, AI agents |
| Deployment | Agentless, covering on-premises, cloud and OT/IoT assets |
| Agentic AI | Least Agency Enforcement for AI agents |
| Customers | Vermeer, Baron Funds, Greenhill, Evercore, Great Clips |
| Market classification | Workforce IAM |
What Zero Networks Does
Lateral movement is how most serious attacks spread. Once an attacker holds one account or machine, flat networks and broad logon rights let them reach almost anything. The usual fix, segmentation, is slow because someone has to work out which connections are legitimate and write the rules by hand. Zero Networks automates that work: it observes how machines and accounts actually behave, proposes rules that allow only that, and enforces them, so each compromised account or machine can reach only what it genuinely needs. The same approach applies whether the attacker is a person or an AI system, and it also helps teams meet compliance and cyber insurance requirements for segmentation and privileged access.
Products
Network Segmentation
Network Segmentation divides the network into isolated micro-segments. Rather than asking administrators to write rules, it watches real traffic and generates them, and a reported 94% of those rules are used exactly as produced.
Identity Segmentation
Privileged and non-human accounts are a favourite target for attackers. Identity Segmentation limits admin, service and AI agent accounts to the assets and logon types they need, automatically revokes excessive logon rights and helps prevent Pass the Ticket, Golden Ticket and Kerberoasting attacks.
Secure Remote Access
Secure Remote Access is the zero trust network access (ZTNA) part of the platform, for organisations that want to retire a traditional VPN. It connects employees and third parties to internal resources and applies the same identity-based rules that govern traffic inside the network.
Network-Layer JIT MFA And RPC Firewall
Just-in-time MFA can be applied at network layer 3, putting an MFA prompt in front of RDP, SMB, SSH, WinRM and RPC connections. The RPC Firewall adds control over remote procedure calls, a common route for lateral movement in Windows environments.
How It Works
Zero Networks is agentless. Rollout follows three stages.
| Component | What it does |
|---|---|
| Discover | Every asset, identity and AI agent on the network is found automatically, with no agent installation. |
| Learn | For 30 days the platform observes logon activity, account behaviour, asset access patterns and real network traffic, and builds policies from what it sees. |
| Segment | Generated rules are tested in a sandbox before enforcement, then accounts are limited to pre-approved assets and logon types. |
| Palo Alto Networks | An integration with Palo Alto Networks adds zero-touch containment. |
Identities And Systems Covered
| Admin and privileged accounts | Admin logon allowed where intended, all other logon rights blocked |
|---|---|
| Service accounts | Access restricted to operational needs |
| AI agents | Discovered, monitored and limited through Identity Segmentation and Least Agency Enforcement |
| Users and third parties | Covered by Secure Remote Access |
| Assets and protocols | On-premises, cloud and OT/IoT assets, with RDP, SMB, SSH, WinRM and RPC protected |
Agentic AI Capabilities
Least Agency Enforcement
Least Agency Enforcement applies OWASP’s Least Agency principle to AI agents using identity-based microsegmentation, policy automation and just-in-time MFA, so an agent gets only the reach its task needs:
- Agents are restricted to explicitly approved systems and resources
- Sensitive administrative actions need human approval first
- Compromised or over-permissioned agents are contained
- Least-privilege communication policies for agents are generated automatically
Company Background
| Founded | 2019 |
|---|---|
| Offices | Tel Aviv, Israel and Orlando, United States |
| Leadership | Benny Lakunishok (Co-founder and CEO) |
| Funding | A $55 million Series C led by Highland Europe, with F2 Venture Capital, PICO Venture Partners, Venrock and U.S. Venture Partners, bringing a reported total of more than $100 million |
| Recognition | Included in the EMA Prism Report and GigaOm’s 2026 Radar for Microsegmentation; finalist in CRN’s 2026 Best of the Channel Awards |
Note: This overview is compiled from Zero Networks’s publicly available information as of 3 November 2026. It is provided for information only. NHI Mgmt Group does not endorse any vendor, and nothing on this page represents the opinions of NHI Mgmt Group.