--- title: "ZioSec FAQ | Voidhawk, ZioSec Offense & Services" description: "Answers about ZioSec, Voidhawk application and API defense, ZioSec Offense, deployment choices, offensive evidence, and getting started." url: https://ziosec.com/faq --- # Questions, answered Product capabilities, deployment choices, and the security expertise behind ZioSec. ## ZioSec and our approach **What does ZioSec do?** ZioSec specializes in AI agent pentesting. We offer Voidhawk for application and API defense, ZioSec Offense for continuous agent testing, and services: forward deployed engineering for AI transitions, pentesting engagements, and AI security consulting. **How does building attacking agents establish defensive expertise?** We engineer agents that plan attacks, adapt to a target, and exploit vulnerabilities. Building those agents teaches us how they reason, where their weaknesses are, and how their objectives can be disrupted. We apply that expertise to Voidhawk, using our offensive agents to train and validate defenses and inform responses to malicious agentic traffic within the defended environment. **Do I need to operate AI agents to use Voidhawk?** No. Voidhawk is for teams defending connected applications and APIs as well as teams deploying AI agents. An attacker can use AI against an ordinary web application. Security, platform, and infrastructure teams can evaluate Voidhawk around the systems and traffic they already operate. ## Voidhawk **Is Voidhawk available today?** Contact our team to scope a Voidhawk evaluation. Start by observing copied CDN request and response traffic, then choose whether to enable enforcement per site and action. **What does Voidhawk look for?** Voidhawk connects clients by behavior and TLS fingerprint, identifies actors and intent, and reports what reached the application. It examines request structure, endpoint and field behavior, actor history, and response evidence to identify exploitation. **Where does Voidhawk run, and where is traffic processed?** A worker runs on your CDN and copies requests and responses asynchronously to Voidhawk cloud for analysis. Your request path stays the same, and responses never wait on a Voidhawk verdict. Discuss traffic scope and data handling during deployment planning. **Can I evaluate Voidhawk before enabling blocking?** Yes. Observe mode gives actor, intent, and outcome visibility from copied requests and responses without enforcement. When ready, enable scoped rule pushes through Cloudflare, Fastly, or AWS controls. Optional worker enforcement covers actions native rules cannot express. ## ZioSec Offense **What does ZioSec Offense include?** ZioSec Offense lets teams operate security across an AI agent fleet. Teams inventory agents, run continuous campaigns with bespoke attack trees, set per-agent policy, route reproducible findings to owners, and track risk and audit evidence. Its autonomous adversaries test the agent’s architecture, tools, data access, and trust boundaries, while its API connects validation to existing workflows. **Can our team operate continuous testing?** Yes. Your team operates ZioSec Offense and controls campaign scope, schedules, policies, and findings. Validation runs continuously or on change as models, prompts, tools, and permissions evolve. The API brings those capabilities into your pipelines. Expert-led scoped pentests are also available through optional AI Red Teaming services. **How are offensive tests controlled?** Your team defines which agents, tools, and data classes are in scope through the platform’s campaign and policy controls. Destructive actions are simulated or approval-gated, with rate limits, a stop control, and an audit log. Those boundaries are established before attacks run. **What evidence does a red-team test produce?** Findings include severity, reproduction steps, attack classification, relevant framework mappings, and remediation guidance. Evidence supports engineering, security review, and governance workflows. Our methodology and compliance pages explain the classification and mapping approach; testing evidence does not by itself certify compliance. **Is there an API?** Yes. The ZioSec Offense API accepts an agent endpoint and returns offensive testing results and an evidence packet. It supports teams embedding agent validation in CI, security products, and vendor-risk workflows. This is the offensive testing API described at /api. ## Getting started **How do I start with ZioSec Offense?** Book a platform demo to explore fleet inventory, attack campaigns, policy, findings, and reporting for your environment. Discuss API access if you want to automate validation in your own workflows. An optional expert-led pentest starts at $10,000, with the fee 100% credited toward an annual ZioSec Offense subscription if you continue. **How do I explore a Voidhawk design partnership?** Contact our team with your CDN, the applications and APIs you defend, and your data handling requirements. We will scope traffic copies, observe mode, and an evaluation that lets your team review actors, intent, and outcomes before enabling enforcement. **Do you provide consulting as well as products?** Yes. Services include forward deployed engineering support for AI transitions, expert-led AI agent pentesting engagements including voice agents, and AI security consulting: threat modeling, architecture and policy review, secure agent design, and incident readiness. ## Explore the products - [Voidhawk](/voidhawk) - [Voidhawk deployment](/voidhawk/deployment) - [ZioSec Offense](/ai-red-teaming) - [Our approach](/approach) - [Consulting and advisory](/services) ## Still have a question? Tell us what you need to defend or validate. We will connect you with the right product or engagement. [Talk to our team](/demo) | [Explore our approach](/approach)