External enrichment
Confirmed means matched to a public authoritative registry. Claimed means the vendor or its listing states it, not yet cross-checked. A framework not shown was not found in any source we hold, which is not evidence against it. Not listed means a scoped registry check found no match for this vendor's domain: a No is a scoped registry check, not a compliance judgment. Confidence bands: 95% domain-verified, 90% registry-checked, 80% self-attested, 70% weak signal. Self-attested items marked “vendor's site” are gathered from the vendor's own website and are not verified by us.
3 agents
Browse all 3 agents in the registry →
Zafran AIR is the fast-start Threat Exposure Management SKU built for enterprises under 10,000 employees. Connect your CSPM, infrastructure scanner, and EDR in minutes. Prepopulated Exposure Trackers, including the Mythos Tracker, surface real exposure to the latest high-profile threats immediately. Flat-fee, online-terms purchase. No MSA, no deployment overhead, no waiting.
Zafran Autonomous Workflows eliminates the manual grind of vulnerability management - deduplication, exploitability validation, owner routing, and remediation scripting - all done automatically.
Zafran Discover delivers continuous, agentless vulnerability scanning by reusing the EDR agents you already have deployed - no new agent, no scheduled scan windows, no blind spots.
