Customer reviews

“I see the benefits of Zafran Security as soon as we got our first major integration done. We started seeing benefits within the first three to four months, and since then we have been dialing it in with additional integrations.”

“I appreciate the weekly insights Zafran provides, which include critical topics for networks and IT security, allowing us to evaluate which insights apply to our environment. The organization score feature is valuable to keep the leadership team updated on how our infrastructure fares security-wise. The applicable risk level versus base risk level feature is beneficial because prior to Zafran, we only used the base risk level, but now understand that risk depends on the asset itself. Zafran is an excellent tool.”

“Integration with security tools to determine the real risk. This is one of the key differentiators: CVSS and EPSS are not always completely accurate for every organization. By connecting directly to these tools, Zafran is able to determine if a security tool alerts or blocks on exploits for an open vulnerability. If the system is protected with a block mode prevention capability in a security tool, the applicable risk is reduced. This can provide more measured and change-managed patching and remediation. We are continuing to add new integrations as we bring them into the company, including a Breach & Attack (BAS) tool. While you have options on what tools to integrate with, the more you integrate, the better it is to determine Applicable Risk.”

“The compensating controls consideration of Zafran brings a new light to TVM that we’ve never had before. It is unique compared to other Continuous Threat Exposure Management (CTEM) platforms where vulnerability risk is adjusted based off protections in place for our assets. When we were going to market for a solution, this feature alone drew our attention. Integrating with our existing security stack and encompassing all of this data together has been game changing.”

“What I appreciate the most about Zafran Security is that it is awesome, and the ability to identify truly critical vulnerabilities that needs to be addressed is a standout feature. We saw benefits from Zafran Security almost immediately after deploying it.”

“The features we have found most valuable in Zafran Security are the Mitigations and Exposure Tracker modules, as they significantly enhance our risk management processes. The Mitigations module is particularly beneficial because it identifies impactful risk-reducing measures that can be implemented by simply enabling minimal features. This efficiency allows us to bolster our security posture without substantial changes to our existing processes or infrastructure. It’s incredibly useful for prioritizing actions that yield maximum security benefits with minimal effort, ensuring that our resources are utilized where they make the most difference.”

“With Zafran Security, it integrates with your security controls, allowing you to take that risk score and reduce it based on the controls in place or increase the risk based on different factors, such as if the issue is internet reachable or if there’s an exploit in the wild.”

“Zafran has become an indispensable tool in our cybersecurity arsenal.”

“Overall, we have seen about 87% reduction of the number of vulnerabilities that require urgency to remediate, specifically the number of criticals.”

“With Zafran, we are able to see the real risk of a vulnerability on our environment with our security tools.”

“Zafran helps us cut through the noise by highlighting truly critical vulnerabilities; those with either insufficient or no mitigating controls in place.”

“With Zafran Security, we can quickly identify if we’re using that platform or vendor and check the software version running. It gives us insight into compensating controls and identifies which systems should be targeted first for remediation.”

“With Zafran, we’ve moved beyond arbitrary scoring to a more strategic, context-aware assessment of vulnerabilities, significantly bolstering our capacity to protect our assets and reduce risk enterprise-wide.”

“Zafran has significantly reduced the amount of time to identify which assets are more vulnerable to specific threat actors.”

“Zafran has reduced the number of urgent critical vulnerabilities by accurately highlighting those that need immediate attention, allowing our security team to focus on truly high-risk issues.”

“The tool has also cleaned up our vulnerability database and centralized all of our data sources, eliminating the need to jump between multiple tools.”

“Reports generated through Zafran are detailed and actionable, equipping our analysts with the insights needed to communicate risks effectively across different stakeholders within the organization.”

“Zafran’s user-friendly interface and comprehensive reporting capabilities make it accessible to our entire security team.”

“Zafran handles our data efficiently and scales well with our needs, allowing us to manage our extensive asset portfolio seamlessly.”

