What Zip Security does

Zip Security is a New York-based, venture-backed cybersecurity company that delivers a unified IT security orchestration platform for small and mid-sized businesses that lack dedicated security teams. The platform layers on top of best-in-class third-party tools — CrowdStrike for endpoint detection and response, Jamf and Microsoft Intune for mobile device management, Okta/Google/Microsoft for identity, and Google Chrome Enterprise for browser management — and orchestrates them through a single dashboard that deploys, configures, and continuously enforces security controls across device, identity, and compliance domains. Zip maps advisory compliance frameworks (SOC 2, HIPAA, NIST 800-171, PCI-DSS, ISO 27001, TISAX) to executable control configurations and provides continuous posture visibility with drift remediation, targeting a "fully operational security stack in 14 days" deployment model.

The company's product surface spans modular offerings: Device Management, Identity and Access Management, Endpoint Security, Compliance and Audits, Employee Onboarding/Managed IT and Security Operations, Chrome Browser Management, and (as of June 2026) an AI-powered Data Loss Prevention module for Google Workspace that scans Drive sharing history for publicly exposed files. Zip also resells integrated third-party services, most notably Managed Detection and Response (MDR) through CIR. The founders — Josh Zweig (CEO) and Gabbi Merz (CTO/Co-founder) — are former Palantir engineers who encoded government-grade security operations expertise into the platform's defaults and automation workflows.

Zip generates revenue through four streams: recurring subscription licensing of the Zip platform, professional services tied to a 14-day onboarding package, resale of third-party Managed Detection and Response services, and procurement/resale of best-in-class third-party software licenses (CrowdStrike, Okta, Jamf, etc.). Pricing is quote-based with annual billing under a Master Services Agreement. The go-to-market is hybrid: a sales-led direct motion ("Talk to us / Get a quote") for SMB and mid-market buyers, a self-serve product tour (Navattic-powered) for inbound evaluation, content marketing and SEO for top-of-funnel demand generation, co-branded webinars with flagship partners such as CrowdStrike, and a Certified Advisor Partner channel program for vCISOs and MSPs (exemplified by BD Emerson, which manages security for 40+ client companies via Zip). Total disclosed funding is approximately $21.2M across a $7.7M seed round (Nov 2023, led by General Catalyst) and a $13.5M round (July 2025, led by Ballistic Ventures), with the company operating with 11-50 employees from its New York City headquarters.

Name

Zip Security

Legal name

Zip Security, Inc.

Website

https://zipsec.com

Company type

Private

Founded year

2022

Operating status

Operating

Headcount range

11–50 employees

Short description

Zip Security provides a unified IT security orchestration platform for SMB and mid-market companies, layering on top of CrowdStrike, Jamf, Intune, and Okta to deploy and continuously enforce device, identity, and compliance controls in 14 days. It sells primarily through direct sales and a vCISO/MSP Certified Advisor Partner channel.

Ownership category

akta.pro rank

Headquarters

HQ city

New York

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure

Revenue model

1. Subscription Software Licensing: Recurring subscription fees for the Zip Security platform governed by a Master Services Agreement; customer pays non-refundable fees per Order Form, billed monthly with annual or multi-year renewal terms.
2. Professional Services (Onboarding & Deployment): Implementation, configuration, and deployment services priced via Order Form/SOW, including the 14-day onboarding package, with a 30-day workmanlike-performance warranty.
3. Managed Detection & Response (MDR) Resale: Zip resells third-party Managed Detection & Response services (e.g., CIR) bundled into customer Order Forms; fees paid in advance with the MDR provider as a third-party beneficiary.
4. Third-Party Software Licensing Resale: Zip procures and licenses best-in-class security tools (CrowdStrike, Okta, Jamf, etc.) on behalf of customers; e.g., BD Emerson reportedly reduced client CrowdStrike licensing by 40% through Zip's procurement.

Pricing tiers

Go-to-market motion4 records

Distribution channels4 records

Marketing channels6 records

Core offering

Zip Security delivers a unified IT security and compliance orchestration platform that deploys, configures, and continuously enforces security frameworks, policies, tools, and controls across device management (Intune/Jamf), endpoint security (CrowdStrike), identity & access management (Okta, Google, Microsoft), compliance frameworks (SOC 2, HIPAA, NIST, PCI, ISO 27001, TISAX), Chrome browser management, and AI-powered Data Loss Prevention. The platform targets SMB and mid-market companies without dedicated security teams and vCISO/MSP partners, taking customers from zero to a fully operational security stack in approximately 14 days under a subscription Master Services Agreement, with bundled procurement of best-in-class third-party tools and integrated MDR services.

