Zafran AIR is the fast-start Threat Exposure Management SKU built for enterprises under 10,000 employees. Connect your CSPM, infrastructure scanner, and EDR in minutes. Prepopulated Exposure Trackers, including the Mythos Tracker, surface real exposure to the latest high-profile threats immediately. Flat-fee, online-terms purchase. No MSA, no deployment overhead, no waiting.
Security teams at mid-size enterprises face the same machine-speed threat landscape as Fortune 500 organizations - AI-accelerated exploits, CVEs weaponized within 24 hours of disclosure, and boards demanding answers about the latest high-profile threats - but without the staffing, budget, or time for a full vulnerability management platform transformation.
Zafran AIR is purpose-built for this reality. It is a scoped version of the Zafran Threat Exposure Management platform designed to answer one urgent question for leadership: are we exposed to the latest high-profile threats, and what are we doing about it?
AIR deploys in days with just three integrations - CSPM, infrastructure scanner, and EDR. The platform comes prepopulated with curated Exposure Trackers, including the Mythos Tracker, which surface real exposure to high-profile CVE clusters the moment your integrations connect. No manual threat research required. No spreadsheets. No cross-referencing disconnected tools by hand.
For validated exposures, AIR triggers compensating controls directly: endpoint isolation through your EDR, and cloud misconfiguration remediation through your CSPM, all from a single interface. Asset and integration scoping (10,000 assets max, three integration categories) keeps onboarding fast and eliminates the deployment overhead of a full VM program.
Transacts on flat-fee, online terms - no MSA negotiation, no procurement cycle, no delay. And because AIR runs on the same underlying platform as full Zafran, customers upgrade to standard SKUs at renewal with no redeployment, no data migration, and no net-new onboarding.
Highlights
Same-day exposure visibility with zero setup overhead. Connect your CSPM, infrastructure scanner, and EDR in minutes. Prepopulated Exposure Trackers, including the Mythos Tracker for AI-accelerated threats, surface real exposure data immediately with no manual threat research or custom configuration required.
Answer the board question fast. Zafran AIR is built for enterprises under 10,000 employees that need a defensible, evidence-based answer to "are we exposed to the latest high-profile threats?" without the deployment overhead, procurement cycles, or staffing requirements of a full VM platform transformation.
Flat-fee, online-terms purchase with a clear upgrade path. AIR transacts without MSA negotiation or custom procurement. Capped at 10,000 assets with three integration categories. Upgrades seamlessly to full Zafran at renewal with no redeployment, no data migration, and no new onboarding required.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Zafran AIR is the fast-start Threat Exposure Management SKU for enterprises that need to answer one urgent board question: are we exposed to the latest high-profile threats? Connect 3 tools, see real exposure data the same day.
Zafran AIR uses a single contract dimension billed by units. This is the fast-start Threat Exposure Management SKU. You commit to a set unit quantity under a contract term. Pricing scales with the number of units you purchase, not with separate tiers or instance sizes. There are no add-ons or usage-based charges here. The dimension covers connecting your existing tools to reveal real exposure data. To size your purchase, decide how many units your environment requires, then commit to that quantity for the contract period.
Top-of-mind questions for buyers
What counts as one unit for billing, and how do I estimate how many I need?
The dimension description does not define what a single unit maps to in terms of assets, users, or connected tools. To size your purchase accurately, confirm the unit definition with the vendor. The listing does state you connect three tools to begin seeing exposure data.
What is included when I connect my tools, and how does the platform gather exposure data?
You link your existing security tools through API connections, with no new agents to deploy. The platform aggregates, normalizes, and de-duplicates vulnerability and asset data into one view. It then applies your risk context to reveal which vulnerabilities are actually exploitable across your hybrid environment.
Do I commit to a fixed unit quantity upfront, or does my cost change with usage?
This is a contract dimension. You commit to a set unit quantity for the contract term. Your cost scales with the number of units you purchase, not with hourly or usage-based metering. There are no separate tiers or instance sizes that adjust the price.
Request a private offer to receive a custom quote.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Zafran Exposure Management proves 90% of critical vulnerabilities are not exploitable in your environment, then neutralizes the rest through the EDR, WAF, and firewall you already own.
Zafran Discover delivers continuous, agentless vulnerability scanning by reusing the EDR agents you already have deployed - no new agent, no scheduled scan windows, no blind spots.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.