Zero-Shot Security
Zero-Shot Security is a US-based cybersecurity company offering AI-driven MITRE ATT&CK mapping for security analysts. Its Threat-Led Defense platform combines an Enterprise SaaS tier, a free Community Edition, and the NARC AI engine for extracting adversary procedures from unstructured intelligence.
- Company typePrivate
- Founded2023
- HeadquartersWilmington, United States
- Headcount1–10
- GTM typeB2B
- OfferingSoftware
What Zero-Shot Security does
Zero-Shot Security is a cybersecurity company that offers AI-driven MITRE ATT&CK mapping for security analysts, enabling threat-led defense through procedure-level visibility into adversary behavior. According to firmographic data, it is headquartered in Wilmington, United States, was founded in 2023, and operates with 1–10 employees (website: zeroshot.io).
The company's product portfolio, as evidenced in source material, centers on a Threat-Led Defense platform delivered in two tiers — a free Community Edition for research and tracking of adversary TTPs, and a paid Enterprise Edition offering continuous ATT&CK assessment, coverage mapping, defensive stack analysis, third-party integrations (EDR/XDR/SIEM/CTI/BAS), and prioritized remediation via a proprietary Tidal Confidence Score. The platform is built around a 37,000+ capability registry enriched through product integrations and structured ATT&CK-aligned data. NARC AI, a proprietary AI engine, transforms unstructured intelligence (CTI reports, blogs, IR documents, pentest outputs, red teaming reports, free text) into ATT&CK-aligned Procedures, automating extraction that previously required hours of analyst time. The platform also offers services including Custom Threat Profiling, Coverage Mapping, and MITRE ATT&CK Product Mapping for solution providers.
The business model combines a freemium SaaS tier (Community) with an Enterprise paid tier plus professional services, targeting enterprise security teams seeking to operationalize MITRE ATT&CK and optimize defensive stack ROI. Customer evidence is testimonial-based without named logos. Notably, source data also references a separate venture capital entity — "Zero Shot" fund — founded in 2026 by three former OpenAI employees and two VCs, targeting $100M with a $20M first close; the relationship between this fund and the cybersecurity company is not clarified in available data and may represent data aggregation across related entities.
Zero-Shot Security firmographics
Firmographics- Name
- Zero-Shot Security
- Legal name
- Zero Shot
- Website
- https://www.zeroshot.io
- Company type
- Private
- Founded year
- 2023
- Operating status
- Operating
- Headcount range
- 1–10 employees
- Short description
- Zero-Shot Security is a US-based cybersecurity company offering AI-driven MITRE ATT&CK mapping for security analysts. Its Threat-Led Defense platform combines an Enterprise SaaS tier, a free Community Edition, and the NARC AI engine for extracting adversary procedures from unstructured intelligence.
- Ownership category
- akta.pro rank
Zero-Shot Security industry classification
Industry- Product category
- Threat Intelligence Software
- NAICS
- Computer Systems Design Services (541512)
- SIC
- Services-Computer Programming Services (7371)
- akta.pro primary industry
- Deception Technology & Threat Hunting (HDADAGAI)
Keywords
Where Zero-Shot Security is headquartered
LocationHeadquarters
- HQ city
- Wilmington
- HQ country
- United States
- HQ region
- North America
Markets served
Zero-Shot Security business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Technology or R&D, Personnel, Marketing or Sales, Operations, Infrastructure
Revenue model
- Investment Returns: The fund generates returns through equity investments in AI startups, focusing on early-stage companies in enterprise task automation and AI-enhanced robotics sectors.
Distribution channels1 record
Marketing channels1 record
Zero-Shot Security product offering
Product offeringCore offering
Zero-Shot Security delivers an AI-driven threat-led defense platform that maps adversary tactics, techniques, and procedures (TTPs) to the MITRE ATT&CK framework for cybersecurity analysts and security operations teams. The platform ingests unstructured threat intelligence and converts it into structured ATT&CK-aligned procedures using its NARC AI engine, enabling continuous assessment of defensive stack coverage, residual risk calculation, and prioritized remediation. Offerings span a free Community Edition, a paid Enterprise Edition, and accompanying professional services such as custom threat profiling and coverage mapping.
Product overview
Tidal Cyber offers a threat-led defense platform organized as a unified platform with two edition tiers (Community and Enterprise) plus a standalone AI engine called NARC. The core platform maps adversary behavior to MITRE ATT&CK, enabling organizations to assess, organize, and optimize cyber defenses based on relevant threats. Community Edition provides free research and tracking capabilities, while Enterprise Edition adds continuous assessment, coverage mapping, defensive stack optimization, and third-party integrations. NARC AI is an AI-powered extraction engine that transforms unstructured threat intelligence into structured ATT&CK-aligned procedures, connecting groups, campaigns, and software to accelerate threat-led defense.
