Fundraising Fox

Zip

New York City, US · 27 employees on LinkedIn · 3 known investors

Zip provides managed security and compliance services for small companies without dedicated IT teams, handling device management, identity protection, endpoint security, and compliance audits end-to-end. The company deploys and operates security controls across devices and accounts, monitors threats 24/7, and helps customers pass security audits and vendor questionnaires.

Also known as Zip Security · ZipSec

Founders & leadership

GM
Gabbi MerzFounder

Investors · 3

Company profile

researched Aug 2026

Zip Security (zipsec.com) sells a software-first managed security program that selects, deploys, and continuously enforces security controls for organizations that lack large in-house security teams. The product covers device management (laptop and phone enrollment, configuration, encryption, remote lock and wipe, security policy enforcement across macOS, Windows, iOS, and Android), identity protection (multi-factor authentication, single sign-on, access management), endpoint security (CrowdStrike deployment with threat prevention, ransomware protection, and 24/7 monitoring), compliance and audit support (SOC 2, HIPAA, customer security reviews, policy documentation, evidence and questionnaire support), employee onboarding and offboarding (secure device setup, account provisioning, access revocation), and data protection (data loss prevention, cloud app visibility, access controls).

Operationally, Zip describes a three-step approach: establishing control of accounts and devices via MDM (Intune, Jamf) and identity providers (Google, Microsoft, Okta); deploying a security baseline including device encryption with key escrow, two-factor authentication, and consistent antivirus/CrowdStrike rollout; and running automated detection and response, including flagging unusual logins, blocking malware, and isolating compromised devices. Zip purchases the underlying software licenses on the customer's behalf and presents a single dashboard that keeps the integrated tools in sync, while customers retain direct access to their Jamf, Intune, and CrowdStrike licenses. The company states customers can go from kickoff to a fully operational program in 14 days.

Business model

Zip describes itself as a software-first company that also provides white-glove support from an in-house team of security experts. It acts as a single partner to procure, deploy, configure, and manage a customer's enterprise security program, buying the underlying software licenses for technologies such as CrowdStrike, Jamf, and Intune and layering its own web application, opinionated controls, and 24/7 support on top. The materials describe this as a hybrid software and support model intended to deliver security quickly at a competitive price.

Zip resells and manages the underlying security software licenses it procures for customers alongside its own application and managed support; specific pricing terms are not disclosed in the available sources.

Traction

The company publishes customer case studies including Ambience Healthcare, which it says scaled from 15 to more than 150 employees while managing Intune, CrowdStrike, and its compliance stack through Zip; BD Emerson, which reduced client CrowdStrike licensing costs by 40%; Pull Systems, which deployed an MDM and endpoint security stack in under two weeks ahead of a TISAX audit; Pine Park Health, which secured a mobile clinical workforce to HIPAA standards; and Observa, where automated EDR and MDR integrations blocked a malvertising campaign. Zip's demo page displays a 4.9 out of 5 review rating, and the company cites thousands of real-world deployments behind its recommendations.

Latest developments

Zip announced a strategic partnership with Galvanick, presented as securing the full stack, and published recent guidance content on security maturity and mobile device management. In April 2024 a Business Wire item quoted Zip's Josh Zweig on a collaboration with Ambience Healthcare aimed at healthcare organizations.

Full profile — market position, technology, go-to-market

Market position

Zip operates in the managed security and compliance segment serving small and lean-IT organizations, positioning as an execution and enforcement layer that works alongside compliance monitoring platforms and best-of-breed tools rather than replacing them. Industry commentary cited by the company frames its approach as codifying expert knowledge needed to run an enterprise cybersecurity program in a layman-friendly interface and making security affordable for smaller organizations.

Zip positions itself against tool sprawl and complex configuration by combining procurement, deployment, and ongoing enforcement of security controls in one interface designed for users without a security background. It distinguishes itself from compliance monitoring tools such as Vanta and Drata, which it characterizes as read-only checks, arguing that Zip and the software it integrates actually execute and enforce the underlying controls; it presents itself as complementary to those products. Customers retain full native access to the integrated Jamf, Intune, and CrowdStrike licenses.

Technology

The platform integrates with identity providers (Google Workspace, Okta, Azure AD/Entra ID), MDM systems (Jamf, Microsoft Intune), and EDR (CrowdStrike), unifying them behind one dashboard with single-click workflows for tasks such as account recovery, encryption, password policy enforcement, USB controls, and cross-platform CrowdStrike deployment on macOS and Windows. Automated EDR and MDR integrations handle detection and response, and CrowdStrike detections can be investigated inside the Zip application. A one-click compliance feature deploys the controls required for audit readiness.

