ZEST Security
Tel Aviv and New York cloud security startup using generative AI to resolve the root cause of cloud misconfigurations and risks, not just flag them.
Visit Website ↗ + Add to Compare Claim This CompanyOverview
ZEST Security is a cloud security startup founded in November 2023 by CEO Snir Ben Shimol and CTO Uri Aronovici, with offices in Tel Aviv and New York. The company exited stealth in mid-2024 with an AI-powered platform built to resolve cloud security risks rather than simply detect and flag them, raising a $5 million seed round from Hanaco Ventures, Silvertech Ventures, and angel investors.
ZEST’s platform correlates findings across cloud environments to pinpoint the root cause of a given risk, then generates resolution paths using existing infrastructure-as-code and native cloud controls so that teams can actually fix issues rather than add them to an ever-growing backlog. In 2025, the company announced an integration with runtime cloud security vendor Upwind, pairing Upwind’s real-time workload visibility with ZEST’s AI-driven remediation to close the gap between detecting a live cloud threat and actually resolving it.
ZEST’s core bet is that the cloud security market has over-invested in detection and under-invested in remediation: most CSPM and CNAPP tools are good at generating findings but leave the fixing to already-stretched security and DevOps teams, which is the gap ZEST is built to close.
Innovation Matrix Assessment
ZEST shipped its root-cause remediation platform at stealth exit and added a runtime-security integration with Upwind within about a year, a solid early execution pace.
Generating concrete resolution paths instead of just alerts directly reduces the remediation backlog that most cloud security teams struggle with.
Named seed investors and a real product partnership with Upwind are independently reported, though the company remains small and early-stage with no later funding round found.
Shifting from 'detect and alert' to 'root-cause and resolve' reframes what a cloud security tool is for, though several CNAPP and CSPM vendors are moving in the same direction.
No independent test results, named customer outcome, or third-party validation of remediation accuracy were found.
As cloud environments grow more complex, remediation-first tooling that closes the gap between finding and fixing risk will become more, not less, important.
Why CISOs Should Care
Reduces the cloud remediation backlog by generating concrete, code-level fixes for root-cause issues instead of adding yet another list of unresolved findings to triage.
What Makes It Different
Built around root-cause correlation and automated resolution paths rather than detection and alerting, which is where most competing cloud security tools stop.
The Matrix Verdict
58/100 — INCREMENTAL INNOVATOR
ZEST Security is an Incremental Innovator: its remediation-first approach and real product partnership with Upwind are credible signals, but it remains an early-stage, seed-funded company without the independent customer or performance evidence needed to rank higher.
Editorial Note: Claims vs. Verified Findings
ZEST's seed funding, founders, and the Upwind integration are independently reported in trade press; specific remediation-accuracy or customer-outcome claims come from company materials and were not independently verified.
Sources
Alternatives to ZEST Security
Wiz
Agentless, graph-based cloud security platform that maps multi-cloud risk end-to-end, now owned by Google after a record $32B…
Chainguard
Provides hardened, minimal, continuously-rebuilt container images and software packages to eliminate vulnerabilities before they reach production.
Second Front Systems
A Wilmington, DE defense-tech company whose Game Warden platform deploys commercial SaaS into DoD classified networks in 90…
Sysdig
The company behind Falco, the CNCF's runtime security standard, offering an eBPF/kernel-level CNAPP built on live syscall-based threat…
Obsidian Security
Obsidian Security provides a SaaS security posture management (SSPM) platform that detects identity-centric threats and misconfigurations across enterprise…
Microsoft Defender for Cloud
Microsoft's built-in cloud-native application protection platform, unifying CSPM, workload protection, and DevOps security natively across Azure, AWS, and…