Differentiator
Problem solved
Functional benefit
Products and services
- Tidal Cyber Enterprise Edition
Companies that use Zero-Shot Security
Customer profileSegments1 record
Ideal customer profiles3 records
Zero-Shot Security technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration5 records
AI capability6 records
Zero-Shot Security partnerships and signals
Strategic signalScale indicators2 records
Recent moves7 records
Expansion highlights4 records
Zero-Shot Security competitors and assessment
Company assessmentDirect peers
- Cymulate: Exposure validation platform offering BAS, attack surface management, and threat intelligence mapped to MITRE ATT&CK for continuous security control validation.
- Tidal Cyber: Closest direct competitor: offers a threat-led defense platform built on MITRE ATT&CK procedures, a Community/Enterprise tiering model, and a Tidal Confidence Score for stack optimization — directly overlapping with the subject company's value proposition.
- AttackIQ: Breach and attack simulation platform that validates defensive controls against MITRE ATT&CK techniques, targeting the same security operations and detection engineering buyers as the subject company.
- SafeBreach: BAS vendor that runs continuous attack simulations mapped to ATT&CK, giving security teams a measure of control effectiveness — directly comparable to the subject's threat-led validation use case.
- Picus Security: Continuous security validation platform that simulates adversary TTPs and quantifies detection/prevention coverage — overlapping strongly with the subject company's coverage mapping and stack optimization thesis.
Emerging players
- Anomali: Threat intelligence and security analytics platform that ingests feeds and correlates threats to ATT&CK, serving a similar SOC and threat analyst customer base.
- Scythe: Adversary emulation platform with a focus on purple teaming and purple team assessments, often used alongside threat-informed defense programs targeting the same buyer personas.
- XM Cyber: Attack path management and exposure analytics platform that helps organizations prioritize remediation based on attacker behaviors — adjacent to the subject's residual risk and coverage mapping approach.
- ThreatConnect: Threat intelligence operations platform that operationalizes CTI feeds and adversary data, often integrating with ATT&CK — comparable in the threat intel processing and prioritization layer.
Broad incumbents
- CrowdStrike: Endpoint security leader that has built ATT&CK-based detection content and threat intelligence into its Falcon platform, representing the broad incumbent path for the same buyer.
Market position
Strengths3 records
Weaknesses3 records
Competitive moat4 records
Key risks4 records
Key highlights5 records
Customer concentration
Zero-Shot Security social profiles
Digital presenceZero-Shot Security financial estimates
Financial estimateRevenue estimate
Valuation estimate
Zero-Shot Security leadership team
Management profileNumber of profiles
Zero-Shot Security funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Zero-Shot Security M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Zero-Shot Security
What does Zero-Shot Security do?
Zero-Shot Security delivers an AI-driven threat-led defense platform that maps adversary tactics, techniques, and procedures (TTPs) to the MITRE ATT&CK framework for cybersecurity analysts and security operations teams. The platform ingests unstructured threat intelligence and converts it into structured ATT&CK-aligned procedures using its NARC AI engine, enabling continuous assessment of defensive stack coverage, residual risk calculation, and prioritized remediation. Offerings span a free Community Edition, a paid Enterprise Edition, and accompanying professional services such as custom threat profiling and coverage mapping.
Is Zero-Shot Security a public or private company?
Zero-Shot Security is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was Zero-Shot Security founded?
Zero-Shot Security was founded in 2023. It employs 1 to 10 people.
Where is Zero-Shot Security based?
Zero-Shot Security is headquartered in Wilmington, United States, in the North America region.
How does Zero-Shot Security make money?
One revenue line is on record: investment Returns.
Who are Zero-Shot Security's main competitors?
Direct peers on record are Cymulate, Tidal Cyber, AttackIQ, SafeBreach and Picus Security. Emerging players are Anomali, Scythe, XM Cyber and ThreatConnect. CrowdStrike is listed as a broad incumbent.
Does Zero-Shot Security have an API?
No public API is recorded for Zero-Shot Security.
What industry is Zero-Shot Security in?
Zero-Shot Security's product category is Threat Intelligence Software. Its primary akta.pro industry code is HDADAGAI, Deception Technology & Threat Hunting. Its NAICS code is 541512 and its SIC code is 7371.