ZAYA

What ZAYA does

ZAYA is a privately held IoT security company headquartered in Cambridge, United Kingdom, that builds security software and containerization technology for microcontrollers and embedded systems. Its two flagship products are ZAYA Secure OS — a PSA Certified Level 1 secure operating system that combines an integrated hypervisor, security manager, and OS kernel to create a Trusted Execution Environment — and ZAYA Microcontainers, a containerization technology that extends isolation and independent deployment to MMU-less microcontrollers, a segment where conventional container approaches are not viable. The technology stack supports Arm (including TrustZone for Armv8-m) and RISC-V architectures and includes sub-components such as a RISC-V Security Monitor, Secure Element Integration with PSA Level 3 isolation, and real-time safety and security monitors targeting functional-safety use cases.

The company's business model is B2B software licensing and certification-oriented services, selling into IoT device manufacturers, Secure Element vendors, and Automotive OEMs through direct enterprise sales, with channel leverage from partnerships across the Arm and RISC-V International ecosystems. Go-to-market is event-driven, anchored by annual presence at Embedded World in Nuremberg and co-marketing through partners such as Andes Technology (AndeSentry framework), Silex Insight (eSecure RoT module), and Blaitek Limited (a reference BL8 RISC-V chipset design win). Pricing is quote-based and not publicly disclosed, and the company operates with 11–50 employees, is founder-led by CEO Murat Cakmak, has no disclosed outside funding, and has no parent company or subsidiaries.

Name

ZAYA

Legal name

ZAYA Tech Ltd.

Website

https://zayatech.com

Company type

Private

Founded year

2016

Operating status

Operating

Headcount range

11–50 employees

Short description

ZAYA is a Cambridge, UK-based IoT security software company that provides a PSA Certified Level 1 secure operating system and microcontainer technology for microcontrollers and embedded systems, serving IoT device manufacturers, secure element vendors, and automotive OEMs across Arm and RISC-V architectures.

Ownership category

akta.pro rank

Product category

IoT Embedded Security Software

NAICS

Software Publishers (5132), Computer Systems Design Services (541512)

SIC

Services-Computer Integrated Systems Design (7373)

akta.pro primary industry

Secure Elements & Trusted Execution Processors (TPM/TEE/Crypto MCUs) (HDAHAJAK)

akta.pro secondary industries

Secrets Management (Passwords, API Keys, Tokens) (HDADAFAD), Access Control & Identity Systems Integration (Badge, Biometrics, Mobile) (BPAKAGAB)

Keywords

• Embedded security software
• IoT security solutions
• Microcontainer technology
• Secure operating system
• Embedded systems security

Headquarters

HQ city

Cambridge

HQ country

United Kingdom

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Technology or R&D, Personnel, Marketing or Sales, Operations

Revenue model

1. Software Licensing: ZAYA Secure OS and Microcontainer technology are licensed to OEM vendors and chipmakers. The company provides secure development environments including Secure Operating Systems, secure middleware, cloud management, and advanced data processing services.
2. Security Certification Services: Provides certification-ready development environment that helps vendors achieve PSA and SESIP certifications. Enables cost-effective modular IoT Security Assessments for IoT Vendors through their pre-certified OS components.

Go-to-market motion2 records

Distribution channels4 records

Marketing channels5 records

Core offering

ZAYA develops and licenses ZAYA Secure OS, a PSA Certified Level 1 secure operating system for microcontrollers and embedded systems, along with ZAYA Microcontainers, a containerization technology that brings isolated execution environments to MMU-less microcontrollers. The products are licensed to OEM vendors, chipmakers, and IoT device manufacturers across Arm, RISC-V, and Secure Element architectures, enabling secure boot, secure updates, real-time monitoring, and certification-ready development for IoT, Automotive, and Secure Element markets.

Product overview

ZAYA offers security solutions and containerization technology for microcontrollers and embedded systems through two core products: ZAYA Secure OS and ZAYA Microcontainers. ZAYA Secure OS is a secure operating system that creates isolated environments via an integrated Hypervisor, Security Manager, and OS Kernel, following PSA Security guidelines and achieving PSA Certified Level 1 certification. ZAYA Microcontainers brings containerization to MMU-less microcontrollers, enabling isolated execution environments for native applications, microservices, virtual machines, and guest operating systems. These core products support Arm and RISC-V architectures and integrate with Secure Elements, providing solutions for IoT, Automotive, and connected device markets.

Differentiator

Problem solved

Functional benefit

Brands

• ZAYA Secure OS: Secure operating system designed according to IoT security certifications and regulations, providing isolated protected space and Trusted Execution Environment (TEE).
• ZAYA Microcontainers
• ZAYA μContainers

Products and services

• ZAYA Secure OS

Quantifiable outcome

• Drastically cuts vendor investment with no need for dedicated security and certification teams, infrastructure, or ongoing maintenance
• +3 more outcomes

Named customers1 record

Segments5 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration3 records

Feature10 records

Partnerships

Six partnerships are on record, tiered core and minor.

