Zero Day Initiative
Zero Day Initiative (TrendAI ZDI) is Trend Micro's vendor-agnostic vulnerability intelligence program, coordinating responsible disclosure of zero-day flaws through 19,000+ independent researchers and 450+ in-house researchers, feeding proactive security filters into TrendAI Vision One for global enterprise customers.
- Company typePrivate
- Founded2005
- HeadquartersCupertino, United States
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What Zero Day Initiative does
Zero Day Initiative (ZDI), now branded as TrendAI Zero Day Initiative, is the world's largest vendor-agnostic vulnerability intelligence program and a wholly-owned division of Trend Micro (Tokyo Stock Exchange: 4704). Founded in 2005 and acquired by Trend Micro via the TippingPoint purchase in 2016, ZDI coordinates responsible disclosure of zero-day vulnerabilities through a community of over 19,000 independent researchers backed by 450+ Trend Micro researchers across 14 global threat centers. The program produces vulnerability advisories, an upcoming-advisory early warning pipeline (643 advisories pending disclosure), and the Pwn2Own competition series, and asserts 2.5x more disclosures than the next-largest program with protection an average of 90+ days ahead of vendor patches.
Technically, ZDI operates as a coordinated disclosure and intelligence layer feeding directly into TrendAI Vision One. Discovered vulnerabilities are converted into proactive security filters deployed across IPS, endpoint, and cloud workload defenses. AI augmentation appears in the form of attacker-technique-informed risk scoring, AI-driven prioritization of validated vulnerabilities, and frontier-model access via Anthropic's Claude Opus 4.7 through the Cyber Verification Program, with explicit emphasis on data lineage that keeps AI-powered decisions explainable and auditable. Pwn2Own competitions (Berlin 2026, Automotive 2026 in Tokyo) are core operational rituals that commercialize the discovery pipeline.
From a business model perspective, ZDI has no standalone revenue disclosure. Its intelligence is bundled into Trend Micro's enterprise subscription products (TrendAI Vision One, endpoint, network, and cloud workload defenses), which is the sole monetization channel; there is no direct ZDI pricing, no separate GTM, and no public API. The sole named beneficiary segment is Trend Micro's enterprise customer base, while vendor organizations participate as upstream suppliers of patches rather than paying customers. This makes ZDI effectively a feature of a much larger platform rather than an independent business, with growth in bug bounty submissions (490% YoY), expanding Pwn2Own prize pools, and vertical expansion into automotive serving as the principal forward indicators.
Zero Day Initiative firmographics
Firmographics- Name
- Zero Day Initiative
- Legal name
- TrendAI™ Zero Day Initiative™ (ZDI)
- Website
- https://zerodayinitiative.com
- Company type
- Private
- Founded year
- 2005
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- Zero Day Initiative (TrendAI ZDI) is Trend Micro's vendor-agnostic vulnerability intelligence program, coordinating responsible disclosure of zero-day flaws through 19,000+ independent researchers and 450+ in-house researchers, feeding proactive security filters into TrendAI Vision One for global enterprise customers.
- Ownership category
- akta.pro rank
Zero Day Initiative industry classification
Industry- Product category
- Vulnerability Intelligence
- NAICS
- Software Publishers (5132)
- SIC
- Services-Prepackaged Software (7372)
- akta.pro primary industry
- Vulnerability Intelligence & Exploit Prediction (HDADAHAI)
- akta.pro secondary industries
- Vulnerability Assessment & Scanning (HDADAHAA), Endpoint Vulnerability & Patch Management (HDADAEAH)
Keywords
Where Zero Day Initiative is headquartered
LocationHeadquarters
- HQ city
- Cupertino
- HQ country
- United States
- HQ region
- North America
Markets served
Zero Day Initiative business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Operations, Marketing or Sales, Others
Revenue model
- Integrated Security Intelligence: ZDI's vulnerability intelligence is embedded within Trend Micro's enterprise security product suite, providing threat and vulnerability insights that power Trend Vision One and other Trend Micro solutions. Revenue is generated through enterprise software subscriptions.
