Zenyard
Tel Aviv startup whose AI agent analyzes full software binaries to verify third-party code safety and patch known CVEs directly.
Visit Website ↗ + Add to Compare Claim This CompanyOverview
Zenyard builds an AI agent for reverse engineering that lets security and engineering teams verify what a piece of third-party software, including compiled binaries, actually does before trusting it. Rather than relying on package metadata or vendor claims, the platform performs deep binary analysis and can remediate known CVEs in a component directly, without waiting for an upstream vendor patch or a full package upgrade.
The company positions this against generic large-language-model tools and decompiler plugins, which it says tend to hallucinate or lose context on large binaries; Zenyard instead analyzes complete files to preserve full context, and can deploy as a cloud service, in a private cloud, or fully on-premises, including air-gapped networks for defense and critical-infrastructure customers.
Founded in Tel Aviv in February 2025 by Nathan Satanovsky, Ziv Brandstein, and CEO Yuval Luria, Zenyard emerged from stealth in February 2026 with an undisclosed pre-seed round led by Mindset Ventures, with participation from TAU Ventures and angel investors including Zuk Avraham.
Innovation Matrix Assessment
Moved from founding to a working multi-agent binary-analysis product with early paying customers in about a year.
Letting teams patch a specific vulnerable component without a full vendor release addresses a genuine remediation bottleneck in software supply-chain security.
Still pre-seed with an undisclosed amount; investor claims of existing paying customers come from an investor's own social post rather than an independent source.
Automated, full-context binary patching by an AI agent is a meaningfully different approach from traditional software composition analysis and patch-management tooling.
No independent benchmark or named customer evidence of real-world remediation was found; the company's own testimonials are anonymized.
Binary-level software supply-chain risk is a durable problem, though larger application-security platforms may eventually absorb this capability.
Why CISOs Should Care
Lets AppSec teams close a known CVE in a vendored binary immediately instead of waiting on an upstream patch cycle.
What Makes It Different
Performs whole-binary AI analysis and direct remediation rather than metadata-based software composition analysis or snippet-level LLM tooling.
The Matrix Verdict
53/100 — INCREMENTAL INNOVATOR
An Incremental Innovator: a genuinely useful and technically distinct approach to binary-level vulnerability remediation, but still pre-seed stage with no independently verified customer or efficacy evidence.
Editorial Note: Claims vs. Verified Findings
Claims of existing paying customers and multi-agent architecture come from investor and company statements, not independent verification; treated as unverified in scoring.
Sources
Alternatives to Zenyard
Unknown Cyber Inc.
CISO ReviewedMalware genomics platform using automated deep static analysis and code-lineage comparison to identify unseen malware, variants, and supply-chain…
Synack Inc
A penetration-testing-as-a-service platform pairing a vetted researcher community with AI-driven attack surface discovery for continuous security validation.
Horizon3.ai
Autonomous penetration testing company whose NodeZero platform self-attacks networks without persistent agents, aiming to replace annual manual pentests…
Cogent Security
Agentic AI platform that autonomously triages, investigates, and remediates vulnerabilities as a force multiplier for security teams.
Airlock Digital
Application allowlisting (deny-by-default) platform that blocks unapproved executables, scripts, and processes to prevent ransomware and malware execution.
Vannevar Labs
A Palo Alto defense-AI company processing foreign-language and open-source intelligence under a $40M DoD contract, alongside peers like…