Question 1

Is zcrX available now, and what does it cost?

Accepted Answer

Yes. zcrX is available as an annual subscription starting at ฿500,000 per year, excluding VAT. Your channel partner confirms the scope in a quotation and can arrange a technical demo.

Question 2

Does zcrX do SAST and DAST?

Accepted Answer

Yes. zcrX performs static application security testing (SAST) on application source code and dynamic application security testing (DAST) on running applications. The applications and environments in scope are confirmed with your channel partner when the engagement is scoped.

Question 3

Does zcrX need software installed on every host?

Accepted Answer

For cryptography, vulnerability and supply-chain posture, zcrX deploys lightweight Agents to the hosts and build systems you enroll. A host with no Agent shows as not measured rather than being assumed clean.

Question 4

How does zcrX decide what to fix first?

Accepted Answer

For cryptography, vulnerability and supply-chain posture, findings are ranked by CISA's Known Exploited Vulnerabilities (KEV) status, EPSS score, severity and how many hosts they affect — not by raw finding counts.

Question 5

Can zcrX manage more than one customer environment?

Accepted Answer

Yes. zcrX includes a provider control plane with delegated, least-privilege access to each customer tenant, built for channel partners managing more than one customer.