Zeron is a part of Google for Startups AcceleratorLearn more →
Platform ZAK Agentsagentctl Company
Solutions
By industryBy role
Resources
Resources hubBlogCustomer storiesResearch
Contact
Home/Resources/Glossary
Reference · Glossary

Cybersecurity, quantified — a glossary.

Plain-language definitions of the terms behind the Zeron control plane — cyber risk quantification, Cyber Value-at-Risk, agentic security and more.

Cybersecurity control plane

A cybersecurity control plane is a single layer that sits above every security tool an organisation runs — unifying their signals into one data model, quantifying the risk, and acting on it. It replaces a fragmented stack of ten dashboards with one source of truth. Zeron is the AI-augmented control plane for cybersecurity.

See the platform

Cyber Risk Quantification (CRQ)

Cyber Risk Quantification (CRQ) translates technical cyber exposure into financial terms — a dollar-denominated view of likely loss — so boards can weigh cyber against other business risks. Zeron’s CRQ engine, QBER, produces a loss-exceedance curve and Cyber Value-at-Risk.

The science behind QBER

Cyber Value-at-Risk (CVaR)

Cyber Value-at-Risk (CVaR) is the amount of financial loss a cyber event could cause at a given probability — the cyber analogue of financial Value-at-Risk. It turns cyber risk into a single, board-ready dollar figure that leadership can act on.

How Zeron quantifies risk

Loss-exceedance curve

A loss-exceedance curve plots the probability of exceeding each level of cyber loss, turning a single risk estimate into a full distribution. It lets leaders see not just an average, but the tail risk that matters most when setting budgets and coverage.

Explore the research

QBER

QBER is Zeron’s peer-reviewed Cyber Risk Quantification model — the engine beneath the Cyber Navigator module. It blends economic and technical inputs into a decision-ready loss-exceedance curve, and is indexed by NASA ADS & Harvard-Smithsonian (arXiv:2405.03513) and published at IEEE COMPSAC 2025.

Read the research

Agent Development Kit (ADK)

An Agent Development Kit (ADK) for cybersecurity is a framework to build, run and govern AI security agents that reason, decide and act on your stack within explicit policy guardrails. Zeron’s ADK is ZAK — where the control plane acts, with every step written to a tamper-evident, SCF-mapped audit ledger.

Meet ZAK

AI agent governance

AI agent governance is the practice of discovering, securing and auditing every AI agent an enterprise runs, so autonomy never outruns oversight. Zeron governs agents with agentctl — one place to see and control every agent operating across the organisation.

Explore agentctl

Governed AI agents

Governed AI agents are autonomous security workers that reason, decide and act on your stack within explicit policy guardrails, with every action written to a tamper-evident audit ledger. Zeron builds and runs them through ZAK and governs them with agentctl.

See ZAK agents

Cyber risk management platform

A cyber risk management platform unifies signals from your security tools into one model, measures the risk, and helps you act on it. Zeron goes further than reporting — it prices risk in dollars (Cyber Value-at-Risk) and runs governed AI agents, so it doesn’t just describe risk, it reduces it.

See the platform
See it in action

Cyber risk, priced and acted on.

Book a demo Explore the platform
Hello there!
Access the full technical paper detailing graph-based AI reasoning for cyber risk decisions.
Download the Whitepaper