Zafran detects exposure across your entire environment, from zero-days to celebrity vulnerabilities, so you can assess exposure before your scanner catches up.
On 25 October 2022 OpenSSL pre-announces a critical flaw in versions 3.0.0 to 3.0.6, with no CVE published, no NVD entry and no scanner plugins yet. Zafran's Zero Day Agent matches it to your live software inventory in 88 seconds: which assets run the vulnerable version, which are reachable from the internet, and which are blocked by a live control, before any CVE is published.
Surface new assets, control configuration changes, and disclosed vulnerabilities as they happen.
Zafran's live activity log, watching assets, controls and threat feeds continuously. Newest first: CVE-2024-5535 in OpenSSL published to NVD, a Cloudflare WAF rule disabled on hr-portal, a new AWS instance, a node joining the Kubernetes cluster, an EDR sensor going offline and an Ivanti CVE added to CISA KEV.
Detect vulnerabilities from your software's actual components the moment a threat surfaces.
SBOM for payments-api 2.14.0: of 412 components, openssl 3.0.13, pulled in through netty-tcnative, matches the newly disclosed CVE-2024-5535. Zafran flags it from the SBOM before any scanner signature exists.
Autonomously identify which assets new threats affect every day, using threat intelligence matched against your SBOM data.
Zafran's Zero Day Agent, which runs daily at 9:00 AM. Its run history shows today's run in progress, one exposed asset on October 27, clear runs on October 24 to 26 and two exposed on October 23. Today it has pulled 7 threat feeds, found 6 zero-days, and is matching them to your assets, 1,906 of 2,418 checked so far: CVE-2026-31842 hits 3 internet-facing assets, CVE-2026-29415 hits 2, a WAF already covers CVE-2026-30977, and CVE-2026-30388 is still being checked. From here the team can create tickets or deploy a mitigation.
Use Zafran AI to ask in plain language which assets a new threat touches, and get back a list of every one that's running, reachable, and at risk in your environment.
A chat with Zafran AI. Asked whether the company is exposed to the new React2Shell vulnerability, it answers with an asset table that shows three assets running react 19.1.0 with the vulnerable code loaded at runtime: two internet-facing with an applicable risk score of 10.0 critical, and one internal at 8.5 high.
240 assets missing scan coverage or endpoint protection
Fortune 500 Insurer
Zafran helped a Fortune 500 insurer uncover 240 assets missing scan coverage or endpoint protection and map every path from its internet-facing assets into the internal network.
Fortune 500 Manufacturing
“Their differentiation was speed to an answer that I could trust.”
CISO
Prioritize and fix what is truly exploitable using risk context from your existing security tools.