Go-to-market

Zip markets through its website with a 30-minute demo booking flow that assesses a prospect's current security posture, outlines what deployment would look like, and produces a deployment plan executable in 14 days. It also publishes customer case studies, blog content on security and MDM topics, and has drawn coverage in outlets including SecurityWeek, MSP Today, and Forbes Technology Council, plus commentary from investor General Catalyst.

Zip targets three buyer profiles: virtual CISOs and managed service providers securing multiple client organizations, IT managers running security for a single lean team, and companies with no IT function at all. Named customers and references include Ambience Healthcare, Pine Park Health, Pull Systems, BD Emerson, Observa, Cherre, and Conductor AI, spanning healthcare, real estate technology, and industrial sectors.

Compiled by commissioned research from 8 cited public sources — announcements, filings, and press listed under research sources below.

Key figures

latest reported
Customer review ratingJan 20254.9/5
Standard deployment time to fully operationalJan 202514 days

Company-reported or press-reported figures, each dated to when it was claimed — not independently audited.

Competitors · 10

by search overlap
Sentinel One74 shared keywordsSentinelOne provides an AI-powered cybersecurity platform for enterprises that integrates endpoint protection, threat detection, and incident response capabilities. The company serves large enterprises, including many Fortune 500 organizations, to protect against cyber threats at scale.
Check Point Software54 shared keywordsCheck Point Software Technologies is a cybersecurity company providing security products and solutions. This page is its investor relations section, containing annual reports, SEC filings, financial results, and corporate governance information.
Secureframe49 shared keywordsSecureframe provides a compliance automation platform that helps enterprises maintain security and compliance posture with common controls mapping across multiple frameworks. The platform uses AI and automation to reduce manual compliance work for organizations managing standards like SOC 2, ISO 27001, and HIPAA.
Sprinto46 shared keywordsSprinto is a compliance and governance, risk, and compliance (GRC) platform that automates security compliance across 200+ frameworks such as SOC 2, ISO 27001, HIPAA, GDPR, and PCI DSS. It serves companies from Series A to enterprise, covering compliance, vendor risk, AI governance, and audit preparation through integrations with cloud, identity, HR, and SaaS systems.
Vanta42 shared keywordsVanta provides a security and compliance platform that helps companies improve their security posture and demonstrate compliance to auditors. The platform serves enterprise customers across industries seeking to manage security controls, governance, and regulatory compliance.
Crowdstrike39 shared keywordsCrowdStrike provides an AI-native cybersecurity platform that unifies endpoint, identity, cloud, SaaS, and AI protection to detect and stop breaches for enterprise organizations. It combines automated response with human-led security operations including managed detection and response, threat hunting, and security services.
Palo Alto Networks37 shared keywordsPalo Alto Networks provides cybersecurity platforms and services to protect organizations' digital infrastructure across cloud, network, and security operations. The company serves enterprise organizations, governments, financial institutions, utilities, and healthcare providers globally.
Netezza37 shared keywordsIBM is a global technology company whose business spans enterprise software (including Red Hat, HashiCorp, and Confluent), IT infrastructure such as mainframes, servers, and storage, and IT consulting services. The company is also investing heavily in quantum computing and AI-based enterprise offerings, including its Lightwell open-source software security clearinghouse and the Anderon quantum wafer foundry.
strongDM36 shared keywordsStrongDM provides privileged access management and identity governance for infrastructure across cloud, on-premises, and hybrid environments. The platform centralizes access control, enforces zero standing privileges, and enables just-in-time provisioning for teams managing critical systems.
Ninjaone33 shared keywordsNinjaOne provides a SaaS platform that unifies endpoint management, IT automation, and security for IT teams. The product centralizes patching, monitoring, and management across large fleets of endpoints.

Companies competing with Zip for the same Google search keywords, organic and paid, via search-intersection analysis.

Timeline · 2

launches, deals, and filings
Apr 2024
Zip Security and Ambience Healthcare collaboration covered by Business Wire

A Business Wire item dated April 3, 2024 quotes Zip's Josh Zweig on teaming up with Ambience Healthcare to equip healthcare organizations with security strategies.

source ↗

Jan 2024
Zip Security and Galvanick announce strategic partnership

Zip Security announced a strategic partnership with Galvanick, described on the company blog as 'Securing the Full Stack'.

source ↗

Dated company events from announcements, filings, and press; legal rows summarize public dockets and regulator releases.

Research sources · 8

primary sources listed
  • Zipzipsec.com · web

8 public sources were cited for this profile; the first-party ones are listed here.

Frequently asked questions

What does Zip do?
Zip Security deploys, manages, and enforces security, IT, and compliance programs for companies with limited internal IT staff.
Who founded Zip?
Zip was founded by Gabbi Merz.
Who are Zip's investors?
Zip's investors include Ballistic Ventures, Mantis Capital, South Quad.
Where is Zip headquartered?
Zip is headquartered in New York City, US.