• Blaitek LimitedcoreTechnology or Integration · 20 March 2023Joint achievement of Industry-First PSA Level 1 Certification on single-core RISC-V-powered BL8 Chipset series using ZAYA RISC-V Security Monitor/Secure-OS and ZAYA Secure Microcontainers. Blaitek is a leading RISC-V powered WiFi/BT/BLE/Zigbee Module Provider.
• Silex InsightcoreTechnology or Integration · 3 May 2022Partnership arrangement where ZAYA μContainers are added to Silex Insight's eSecure Root of Trust module for enhanced security level. The combination offers built-in PSA level 3 isolation with critical security firmware and assets isolated from custom security extensions. Silex Insight is a leading provider of cryptographic IP solutions.
• Andes TechnologycoreStrategic or Co-development Partner · 26 April 2022ZAYA Secure OS and MicroContainers integrated with AndesCore RISC-V processors to offer certifiable TEE security. ZAYA solutions became part of the AndeSentry security framework from Andes Technology, providing security solutions for the RISC-V ecosystem. Andes is a leading RISC-V CPU IP vendor and Founding/Premier member of RISC-V International.
• ArmcoreTechnology or IntegrationZAYA is an Arm IoT Security Partner offering secure and rich software solutions for Armv7-m and TrustZone for Armv8-m architectures. ZAYA provides PSA Root of Trusts, Secure OS to protect and control Armv7-m and Armv8-m powered devices. Present in Arm Partner Ecosystem catalog.
• RISC-V InternationalcoreStrategic or Co-development PartnerZAYA is an official RISC-V Strategic Partner and Strategic member of RISC-V International. Specializes in delivering secure and robust software solutions tailored for RISC-V architecture including RISC-V Security Monitor, TEE, and Hypervisors for RISC-V powered Microcontrollers.
• IoT Security FoundationminorStrategic or Co-development PartnerMember of IoT Security Foundation. Collaborates on IoT security initiatives and events such as webinars. TechWorks Awards nomination acknowledged the IoT Security Foundation's recognition of ZAYA's efforts.

Scale indicators4 records

Recent moves6 records

Expansion highlights6 records

Broad incumbents

• Arm: Arm owns the TrustZone architecture underpinning much of ZAYA's Arm-side value proposition and ships its own security IP/reference software. A broad incumbent whose platform decisions shape ZAYA's addressable opportunity.
• Infineon Technologies: Infineon is a leading secure element and MCU vendor (OPTIGA family, PSoC, AURIX) with embedded security IP for IoT and automotive. Broad incumbent whose silicon-level security overlaps with ZAYA's secure element integrations.
• NXP Semiconductors: NXP is a major MCU/secure element vendor with its own EdgeLock security subsystems and automotive-grade TEEs. Broad incumbent competing indirectly through integrated security in silicon.

Direct peers

• ProvenRun: ProvenRun develops ProvenCore, a formally verified secure OS and TEE for connected vehicles, IoT, and industrial devices. Highly comparable as a PSA-certified secure OS targeting automotive and embedded markets.
• Sequitur Labs: Sequitur Labs builds security and IP-protection frameworks for IoT and edge devices, including EmSPARK Security Suite for Arm TrustZone-based MCUs. Comparable to ZAYA's microcontainer approach for embedded TrustZone environments.
• wolfSSL: wolfSSL provides embedded TLS/crypto libraries (wolfSSL, wolfBoot, wolfSSH) used widely in MCUs and IoT devices. Comparable to ZAYA as a security software layer for resource-constrained embedded systems.
• Trustonic: Trustonic provides Trusted Execution Environments (TEE) and embedded security for connected devices and IoT, including automotive. Directly comparable to ZAYA as a TEE/secure OS vendor targeting resource-constrained devices and OEMs.

Emerging players

• Timesys: Timesys offers embedded Linux, BSPs, and security/compliance tooling for IoT edge devices, including vulnerability management. Adjacent overlap with ZAYA's secure OS/certification focus on embedded.
• Andes Technology: Andes is a leading RISC-V CPU IP vendor whose AndeSentry framework embeds ZAYA Secure OS. Comparable as a RISC-V security ecosystem player; a current partner but also a potential in-house competitor.
• Silex Insight: Silex Insight provides cryptographic IP and secure Root of Trust modules (eSecure) for embedded/IoT devices, and integrates ZAYA Microcontainers. Comparable as an embedded security IP vendor and ecosystem partner.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks7 records

Key highlights7 records

Customer concentration

• Xx.com/zayaltd
• LinkedInlinkedin.com/company/zayatech

Compliance4 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about ZAYA