Product overview

Zip Security offers a single unified IT security platform — rather than a collection of separate products — that is layered on top of a customer's existing security stack (CrowdStrike, Jamf, Intune, Okta, Google Workspace, Microsoft) and orchestrates them through modular capabilities: Device Management, Identity & Access Management, Endpoint Security, Compliance & Audits, Employee Onboarding / Managed IT & Security Operations, Chrome Browser Management, and the AI-Powered Data Loss Prevention module for Google Workspace. The platform also resells integrated third-party services, most notably Managed Detection & Response (MDR), and ships a dedicated vCISO/Advisor Partner Program for vCISOs and MSPs managing multiple client environments. Together these modules deploy, configure, and continuously enforce security controls so customers reach a fully operational security posture in approximately 14 days.

Differentiator

Problem solved

Functional benefit

Products and services

• Zip Security Platform Unified IT security platform for SMB and mid-market companies that deploys, configures, and continuously enforces security frameworks, policies, tools, and controls across device management (Intune/Jamf), endpoint security (CrowdStrike), identity and access management (Okta, Google, Microsoft), compliance frameworks (SOC 2, HIPAA, NIST, PCI, ISO 27001, TISAX), Chrome browser management, and AI-powered Data Loss Prevention. Sold under a recurring subscription Master Services Agreement, with bundled procurement of best-in-class third-party tools and optional integrated MDR services.
• Managed Detection & Response (MDR) Third-party Managed Detection & Response service resold through Zip, delivered by partner CIR (Counter Incident Response). Installs endpoint sensors, monitors telemetry, performs investigation, and executes response actions such as host isolation, process termination, IP blocking, and artifact deletion under defined Threat Response Modes (Collaborate Mode and Authorize Mode). Available to Zip customers as an integrated add-on, with fees paid in advance.
• AI-Powered Data Loss Prevention (DLP) for Google Workspace AI-driven Data Loss Prevention solution for Google Workspace that automatically discovers, assesses, and remediates publicly exposed files in Google Drive. Uses metadata analysis and AI-generated risk assessments to evaluate exposure, scans up to 180 days of sharing history, and enables one-click revocation of public access directly from the Zip interface. Extends the Zip Security platform into AI-native data protection for Google Workspace customers.

Quantifiable outcome

• Up to 80% reduction in security workload (Pine Park Health case)
• +6 more outcomes

Named customers10 records

Segments8 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration9 records

AI capability2 records

Feature7 records

Partnerships

Twelve partnerships are on record, tiered flagship, minor and core.

• GalvanickflagshipStrategic or Co-development Partner · 10 June 2025Strategic partnership announced June 10, 2025 to deliver unified cybersecurity across IT (Zip) and operational technology (Galvanick). Provides coordinated visibility and response across corporate IT and industrial OT environments, addressing the IT/OT gap where a compromised corporate laptop can pivot to production systems. Quote attributed to Josh Steinman (Galvanick CEO) and Josh Zweig (Zip CEO).
• Ambience Healthcare (Co-Authored Whitepaper)minorGTM or Marketing Partner · 3 April 2024Co-authored whitepaper partnership announced April 3, 2024 to help healthcare organizations assess security risks. Announced via Business Wire. Ambience Healthcare is also a Zip customer.
• CrowdStrikeflagshipTechnology or IntegrationCrowdStrike endpoint detection and response is deployed on every device managed by Zip. Zip integrates CrowdStrike as its enterprise-grade EDR for real-time threat prevention, ransomware protection, and 24/7 monitoring. Co-marketing includes the Zip × CrowdStrike Threat Intelligence Briefing webinar (July 23, 2026) featuring CrowdStrike's Counter Adversary Operations team.
• OktaflagshipTechnology or IntegrationOkta is one of Zip's supported identity providers for MFA, single sign-on, and access management. Zip integrates with Okta (alongside Google Workspace and Microsoft Azure Active Directory) as the centralized login layer for Step 1 of its security maturity model.
• JamfflagshipTechnology or IntegrationJamf is Zip's primary Apple device management integration (alongside Microsoft Intune). Zip layers automated policy deployment, Jamf Compliance Editor enforcement, and unified dashboard control on top of Jamf for macOS fleets.
• Google (Workspace & Chrome Enterprise)flagshipTechnology or IntegrationGoogle Workspace is integrated as an identity provider and as the target of Zip's new AI-powered Data Loss Prevention solution for Google Drive (launched June 10, 2026). Zip also centrally manages Chrome browser configurations, extensions, and updates via Chrome Enterprise Core integration.
• Microsoft (Intune / Azure AD)flagshipTechnology or IntegrationMicrosoft Intune is one of Zip's primary MDM integrations (alongside Jamf) for Windows device management. Microsoft Azure Active Directory / Entra ID is supported as a centralized identity provider for SSO and access management.
• BD EmersonflagshipImplementation/ SI/ Consulting PartnerBD Emerson is a Certified Advisor Partner and the most prominent vCISO/reseller case study. Manages security for 40+ client companies via Zip, reportedly cutting client deployment time by 60% and saving clients $200K+ per year on compliance. Drew Danner (Managing Director/CEO) is a public spokesperson for the partner channel.
• vCISOs and MSPs (Certified Advisor Partner program)flagshipChannel Partner/ Reseller/ DistributorZip's 2026 Certified Advisor Partner program enables vCISOs and MSPs to deliver Zip's full security platform across multiple client engagements without becoming a full MSP. Targets advisory firms seeking to scale recurring security revenue.
• CIR (Counter Incident Response, MDR Provider)flagshipTechnology or IntegrationCIR provides Managed Detection & Response services resold by Zip under the MSA's Integrated Third-Party Offerings Exhibit. CIR is a third-party beneficiary of the MSA, provides Threat Response Modes (Collaborate Mode, Authorize Mode), and is referenced in multiple case studies (e.g., Observa malware incident).
• Auth0 (Okta)coreTechnology or IntegrationAuth0 is used by Zip as a third-party sub-processor to store and manage Google account authentication data when customers log in to Zip via Google OAuth.
• Amazon Web Services (AWS)coreTechnology or IntegrationAWS is listed as a third-party sub-processor hosting Zip Security's customer databases in the United States.