Go-to-market motion1 record
Distribution channels1 record
Marketing channels4 records
Zero Day Initiative product offering
Product offeringCore offering
Zero Day Initiative (ZDI) is the world's largest vendor-agnostic vulnerability intelligence program, coordinating responsible disclosure of security vulnerabilities discovered by 450+ internal Trend Micro researchers across 14 global threat centers and an external community of over 19,000 independent researchers. ZDI's research output feeds directly into Trend Micro's enterprise security products as proactive security filters, providing customers an average of 90+ days of protection ahead of vendor patches, and is complemented by the Pwn2Own competition series that incentivizes zero-day discovery through prize money.
Product overview
TrendAI Zero Day Initiative (ZDI) operates as the world's largest vendor-agnostic vulnerability intelligence program, combining internal research from 450+ TrendAI researchers across 14 global threat centers with contributions from an external community of over 19,000 independent researchers. The core ZDI program coordinates responsible disclosure of security vulnerabilities, feeding directly into TrendAI Vision One—a unified security platform that deploys proactive security filters across IPS, endpoint, and cloud workload defenses. Pwn2Own competitions complement the program by incentivizing vulnerability discovery through prize money. Customers gain an average of 90+ days of protection ahead of vendor patches, with 2.5x more disclosures than any competing program. The ecosystem is AI-enhanced through TrendAI's risk scoring and prioritization capabilities.
Differentiator
Problem solved
Functional benefit
Brands
- Pwn2Own: A brand of high-profile hacking competitions organized by ZDI where security researchers compete to find zero-day vulnerabilities in major software and systems.
Products and services
- TrendAI Zero Day Initiative (ZDI) Vulnerability Intelligence Program Vendor-agnostic vulnerability intelligence program that coordinates responsible disclosure of security vulnerabilities, backed by 450+ Trend Micro researchers across 14 global threat centers and 19,000+ independent external researchers. For enterprise customers consuming Trend Micro security products.
- Pwn2Own Hacking Competition Series International hacking competition series awarding prizes for demonstrated zero-day vulnerabilities in enterprise software, automotive systems, and other high-value targets. Drives researcher engagement and discovery; recent events have awarded over $1M per competition.
- ZDI Published Advisories
Quantifiable outcome
- Average 90+ days of protection ahead of vendor patches
- +3 more outcomes
Companies that use Zero Day Initiative
Customer profileNamed customers1 record
Segments2 records
Ideal customer profiles3 records
Zero Day Initiative technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
AI capability5 records
Feature3 records
Zero Day Initiative partnerships and signals
Strategic signalPartnerships
Five partnerships are on record, tiered core and minor.
- AnthropiccoreTrendAI announced collaboration with Anthropic to use Claude Opus 4.7 in security research, joining Anthropic's Cyber Verification Program which grants approved groups access to frontier AI models for defensive cybersecurity work.
- Pwn2Own Automotive PartnerscorePwn2Own Automotive 2026 will be held in Tokyo with over $3 million in prizes, featuring categories including Tesla vehicle hacking, EV charger exploits, OCPP, and automotive operating systems.
- TrendAI ResearchcoreTrendAI Research collaborates with ZDI on AI security research, including the AESIR research platform that identified critical vulnerabilities in Nvidia's Isaac GR00T robotics platform. The partnership also involves working with Anthropic's Claude Opus 4.7 through Anthropic's Cyber Verification Program for defensive cybersecurity work.
- Independent Vulnerability ResearcherscoreZDI operates a community of over 19,000 independent vulnerability researchers who submit vulnerabilities through the coordinated disclosure program. Researchers receive rewards for valid submissions and can participate in Pwn2Own competitions.
- OffensiveConminorOffensiveCon hosted Pwn2Own Berlin 2026, a major zero-day vulnerability competition. ZDI organizes Pwn2Own events at various security conferences globally.
Scale indicators6 records
Recent moves5 records
Expansion highlights5 records
Zero Day Initiative competitors and assessment
Company assessmentDirect peers
- Tenable: Tenable is a leading vulnerability management platform (Nessus, Tenable.io) that combines vulnerability scanning with research-driven threat intelligence. Comparable to ZDI's vulnerability research output, though distributed as a standalone product rather than bundled inside a parent suite.
- Qualys: Qualys provides cloud-based vulnerability management, detection, and response with its own vulnerability research team. Comparable as an enterprise vulnerability intelligence and scanning provider, though operating a SaaS platform model rather than a coordinated-disclosure community.
