ZAFE SOFTWARE · FOR SOFTWARE HOUSES, AGENCIES AND ONLINE SHOPS

Tested before it ships.

Zafe watches your websites, APIs and online shops 24 hours a day, finds libraries with known flaws before they reach production and prepares the reporting the Cyber Resilience Act already asks for.

Library with a flaw16:42

Stopped in yesterday's deploy. Safe version proposed.

Checkout with a flaw11:52

Fix ready, waiting for your yes.

Fix proposed11:05

Pull request opened with the safe version.

CRA report ready16:31

24-hour early warning, for you to sign.

SBOM up to date
Libraries updated
Secrets out of the code
CRA report in 24 hours
APIs watched
Shops tested
Clients informed
SBOM up to date
Libraries updated
Secrets out of the code
CRA report in 24 hours
APIs watched
Shops tested
Clients informed

Not another scanner. Someone closing what the scanner finds.

HOW IT WORKS
01SEES.

Websites, APIs, shops and each project's libraries. It knows what's in production and notices when a new flaw appears.

14 projects · 1,120 libraries · 9 shops
02FIXES.

It opens the fix with the safe version, tests it and leaves it ready for you to approve. It never deploys on its own.

31 fixes approved in October
03TELLS.

It asks on Slack with one button. If the flaw is being exploited, it prepares the 24-hour and 72-hour CRA reports.

1 question a week, on average
A DAY AT A SOFTWARE HOUSE WITH ZAFE

Everything that happens, properly explained.

Zafe Softwareon Slack · now

The image library in the 9 shops has a flaw being exploited. I've already prepared the fix and it passed the tests. Shall I deploy today at 7pm?

Yes, at 7pmNot yetTalk to a technician

Yes, at 7pm

Done. Shop updated at 19:04, with no downtime. I've told the client and the CRA report is ready.

OCTOBER31fixes approved, none broke production
19 Oct: flaw in the image library
FLAW BEING EXPLOITED9 shops
FoundMon 10:12
FixedMon 19:04
24-hour CRA report ready for you to sign.
B82 / 100
from D to B in a month
YOUR DATAStays in the European Union.
EU-only mode
A log that can't be erased
Never deploys on its own
WHY IT EXISTS
“The flaw is rarely in the code you wrote. It's in a library nobody sees.”

Zafe knows what's in production in each project, finds the flaw first and tells the client before they read about it in the news.

Start free. Stay if you want.

HOW IT STARTS
  1. 011 day

    Free assessment

    We look at your websites and shops from outside and read each project's dependencies, read-only. We show you everything in 30 minutes.

  2. 0230 days

    Pilot

    Zafe works for real, only looking. Any fix goes through you.

  3. 03no lock-in

    With you

    A fixed monthly fee. If you leave, you take your data and we uninstall everything the same day.

Essentialwebsites, APIs and online shops · SBOM · Slack · monthly report
€290per month · up to 10 projects
Completeeverything in Essential · CRA reporting · authorised tests · seal for your clients
€590per month · up to 40 projects

Prices exclude VAT. See the prices for every area

See what an attacker sees of your code.

Free · in one day · nothing to install · read-only until you sign