FAQ

Your Questions, Answered

Getting started

What is ZEV?: ZEV is a security platform you can delegate your whole security program to. It runs vulnerability scanning, risk assessments, internal audits, policy documents, and security training on a schedule — and certified experts review the results before they reach you. It's built so non-technical founders and business owners can hand security off entirely: you approve the big decisions, ZEV handles everything in between.
Do I need security expertise to use ZEV?: No. The platform automates the routine work and our certified experts handle the parts that need a human — like verifying a risk assessment or running a penetration test. You don't need a security team of your own.
How do I get started?: Start with a free scan — no card required. Sign up at zev.systems, point ZEV at a domain you own, and you'll get a findings report in minutes. Upgrade to a paid plan whenever you're ready.
Is there a free version?: Yes. The Free plan includes one external scan per month on our basic profile, plus video-based security training — free forever, no card required.

What plans do you offer?: Five tiers: Free (₮0), Zev Scan (₮290,000/mo), Zev Secure (₮5,500,000/yr), Zev Comply (₮22,000,000/yr), and Enterprise (custom). Each tier adds scanning capacity and unlocks more of the platform. See the full comparison.
What's included in each plan?: Free — 1 external scan/month, basic scan profile, and video training.
Zev Scan — 2 external scans/month, basic + full scan profiles, and weekly/monthly scheduling.
Zev Secure — 40 external + 10 internal scans/yr, one expert-verified risk assessment and one internal audit per year, auto-generated policies, and module-based training with certificates.
Zev Comply — 100 external + 50 internal scans/yr, two risk assessments and two audits per year, static penetration testing, disaster-recovery testing, and the full training library.
Enterprise — custom scan volumes and configuration, manual penetration testing, fully-managed IT, and a dedicated expert with an SLA.
Can I change or cancel my plan?: Self-serve plans (Scan, Secure, and Comply) can be upgraded, downgraded, or cancelled at any time — there's no long-term lock-in. Enterprise and managed engagements run on agreed annual terms.
Can I see it before subscribing?: Yes. Anyone can run a free scan, and you can book a demo for a guided walkthrough of Secure, Comply, or Enterprise — or to scope a managed engagement.

Which compliance frameworks do you support?: ISO 27001, PCI-DSS, SOC 2, and HIPAA — or a custom framework you define.
How do risk assessments and internal audits work?: On Secure and above, the owner triggers an assessment, your team answers control questions with evidence through their task list, and ZEV's pipeline scores completeness and flags every gap. One of our experts then reviews and signs off before it's marked ready — so the result is audit-ready, not just auto-generated.
Can ZEV create our security policies and documents?: Yes. ZEV generates customizable policies and security documentation mapped to your framework, with expert document review, version history, and evidence collection built in.

What can I scan?: Web applications, IP addresses and subnets, and other internet-facing assets you own. Secure and above add internal (authenticated) scanning of systems behind your perimeter.
Do I have to verify that I own the assets?: Yes. For legal and ethical reasons you must confirm you own — or have explicit authorization to test — every target before scanning. Verification is done by domain email, a DNS record, or a file upload.
What's in a scan report?: Each scan produces a report with the vulnerabilities found, CVSS-based severity, a plain-English remediation for each, and mapping to your compliance framework — so you know what to fix first.
What's the difference between scanning and penetration testing?: Scanning continuously identifies known weaknesses; penetration testing has experts actively try to exploit them. ZEV does both — automated scanning on every plan, static pentesting on Comply, and manual expert penetration testing on Enterprise.

How does security training work?: Training is delivered as modules — each bundles video lessons, a quiz, and a completion certificate. Free and Scan plans include the video lessons; Secure and Comply add quizzes, certificates, and completion tracking for your records and auditors.

Is my data private and secure?: Every organization's data is isolated, encrypted in transit and at rest, and protected with least-privilege access and audit logging. We operate to ISO 27001 and PCI-DSS practices, and your assessments and reports are visible only to your team and the experts assigned to your account. See our Privacy Policy for detail.
Do I need to sign an NDA?: Some engagements — manual penetration testing, custom assessments, and managed services — may involve a mutual NDA to protect sensitive information on both sides.

Can ZEV manage our servers and IT too?: Yes, on a custom Enterprise contract. Our engineers take over server, network, and system administration while your security stays automated — backed by a dedicated expert and an SLA. Book a demo to scope it.

We're happy to help you figure out the right fit for your team.