# zero-networks

Source: https://startwithidentity.com/vendors/zero-trust/zero-networks/
Last updated: 2026-08-06
License: content by Start with Identity. Cite the source URL.

---

## Overview

Zero Networks automates microsegmentation, the practice of isolating devices and services from each other rather than defending only the network perimeter, without the manual policy-writing that has historically made segmentation a multi-year project. Founded in 2019 in Tel Aviv and backed by over $100 million including a 2025 Series C, it has grown from a network-security specialist into an identity-adjacent one: its platform now ties network access directly to identity, adding just-in-time MFA on sensitive protocols and, as of August 2026, [Least Agency Enforcement](https://startwithidentity.com/blog/2026-08-04-zero-networks-launches-least-agency-enforcement-for-ai-agents/) for AI agents.

## What it is good at

The core strength is automated policy generation: rather than requiring security teams to hand-author segmentation rules, Zero Networks observes traffic and builds least-privilege access maps automatically, then enforces a default-deny posture at the host firewall. Its network-layer just-in-time MFA on protocols like RDP, SMB, and WinRM means a compromised credential still can't move laterally without a real-time human approval, a meaningfully different control than password rotation or standard MFA on login alone. The AI agent extension applies the same identity-based microsegmentation model to agent identities specifically, addressing a gap most segmentation vendors haven't touched yet.

## Where it falls short

This is not an identity platform in the IAM sense: it has no directory, no SSO, no lifecycle provisioning, and no role or entitlement management. It sits downstream of identity, enforcing what an already-authenticated identity can reach on the network, rather than managing who that identity is. Pricing is entirely quote-based with nothing published, typical for enterprise network security but a real gap for buyers trying to budget early.

## Pricing

Not published; sales-led with a demo request as the only entry point. Model likely scales with protected hosts or endpoints; confirm directly with the vendor.

## Best for, and who should look elsewhere

A strong fit for security teams that want segmentation and lateral-movement containment without a multi-year manual rollout, and increasingly for teams that need to contain AI agent identities specifically. Look elsewhere if what you need is an identity provider, SSO, or user lifecycle governance; Zero Networks assumes those exist elsewhere and adds the network-enforcement layer on top. See the [zero trust vendor directory](https://startwithidentity.com/vendors/zero-trust/) for adjacent options like [Illumio](https://startwithidentity.com/vendors/zero-trust/illumio/).

## Bottom line

A capable, well-funded microsegmentation specialist that has extended its least-privilege model to AI agent identities faster than most competitors, worth evaluating alongside your identity stack rather than instead of it.