Loading organizations...
§ Private Profile · Greenwich, NY, USA
ZEST Security is a technology company.
ZEST Security offers an agentic exposure management platform designed to remediate, mitigate, and prevent cloud vulnerabilities, misconfigurations, and other security exposures. The company’s core product employs an AI-powered approach to actively resolve security issues, moving beyond traditional methods that primarily focus on identification. This technical methodology aims to efficiently close security gaps rather than merely documenting them, streamlining risk reduction for organizations.
The company was co-founded by Snir Ben Shimol, who serves as CEO, and Uri Aronovici, the CTO. Their founding insight stemmed from the critical gap between identifying security risks and effectively resolving them, recognizing that existing solutions failed to translate risk awareness into actual resilience. Both founders bring a strong pedigree, having served in Israeli intelligence and holding significant cybersecurity leadership roles in global organizations prior to ZEST, with Ben Shimol previously a CSO at Cider Security and Aronovici leading security architecture at Akamai.
ZEST Security targets security teams within organizations, providing them with the tools to proactively fix problems. The company's vision is to empower these teams to transcend the cycle of managing perpetual backlogs, ushering in an era centered on comprehensive resolution. Their mission is to enable organizations to achieve genuine security by focusing on fixing vulnerabilities, thereby fostering greater resilience.
ZEST Security has raised $5.0M across 1 funding round.
ZEST Security has raised $5.0M in total across 1 funding round.
ZEST Security has raised $5.0M across 1 funding round. Most recently, it raised $5.0M Seed in July 2024.
| Date | Round | Lead Investors | Other Investors | Status |
|---|---|---|---|---|
| Jul 1, 2024 | $5M Seed | — | Silvertech Ventures, Sparked Ventures | Announced |
ZEST Security has raised $5.0M in total across 1 funding round.
ZEST Security's investors include Silvertech Ventures, Sparked Ventures.
# High-Level Overview
ZEST Security is an AI-powered cloud risk resolution platform that automatically remediates cloud vulnerabilities and misconfigurations at scale.[1][2] Rather than simply identifying security issues, ZEST generates actionable fixes—including Terraform, Pulumi, and AWS CloudFormation code—that DevOps teams can review and deploy, dramatically accelerating the remediation process.[1][3]
The company serves enterprise security and DevOps teams struggling with the "failure to remediate" problem: organizations have invested heavily in tools to *identify* cloud risks, but lack efficient mechanisms to *fix* them.[2] ZEST bridges this gap by reducing remediation time from 30-60 days to hours, while simultaneously preventing recurring mistakes by catching misconfigurations before infrastructure is provisioned.[3]
# Origin Story
ZEST emerged from stealth in 2024, founded by Snir Ben Shimol (CEO) and Uri (co-founder), both veterans of Israeli intelligence with deep expertise in enterprise security.[4] The founding team drew on direct experience at major technology companies—Ben Shimol previously served as Chief Security Officer at Cider Security (acquired by Palo Alto Networks in two years) and held leadership roles at Varonis, while Uri led security architecture at Akamai overseeing global vulnerability management and cloud security strategy.[4]
The idea crystallized from a real operational pain point: despite years of experience building security infrastructure at large enterprises like Akamai and Varonis, the founders found it "impossible to operate" when it came to actually remediating identified risks.[2] This gap between visibility and action became the founding thesis. The company raised $5 million in early funding and has validated its approach through partnerships with enterprise design customers over an eight-month development period.[3]
# Core Differentiators
# Role in the Broader Tech Landscape
ZEST operates at the intersection of two critical industry trends: the rapid cloud migration wave and the maturation of security tooling. Organizations have deployed extensive vulnerability scanning and risk identification solutions, creating a paradox—they now have unprecedented visibility into their security posture but lack the operational capacity to address findings at scale.[2]
This timing is crucial. As cloud infrastructure becomes the default deployment model, the shared responsibility model places remediation burden squarely on development teams who often lack deep security expertise.[3] The proliferation of infrastructure-as-code tools (Terraform, CloudFormation, Pulumi) creates both the problem (misconfigurations) and the solution vector (automated code generation). ZEST's AI-native approach directly addresses this gap, positioning the company within the broader shift from security-as-detection to security-as-resolution.
The platform also influences how enterprises think about the DevOps-Security relationship, moving from adversarial ticket-passing to collaborative problem-solving where security provides developers with ready-to-implement solutions rather than lists of issues.
# Quick Take & Future Outlook
ZEST is well-positioned to capture significant market share in the cloud security remediation space, a category that barely existed three years ago but has become mission-critical as cloud adoption matured. The founding team's pedigree (successful exits, deep vendor relationships, Israeli intelligence background) and early enterprise traction suggest execution capability.
The company's trajectory will likely depend on: (1) expanding beyond IaC remediation into broader cloud risk categories, (2) deepening integrations with major cloud platforms and DevOps toolchains, and (3) proving measurable ROI through reduced mean-time-to-remediation metrics that resonate with both security and finance leaders.
As organizations shift from managing endless vulnerability backlogs to actually closing them, ZEST represents a fundamental reframing of cloud security—from a compliance checkbox to an operational capability. This philosophical shift, combined with generative AI's ability to automate remediation at scale, positions the company at the center of how enterprises will approach cloud security for the next decade.