Skip to main content
Zara

Ask about your environment, get an answer you can check

Zara is the assistant built into Ciyora Console. It answers from your tenant's data, shows which tools it called to get there, and suggests a next step. It never acts on its own: changes go through the same confirmations and approvals as everything else.

Zara open beside the Ciyora Console home page, answering a request to summarise open critical alerts with a table of alerts, recommended next steps and the list_alerts tool it used.Zara open beside the Ciyora Console home page, answering a request to summarise open critical alerts with a table of alerts, recommended next steps and the list_alerts tool it used.

What Zara does

Context from the page you are on

Zara opens beside any page and starts with questions that fit it: who has standing privileged access on the access pages, which identities have excessive privilege on the identity pages, or a summary of open critical alerts on the home page. Many records also have an Ask Zara button.

  • Answers grounded in your tenant’s alerts, identities, access, posture and network data
  • Tool calls named in the answer, so you can check the source
  • A reminder on every answer to check important findings before acting

Suggestions where decisions are made

In an access review, Zara suggests certify or revoke for each item with a confidence score, based on usage and risk. Reviewers still make, and own, every decision.

An access review campaign whose reviewer workspace has a Zara suggests column with a recommendation and confidence for each item.An access review campaign whose reviewer workspace has a Zara suggests column with a recommendation and confidence for each item.

The model stays under your control

Administrators choose the language model Zara uses for the tenant, such as Amazon Bedrock or a self-hosted Ollama model, test it and make it active. Keys are write-only and never shown back.

See Zara in a demo

A demo walks through the module on a sample tenant and covers how it would connect to your identity provider, cloud accounts and sites.