- HackerOne: HackerOne operates the largest independent bug bounty and vulnerability disclosure platform, connecting organizations with a global community of security researchers. Directly comparable to ZDI's coordinated disclosure and researcher-rewards model.
- Bugcrowd: Bugcrowd runs a crowdsourced vulnerability disclosure and bug bounty platform serving enterprise customers. Competes with ZDI for researcher submissions and enterprise vulnerability intelligence programs.
Broad incumbents
- Rapid7: Rapid7 offers vulnerability management (InsightVM), managed detection, and threat intelligence across a broad security portfolio. Comparable to ZDI's enterprise vulnerability intelligence role within Trend Micro's wider product stack.
- Mandiant (Google Cloud): Mandiant provides frontline vulnerability intelligence and threat research now under Google Cloud. Comparable to ZDI as a research-led intelligence source whose findings are operationalized inside a much larger parent platform (Google Cloud Security).
- CrowdStrike: CrowdStrike's Falcon platform combines endpoint protection with threat intelligence (including vulnerability and exploit data) sourced from its incident response and research teams. Comparable as a broad-incumbent platform that bundles vulnerability intelligence into a flagship enterprise product, similar to ZDI inside Trend Vision One.
- Recorded Future: Recorded Future (a Mastercard company) provides threat and vulnerability intelligence with AI-driven risk scoring. Comparable to ZDI's AI-augmented risk scoring and prioritization capability, though delivered as a standalone intelligence product rather than embedded into endpoint/network filters.
Emerging players
- Intigriti: Intigriti is a European bug bounty and vulnerability disclosure platform with a growing researcher community. Comparable to ZDI's coordinated-disclosure community model, though with a smaller footprint and primarily European enterprise focus.
- VulnCheck: VulnCheck is an emerging vulnerability intelligence platform focused on exploit prediction and prioritization. Comparable to ZDI's predictive vulnerability intelligence and AI-driven prioritization capabilities, but as a smaller, standalone vendor.
Market position
Strengths4 records
Weaknesses4 records
Competitive moat5 records
Key risks5 records
Key highlights6 records
Customer concentration
Zero Day Initiative social profiles
Digital presenceZero Day Initiative financial estimates
Financial estimateRevenue estimate
Valuation estimate
Zero Day Initiative leadership team
Management profileNumber of profiles
Zero Day Initiative funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Zero Day Initiative M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Zero Day Initiative
What does Zero Day Initiative do?
Zero Day Initiative (ZDI) is the world's largest vendor-agnostic vulnerability intelligence program, coordinating responsible disclosure of security vulnerabilities discovered by 450+ internal Trend Micro researchers across 14 global threat centers and an external community of over 19,000 independent researchers. ZDI's research output feeds directly into Trend Micro's enterprise security products as proactive security filters, providing customers an average of 90+ days of protection ahead of vendor patches, and is complemented by the Pwn2Own competition series that incentivizes zero-day discovery through prize money.
Is Zero Day Initiative a public or private company?
Zero Day Initiative is a private company. It is classified as corporate owned and is currently operating.
When was Zero Day Initiative founded?
Zero Day Initiative was founded in 2005. It employs 11 to 50 people.
Where is Zero Day Initiative based?
Zero Day Initiative is headquartered in Cupertino, United States, in the North America region.
How does Zero Day Initiative make money?
One revenue line is on record: integrated Security Intelligence.
Who are Zero Day Initiative's main competitors?
Direct peers on record are Tenable, Qualys, HackerOne and Bugcrowd. Broad incumbents are Rapid7, Mandiant (Google Cloud), CrowdStrike and Recorded Future. Emerging players are Intigriti and VulnCheck.
Does Zero Day Initiative have an API?
No public API is recorded for Zero Day Initiative.
What industry is Zero Day Initiative in?
Zero Day Initiative's product category is Vulnerability Intelligence. Its primary akta.pro industry code is HDADAHAI, Vulnerability Intelligence & Exploit Prediction, with a secondary code of HDADAHAA, Vulnerability Assessment & Scanning. Its NAICS code is 5132 and its SIC code is 7372.