Questions we get asked.

No. Zafe talks to you on WhatsApp, in plain language, and only asks you what it can't decide on its own.

You request the free assessment. In one day we look at the company from outside and, if you want, connect to Microsoft 365 read-only. We show you everything in 30 minutes.

Not for the assessment: we only use public information until you sign. Then there's a 30-day pilot in which Zafe works for real, but only looks. Any change goes through you.

For companies of 10 to 250 people, in any sector. There are versions designed for industry, health, hospitality, finance, energy, software and public bodies.

It watches emails, accounts, computers and online services, 24 hours a day. It only handles on its own what can be undone. For the rest, it asks you, with one button on WhatsApp.

Since it only touches what can be undone, a mistake can be undone. The AI never authorises itself and every action goes on record, with who approved it.

Yes. A response team takes on what the AI can't decide, at any hour, and there's someone to talk to you at the start and for the monthly report.

No. Zafe works with what you already have and confirms the antivirus is on, on every computer.

In the European Union, with EU-only mode and a log that can't be erased.

The assessment is free. After that, the Essential plan costs €360 a month and Complete €420 a month, for companies of up to 100 people. A Zafe Attack test costs €1,900, or an extra €150 a month on top of the Complete plan. Prices exclude VAT. Public bodies have their own prices.

No. The monthly fee is fixed and there's no lock-in. If you leave, you take your data and we uninstall everything the same day.

On the Complete plan, Zafe prepares the evidence NIS2 asks for. It isn't a certification: complying with NIS2 remains the company's responsibility, and Zafe gives you the evidence to show it.

We test the company like an attacker, only with signed authorisation: you choose the targets, the hours and who can stop the test. Each flaw is fixed and tested again until it passes.

We only test in the agreed window. If something looks risky, we stop and ask you. And whoever you choose can stop the test at any moment.

It tells customers and suppliers that the company is being watched 24 hours a day, was tested with authorisation in the last 90 days and had its backup restore tested in the last 3 months. It isn't a certification, and it stops being valid if the company no longer meets the requirements.