Scale indicators12 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• Vanta: Vanta is a leading automated compliance and security posture platform for SMB/mid-market, mapping controls for SOC 2, HIPAA, ISO 27001, and more. Highly comparable to Zip's compliance & audit module, though Zip differentiates via deeper orchestration across MDM/EDR/IAM tools.
• Drata: Drata is an automated compliance and security monitoring platform competing with Vanta and targeting similar SMB SaaS and tech customers. Comparable to Zip on continuous compliance evidence collection and audit readiness, with less emphasis on device/identity orchestration.
• Secureframe: Secureframe offers compliance automation (SOC 2, HIPAA, PCI, ISO 27001) for SMB and mid-market, similar buyer profile and frameworks to Zip. Competes head-to-head on the compliance side while Zip differentiates by bundling device/identity orchestration.
• JumpCloud: JumpCloud is a unified directory, device management, and identity platform targeted at SMB and mid-market IT teams. Closely aligned with Zip's IT-manager buyer persona and unified-dashboard value proposition.
• Huntress: Huntress delivers managed cybersecurity (EDR, MDR, identity threat detection) purpose-built for SMB and the MSP channel. Highly comparable to Zip on SMB cybersecurity delivery and partner-led go-to-market, with deeper managed SOC capabilities.
• Auvik: Auvik is a cloud-based network management and monitoring platform purpose-built for MSPs managing multiple client environments. Comparable to Zip's Certified Advisor Partner program in targeting vCISOs/MSPs and scaling advisory practices.
• Blackpoint Cyber: Blackpoint Cyber provides MSP-focused cybersecurity including MDR, endpoint protection, and compliance enablement. Comparable to Zip on the SMB-via-MSP distribution motion and bundled endpoint + compliance value prop.

Broad incumbents

• CrowdStrike: CrowdStrike is the enterprise-grade endpoint security platform that Zip deploys on every managed device. As a broad incumbent, CrowdStrike's expanding Falcon platform overlaps with Zip's endpoint and compliance posture features and represents the most strategic competitive threat.

Emerging players

• ConductorOne: ConductorOne is an identity governance and access management platform focused on automating user provisioning and offboarding. Closely aligned with Zip's IAM and employee onboarding/offboarding modules for mid-market.
• Liongard: Liongard offers MSP-focused IT management, configuration monitoring, and automation across Microsoft 365, Google Workspace, and infrastructure stacks. Adjacent to Zip's MSP partner channel and unified IT visibility pitch.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat6 records

Key risks6 records

Key highlights7 records

Customer concentration

• LinkedInlinkedin.com/company/zipsec

Compliance7 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles2 records

Subsidiaries1 record

Funding overview

Funding rounds2 records

Investors6 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Zip Security