No sections match your search.
Getting Started
Zero-Agent gives your security and identity teams a control plane for every AI agent and non-human identity in your environment. This guide walks you from account creation to your first governed agent in under an hour.
Quick start
- Create your workspace and invite your security team.
- Connect a cloud account or identity provider to begin discovery.
- Review the auto-generated inventory of AI agents and NHIs.
- Assign owners and apply your first governance policy.
Platform Overview
The Zero-Agent platform is organized into three layers: discovery, governance, and runtime enforcement. Together they provide continuous visibility and control across your agentic estate.
Core concepts
- Discovery — continuously inventory agents, NHIs, and their credentials.
- Governance — assign ownership, apply policy, and score risk.
- Runtime — enforce least privilege on every agent action in real time.
Deployment Guide
Zero-Agent deploys as a lightweight, agentless collector that reads from your cloud and identity APIs. No inline proxies are required to get started with discovery.
# Install the Zero-Agent collector helm repo add zero-agent https://charts.zero-agent.ai helm install za zero-agent/collector \ --set cloud.provider=aws \ --set workspace.id=YOUR_WORKSPACE_ID
Integrations
Connect Zero-Agent to the identity providers, cloud platforms, AI providers, and security tools you already run. Integrations extend governance without replacing your existing stack.
- Identity: Microsoft Entra, Okta, CyberArk, SailPoint.
- Cloud: AWS, Azure, Google Cloud.
- AI: OpenAI, Anthropic, and self-hosted models.
- Security: SIEM, SOAR, and Slack notifications.
API Documentation
The Zero-Agent REST API lets you query inventory, manage policies, and stream events programmatically. Authenticate with a workspace API token passed as a bearer header.
# List all discovered AI agents curl https://api.zero-agent.ai/v1/agents \ -H "Authorization: Bearer $ZA_TOKEN"
FAQs
Discovery and governance are fully agentless — they read from your cloud and identity APIs. Optional runtime enforcement can be deployed inline where you need real-time control.
Data is encrypted in transit and at rest, and can be pinned to a specific region to meet your data residency requirements.
Most teams connect their first cloud or identity provider and see a live agent inventory within an hour.