Microsegmentation · Zero Networks
Microsegmentation and containment, with Zero Networks
Growth Hub distributes Zero Networks across Africa. Zero Networks automates microsegmentation, so that a compromised machine or account cannot move freely through the network. Organisations in South Africa, Nigeria, Kenya, Morocco and Egypt evaluate and buy it through our reseller partners, with technical support from us and from Zero Networks.
The problem
Once inside, most networks let an attacker go anywhere
Most internal networks are flat: almost any machine can reach most others, and privileged accounts can log in nearly everywhere. Ransomware and intrusions spread along exactly those paths.
Microsegmentation has long been the answer, but done by hand it means months of mapping traffic and writing rules, which is why so many projects stall.
Where it tends to show up:
- Ransomware readiness, where the question is how far an infection could spread
- Privileged and service accounts that can log in far more widely than their work requires
- The boundary between IT and OT, where an incident on one side should not reach the other
- Legacy and unpatchable systems that cannot be fixed quickly and need to be isolated instead
- Remote access for staff and third parties
- Audit or regulatory findings about network segmentation
What Zero Networks does
What the technology helps you accomplish
-
Segment automatically
Zero Networks observes real network traffic during a learning period, generates segmentation rules from it, and tests them before they are enforced. The rules come from how the network actually behaves rather than from manual mapping.
-
Restrict privileged and service accounts
Identity segmentation limits where admin and service accounts can log in to what their work requires, and the same approach extends to other non-human accounts.
-
Require MFA where it matters
Just-in-time MFA can be applied at the network layer to privileged protocols such as RDP, SSH, SMB and WinRM, so stolen credentials alone are not enough to move.
-
Cover OT, IoT and remote access
Segmentation extends to OT and IoT environments, and Zero Networks also provides remote access for staff and third parties.
Evaluation
What a proof of value involves
-
Agree scope and success criteria
With the reseller partner, you choose the systems, segment or site to start with, and what containment needs to prove.
-
Learn
Zero Networks observes traffic in learning mode, so nothing is blocked while it builds a picture of what talks to what.
-
Review and test the rules
Together we review the policy it generates and test it before anything is enforced.
-
Decide on next steps
Licensing is arranged through the reseller partner, who also plans the wider rollout.
The reseller partner leads every proof of value. Growth Hub and Zero Networks provide the technical support behind it.
Who does what
Your partner leads. We and Zero Networks support.
-
Your reseller partner
Leads the evaluation, the commercial relationship and the implementation, and delivers the remediation services the findings create.
-
Growth Hub
Distributes Zero Networks across Africa. We provide technical validation and deployment support during evaluations, train and enable our reseller partners, and order back-to-back against the partner's order.
-
Zero Networks
Provides the platform, product expertise and vendor technical support during the evaluation.
Growth Hub holds the relevant Zero Networks sales and technical certifications and meets Zero Networks' distributor requirements.
Our distribution rights cover Africa. Our active markets are South Africa, Nigeria, Kenya, Morocco and Egypt.
Getting started
How to begin
-
If you are an end user
Tell us where you operate and what you need to find out. We will connect you with a reseller partner in your market to arrange an evaluation, purchase and implementation. If you already work with a reseller, tell us who, and we will work through them.
-
If you are a reseller
If you want to offer Zero Networks to your customers, we work with up to three partners per vendor in each country and support each one with training, engineering shadowing and technical support on proofs of value.
What to include
- The country or countries you operate in
- Your organisation and sector
- Roughly how many servers, workstations and sites are involved
- Whether OT, IoT or remote access is in scope
- What prompted the question: ransomware readiness, an audit finding, an incident, or a segmentation project that stalled
- Your reseller, if you already have one
Related
Where containment fits
Containment is one of the questions our portfolio answers about the same exposure. Today, Zero Networks restricts where privileged and service accounts can log in. Dedicated capabilities for machine and AI-agent identity, secrets and certificate lifecycle are where the portfolio is expanding.
- Asset discovery and visibility, with runZero: what is connected inside the network, managed and unmanaged.
- External attack surface management, with Censys: what of the estate is reachable from the internet.
- Exposure assessment: the outside-in and inside views together, with containment for what cannot be fixed quickly.
- Current engagements: where we are working, by problem, organisation type and stage.