Who we are

The people who read your code.

We are security engineers, not an AI consultancy. Our background is professional security auditing, and it shows in how we work: every finding is checked by a person, backed by evidence and explained in plain words.

Experience
5+ years
Countries
8
Turnaround
48h

Founder

Portrait of Felix Wegener, founder of ZebraZones

Felix Wegener

Founder

Security researcher and engineer. He was Security Research Manager at OpenZeppelin and did PhD-level research in IT security at Ruhr University Bochum.

Felix Wegener started ZebraZones because years of security research had convinced him that the model is seldom what makes an AI system dangerous. The risk sits in the permissions the system inherits, in generated code that nobody reviewed, in the tools it can reach, and in the missing boundary between untrusted input and privileged actions.

He spent four years at OpenZeppelin, a respected security auditing firm, where he led teams of security researchers working on smart contracts, off-chain infrastructure and zero-knowledge cryptography. His last role there was Security Research Manager for clients in the financial sector. Colleagues came to him whenever they wanted to bring AI into their work, both in the audits themselves and in the business processes around them.

He trained as an engineer and researcher. At the Horst Görtz Institute for IT-Security at Ruhr University Bochum he did PhD-level research on hardware security and side-channel countermeasures, published in peer-reviewed venues and led funded software projects in Go, TypeScript and Python. Earlier he worked as a senior software engineer, building web and blockchain applications and taking them all the way into production.

At ZebraZones Felix sets the technical direction and works on client projects himself. He audits applications built with AI coding tools and designs the security architecture for agents that act on real systems. He holds this work to the standard he used with his financial sector clients, so nothing goes into a report unless it can be proven.

The team

Security engineers around the globe.

Real people who look at your code in depth, and enough of them across time zones to deliver a high-quality audit in 48 hours.

ARGENTINA COLOMBIA VIETNAM POLAND ROMANIA ESTONIA PORTUGAL PHILIPPINES
ArgentinaColombiaVietnamPolandRomaniaEstoniaPortugalPhilippines

People read your code

Every audit is done by a security engineer who reads the codebase in depth: how users are identified, where data is scoped, which routes trust what. Tools help them move fast.

Around the clock, not around one desk

From Buenos Aires to Manila, the team covers every time zone. Your audit keeps moving while you sleep, that's how a thorough review fits into 48 hours.

Specialists in AI-built software

We look at apps from Claude Code, Cursor, Lovable, Replit and Bolt every week. We know where generated code cuts corners, so we focus on the risk areas.

Worried about security?