Trust Player Zero
An early-stage identity and access risk platform that starts with read-only Microsoft Entra investigation and is validating governed, evidence-backed remediation.
Visit Website ↗ + Add to Compare Claim This CompanyOverview
Trust Player Zero (TPZ) is a very early-stage startup building an identity and access risk platform. Its current product connects to Microsoft Entra in read-only mode and brings together supported identity evidence, such as users, directory roles, MFA registration, sign-ins, Conditional Access policies and Identity Protection risk signals, so a small security team can review what deserves attention. Its standard audit looks for dormant and never-signed-in accounts, privileged users, privileged users with MFA registration gaps, stale guest accounts and identity risk signals.
The company’s differentiator is the workflow it is trying to prove rather than the detection. Its Design Partner Beta, a free 12-week program for up to five Microsoft Entra customers, is designed to validate one customer-authorized action, disabling an account, followed by a read-back of the resulting state from Entra, retained evidence of what happened and governed re-enablement. The company says the customer stays responsible for approving every action.
TPZ is aimed first at Microsoft-heavy financial services and fintech organizations where one person or a small team carries broad cybersecurity responsibility. Its stated longer-term direction is a control plane for governing security actions across human, software and AI-agent identities; the company labels that as future direction, not current capability. It was founded by Erin Christ (CEO), Ron Hurry (Chief Security Architect) and Jeremy Solomon (Chief Product Officer).
Innovation Matrix Assessment
A read-only Microsoft Entra audit is live and a Design Partner Beta is being recruited, with a published roadmap, but all evidence of progress is the company's own and the product is new.
The current read-only audit surfaces dormant users, privileged accounts and MFA gaps in Entra, which is useful to a small team, but it covers one platform and does not yet change anything in the customer's environment.
No named customers, funding announcements, analyst coverage or partnerships were found; the company is recruiting up to five free design partners.
Pairing authorized remediation with read-back verification and retained evidence is a thoughtful approach to accountability, but the workflow is unproven and sits in an established identity governance category.
There are no customer case studies, independent tests or named results; the remediation workflow is still being validated in the beta.
Identity governance for Microsoft Entra, and the governance of AI-agent identities the company points to, are likely to stay important, though the company must still prove it can deliver.
Why CISOs Should Care
A CISO running a small, Microsoft-heavy security team gets a read-only view of dormant, privileged and under-protected identities, plus a way to take part in shaping a governed disable-and-verify workflow.
What Makes It Different
TPZ aims to close the loop after a finding: customer authorization, the action, a read-back from the source system, retained evidence and governed recovery.
The Matrix Verdict
35/100 — EMERGING / UNRANKED
Trust Player Zero is a very early-stage startup with a clear idea and a narrow, honestly scoped product, but little independent evidence yet. It lands in the Emerging / Unranked tier because adoption, customer proof and funding are not yet visible; it is one to watch as the beta produces results.
Editorial Note: Claims vs. Verified Findings
Everything about the product, roadmap and team comes from the company's own website, so all of it is unverified vendor material. The headquarters location and founding year come from a business-data record and were not confirmed on the company's site; no funding figure was found.
Sources
Alternatives to Trust Player Zero
Teleport
An identity-based infrastructure access platform issuing short-lived cryptographic identities for humans, machines, and AI agents in place of…
SpecterOps
Identity attack-path security specialist behind BloodHound, the widely used open-source tool for mapping Active Directory and Entra ID…
Astrix Security
Non-human identity security platform that discovers and governs API keys, OAuth tokens, service accounts, and AI-agent credentials across…
Socure
AI-driven identity verification and fraud platform used by banks, fintechs, and government agencies to validate identities during digital…
Keyfactor
Machine identity and PKI management platform helping enterprises secure certificates, keys, and post-quantum cryptography readiness at scale.
Veza
Identity security platform built around an authorization graph that maps who and what can actually access data and…