ZAK is an open-source Agent Development Kit for building, deploying, and governing autonomous cybersecurity agents.
Quick Start
pip install zin-adk
# Scaffold a new agent
zak init --name "My Risk Agent" --domain risk_quant --out ./agents
# Implement agents/my_risk_agent.py → execute()
# Validate
zak validate agents/my-risk-agent.yaml
# Run
zak run agents/my-risk-agent.yaml --tenant acme
Built-in Agents
| Domain | Description |
|---|---|
risk_quant |
FAIR-inspired risk scoring for all assets |
vuln_triage |
Prioritize CVEs by severity, criticality, and exploitability |
appsec |
SAST, SCA, secrets detection, and dependency scanning |
generic |
DSL-only custom agent executor |
Key Features
- US-ADSL — Declarative YAML schema for agent definitions
- Policy Engine — 6 runtime guardrails enforced on every tool call
- Tool Substrate —
@zak_tooldecorator for safe, audited tool execution - SIF Graph — Security Intelligence Fabric for shared knowledge persistence
- Multi-tenant — Namespace isolation per tenant
- LLM Modes — ReAct reasoning with OpenAI, Anthropic, Google, or local Ollama
Installation Options
pip install zin-adk # Core + CLI
pip install "zin-adk[llm]" # + LLM providers (OpenAI, Anthropic, Google)
pip install "zin-adk[graph]" # + Memgraph/Neo4j graph backend
pip install "zin-adk[dev]" # + Dev tools (pytest, ruff, mypy)
CLI Commands
| Command | Description |
|---|---|
zak init |
Scaffold a new agent (YAML + Python) |
zak validate |
Validate a YAML agent definition |
zak run |
Execute an agent in a tenant context |
zak agents |
List registered agents |
zak info |
Show platform info |
Architecture
┌─────────────────────────────────────────────────┐
│ Your Agent (BaseAgent) │
│ define: execute() + @zak_tool │
└─────────────────────┬───────────────────────────┘
│ calls ToolExecutor.call()
┌─────────────────────▼───────────────────────────┐
│ ZAK Core Layer │
│ PolicyEngine │ AuditLogger │ AgentExecutor │
└─────────────────────┬───────────────────────────┘
│ reads/writes
┌─────────────────────▼───────────────────────────┐
│ Security Intelligence Fabric (SIF) │
│ Asset │ Vulnerability │ Risk │ Vendor │
└─────────────────────────────────────────────────┘
Enterprise Edition
Need more? The ZAK Enterprise Edition adds 19 additional agents:
AI Security, API Security, Attack Surface, Cloud Posture, Compliance, Container Security, Cyber Insurance, Data Privacy, IaC Security, IAM Drift, Identity Risk, Incident Response, Malware Analysis, Network Security, Pentest Automation, Red Team, Supply Chain, Threat Detection, Threat Intel
Plus: REST API server, platform dashboard, user management, and integrations.
Learn more at zeron.one
Documentation
Full docs: securezeron.github.io/zeron-agent-development-kit
Contributing
See CONTRIBUTING.md.
License
Apache 2.0 — see LICENSE.
Metadata
Release files for zin-adk 0.1.4
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| zin_adk-0.1.4.tar.gz | 55.5 kB | Without provenance | Details for zin_adk-0.1.4.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| zin_adk-0.1.4-py3-none-any.whl | Python 3 | none | any | Details for zin_adk-0.1.4-py3-none-any.whl |
Total release size: 125.2 kB
Release files / zin_adk-0.1.4.tar.gz
| Download URL | zin_adk-0.1.4.tar.gz |
|---|---|
| Size | 55.5 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
fc1498c0d4965113d0369a762af7c6236460cabb2685e01d879c7c43403eee6b
|
|
BLAKE2b-256 checksum How to use checksums |
97423cf99d11532ab925f61773f790625490a594a5a8dc9c7baeb7948ecdf6b0
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.2.0 CPython/3.14.2
|
Release files / zin_adk-0.1.4-py3-none-any.whl
| Download URL | zin_adk-0.1.4-py3-none-any.whl |
|---|---|
| Size | 69.7 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
cf75ff9c2d8447e31447ad55bba81735272e7fcb443f29d5da75a55c08c12725
|
|
BLAKE2b-256 checksum How to use checksums |
528c65e50d9d06b883d9d66fd4e69738e7c57c448502211784c66467b30c6f06
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.2.0 CPython/3.14.2
|
Security for zin-adk 0.1.4
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.