What Zest is
Zest provides contextual IaC fixes for your deployed cloud infrastructure. The vendor site is zestsecurity.io. This profile is an entry in the oneNorma directory, not a vendor landing page.
What Zest covers
Zest is in the catalog for these capabilities. Categories: IaC.
How to evaluate Zest in a security program
Use Zest as a stack candidate, not as diligence evidence. The oneNorma score for Zest is 4.5/10 (percentile 27). If the real gap is in IaC, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what zestsecurity.io publishes. Contrast it with pentesting and Security Cloud & Compliance.
