Zenity is a leader in helping enterprises secure and govern copilots and low-code development. As copilots and low-code surge in popularity, it is the first time that business users are at the forefront of, and in control of business application development. Unfortunately, many existing AppSec tools are focused on code scanning apps that are developed within the traditional SDLC, but lack coverage for business-led development where apps, automations, copilots, and bots are built by abstracting code. The Zenity platform is built from the ground up with a security-first approach centered on three pillars: Visibility, Risk Assessment, and Governance. As the founding member of the OWASP Top 10 project specifically focused on low-code/no-code development, Zenity takes a community-oriented approach to this rapidly evolving security vector to help speak the language of our customers and deliver rapid value. With SOC 2 Type 2 and GDPR compliance, Zenity’s agent-less platform is uniquely positioned to help enterprises truly know their business apps, and helps organizations with reducing risk, meeting compliance, and upholding business-led development.
קישור חיצוני עבור Zenity
Tel-Aviv, IL
New York, US
500 Unicorn Park Dr
300
Woburn, Massachusetts 01801, US
Zenity 🤝 Microsoft Securing Microsoft 365 Copilot is a tall task, but a critical one, as more and more business users leverage AI in their daily work lives. Excited for this talk that Michael Bargury is giving at BlueHat next week!
Many people have asked me what was Microsoft's response to our copilot talks at BlackHat I think MSRC inviting me to speak at BlueHat speaks volumes Genuinely appreciate the opportunity #BlueHat #MSRC
Zenity פרסם מחדש את זה
Zenity recently launched a new GenAI Attacks Matrix. A community driven project to secure AI systems, copilots, and agents. Why it matters: ↳ Michael Bargury, emphasized the need for a collaborative approach to AI security, aiming to help organizations develop strategies to manage risks. As AI evolves daily, sharing knowledge is critical to staying ahead of threats. ↳ This open-source project, inspired by MITRE ATLAS, helps security teams understand how AI systems interact with users and the potential risks that come with it. It’s a resource for documenting new attack techniques and sharing them quickly before they become a bigger problem. ↳ Unlike traditional security frameworks that focus on endpoints, the GenAI Attacks Matrix is built specifically for the new risks that come with enterprise copilots and AI systems. It’s tailored to protect tools like ChatGPT Enterprise, GitHub Copilot, Microsoft 365 Copilot, and custom AI apps. Thanks for the write up CIO Influence!
We are ecstatic to be welcoming Cinthia Portugal to Zenity as our VP of Global Marketing. Cinthia brings a wealth of experience to Zenity, having recently built and led high-performing marketing teams at Checkly and Humio. At CrowdStrike, she drove strategic growth for Humio’s marketing initiatives within the broader enterprise security landscape after a successful acquisition. With a proven track record of scaling marketing results for high-growth companies, Cinthia will lead Zenity’s strategic marketing efforts as we continue our mission to help the world’s leading enterprises secure AI and low-code apps. Oh... and we're still hiring across the board, check out all our career opportunities at https://lnkd.in/eryw_tXg
If you're in the New York area (or even if you're not), we'd love to meet with you at the SINET New York Event next week at the Times Center. It's sure to be a good one! Our team will be there talking with security leaders about how they're managing emerging security threats that are created when adopting and creating AI and low-code apps. #AppSec #AISecurity #lowcodesecurity
SINET New York is just one week away! We look forward to connecting with our community in person on October 16th at the Times Center for a day of compelling thought leadership and meaningful relationship building. We would like to thank our sponsors for your commitment to the SINET Community. There is still time to register. View the agenda, speakers, and register here. https://lnkd.in/e63dGK3p Evolution Equity Partners Squadra Ventures SYN Ventures YL Ventures Island Apiiro AppOmni Armis Cyware Entro Security F5 Intercast Nucleus Security Oasis Security Qintel SafeBreach SandboxAQ Veza WireX Systems X-Analytics (SSIC) Aembit AirMDR, Inc. APEX Cranium Crash Override DataBee Endor Labs Harmonic Security Oligo Security OX Security Reco Savvy Sevco Security Sweet Security Tamnoon TrustCloud Zenity Heather Rodriguez Robert Rodriguez
October is spooky season, but it's still speaker season here at Zenity. Our very own Michael Bargury is giving not one, but two upcoming presentations! On Wednesday, October 23rd join us at the Information Security Summit's 22nd Annual Information Security Summit, where Michael is giving a talk titled, 'AI Empowers your Business. What Does that Mean for Security?' and on Thursday, come up farther north to Toronto for #SecTor where Michael's giving a talk on the 24th called, '15 Ways to Break Your Copilot' Should be a lot of fun talking AI #AppSec, if you're going to be at either of those shows, shoot us a DM!
Huge accomplishment by the team here to put forth research that studies discovered threats related to GenAI apps, agents, and copilots. As agentic AI, enterprise copilots, and user-built AI apps take hold, the GenAI Attacks Matrix is a critical research project to help security teams understand and manage the ensuing risks. The work on this never stops, and we need your help! Get in touch with Michael and check out the GenAI Attacks Matrix here: https://lnkd.in/e8FZiFyA
Attacks on GenAI copilots/agents are more than just prompt injection and prompt injection is more than just ignore previous instructions. We're excited to share the GenAI Attacks Matrix! Breaking down ai attacks into manageable building blocks. --> ttps dot ai The popular approach is trying to secure ai by listing out bad prompts.. enumerating bad content didn't work for malware, it's not going to work here. We need to refocus on behavior and assume breach. We can't stop all badness at the gate.
Outstanding to be here in San Francisco for OWASP® Foundation's Global AppSec Event! We have a lot of electrifying things happening, including Michael Bargury's presentation 'Living Off Microsoft Copilot' where he'll show how bad actors are able to perform remote copilot execution attacks without even needing a compromised account 🤯 We're also going to be at Booth SU14 all day today and tomorrow, and are hosting a happy hour with our friends from Phoenix Security | ASPM, Myrror Security, and ARMO tonight at Embarcadero 💃 Check out all the can't miss sessions and events at the link below, and be sure to say hello to the best in the biz... Michael Bargury, Justin VITA and Stephen Shanko while you're out there. https://lnkd.in/dqwQK7yz
🚨 🚨 BREAKING 🚨 🚨 Zenity Labs researchers have discovered a setting in Salesforce Einstein Copilot that allows non-admin users to edit flows by inserting or editing actions without oversight. When these actions are malicious it can lead to data leakage, exfiltration, and phishing attacks. Without the proper guardrails or visibility this can be quite a challenge to manage and mitigate the risks. Think 'needle in a haystack' type of challenging... Check out our latest blog written by Tamir Ishay Sharbat and ZE ST which breaks down how these attacks can present themselves and what you can do about these risks. https://lnkd.in/eHhSsiju #EinsteinCopilot #salesforcesecurity #aisecurity #appsec
⏳ Last Chance ⏳ Zenity recently announced the first agent-less security and governance solution to enable Microsoft 365 Copilot throughout the enterprise. Join us for "The Microsoft 365 Copilot Security Blueprint" webinar tomorrow at 11 am ET where Zenity’s experts discuss promptware, the new attack vector emerging from M365 Copilot’s adoption which can lead to Remote Copilot Execution. Attendees will learn how to: - Identify and mitigate risks associated with promptware and AI agents. - Deploy a multi-faceted defense strategy, including visibility into user-bot interactions, AI threat detection & response, promptware prevention, and remediation. - Secure Microsoft 365 Copilot, including its extension framework, Copilot Studio. Secure your spot now and get ahead of the curve in AI security! https://lnkd.in/g8vtGmC9