“Overall, my experience with Zafran has been excellent. The platform provides a single pane of glass for vulnerability and exposure management, making it much easier to understand our risk posture and focus on the issues that truly matter. Particularly, the agents work very well and provide timely alerts, helping us quickly identify new exposures and prioritize remediation efforts.”

“I would strongly recommend Zafran to any organization that is looking to mature its vulnerability management program from patching based and CVSS, to one that is truly a risk-based approach.”

“Zafran is closing the gap in the vulnerability prioritization world. We took our Exposure Management Program to another level with runtime and compensating controls being among the key factors to get the true residual risk.”

“Zafran is excellent to work with. They improved or built integrations. We have everything integrated, have a clear single pane of glass view of our vulnerabilities and are excited about their autonomous workflows.”

“In this current age of AI, knowing what to focus on is key. Where should your team prioritize their efforts? Zafran delivers that and more as it layers on your security controls to give you the true business risk.”

“It’s saving my team time and making it so I don’t have to have someone constantly monitoring data feeds for new vulnerabilities and trying to determine if they are relevant to our organization.”

“The platform significantly reduces alert fatigue by prioritizing vulnerabilities based on exploitability, asset criticality , and threat context rather than relying solely on severity scores.”

“The platform provides clear visibility into attack paths and compensating controls, helping security teams better understand real-world risk and make informed remediation decisions. Strong Threat Intelligence, Cloud integration, and risk based prioritization enable more effective security decision making . The Agent, specifically Zero-day agent is valuable for quickly understanding exposure and accelerating response to emerging vulnerabilities.”

“Having a single pane of glass was only made possible due to incredible response from the Zafran team and creating deep integrations with our current tools”

“Zafran’s risk based prioritization and attack path analysis have enabled us to move from a volume driven vulnerability management approach to a more proactive and risk focused security program resulting in faster remediation and better overall security outcomes.”

“What I like most about Zafran is the ability to create our own agent and get timely notifications about zero-day vulnerabilities. It correlates those vulnerabilities with our enviourment and provides a risk-based view which helps us prioritize remediation efforts more effectively.”

“Zafran is excellent in risk prioritization and visibility, reduces noise and improves remediation focus. AI Agents turn exposure data into actionable insights. Asset discovery-provides granular details. Integrations are smooth including cloud. Zafran’s AI is good helpful feature.”

“The agents work extremely well and provide timely alerts on emerging risks which are being exploited in the wild.”

“My experience with zafran is positive. The platform is easy to use, provides good visibility into our security environment, and helps us identify and prioritize risks effectively. The team also has been very responsive and helpful when needed.”

“With Zafran, we’ve got a clear view into what matters, structured workflows to act on it, and fewer risks slipping through the cracks.”

“In a world where you can not know when and where the next Threat exploitation will catch you, you need a Bubble Wrap. Zafran is our ‘bubble wrap’, it helps us protect our environment from the exploitation of vulns while keeping the business up and running. You can not patch it all at once!”

“By integrating with the security controls configurations we can identify what is working and what is not. Zafran enables us to evaluate our security tech stack, identify gaps, make informed decisions, and ultimately improve the ROI on our tools.”

“Zafran is tackling vulnerabilities from a hacker’s perspective. They add a true layer of risk mitigation through compensating controls. Most importantly, they help us understand if our controls are effectively implemented and how we can use them to improve our protection.”

“Zafran has proven to be a force multiplier. It helped us mitigate a lot of risk that we knew that we had in our environment.”

“Zafran provides us with clarity, control, and confidence.”

“Zafran gives us clear visibility into the vulnerabilities that matter most and helps us focus our efforts where they’ll have the biggest impact. It fits well into our existing workflows and has made our remediation process faster and more efficient.”

“Zafran’s staff truly feel like a part of our team, it’s easy to tell they care about your organization just as much as you.”

“Zafran has been instrumental in accelerating the evolution of our vulnerability management program. By correlating compensating controls, CVEs, and remediation guidance, the platform enables risk-based patch prioritization and has significantly improved the efficiency of our remediation workflow.”