Zen Mesh FAQ

Name: Zen Mesh public AI evidence manifests
Creator: Zen Mesh

Question 1

How does Zen Mesh deliver webhooks to private networks without opening inbound ports?

Accepted Answer

Zen Mesh uses an outbound-only Edge Plane. The zen-agent in your network establishes an outbound connection to Zen Mesh, then receives delivery over that persistent tunnel. No inbound firewall rules, no VPN, no reverse proxy.

Question 2

What security controls protect webhook delivery?

Accepted Answer

mTLS, SPIFFE/SPIRE workload identity, and HMAC payload verification on every data-plane path. External provider webhooks use provider-specific signature verification at ingress. See the security documentation for the full model.

Question 3

Can I use Zen Mesh with Kubernetes?

Accepted Answer

Yes. Deploy the zen-agent as a Helm chart on your cluster. The Edge Plane integrates with Kubernetes and supports zen-egress for delivering to services behind NAT or firewall.

Question 4

Which webhook sources does Zen Mesh support?

Accepted Answer

Stripe, GitHub, Twilio, Shopify, and any custom HTTP webhook source. Zen Mesh validates signatures from supported providers and provides signature verification guidance for custom sources.

Question 5

Is Zen Mesh production-ready?

Accepted Answer

Individual capabilities carry per-item status (WIRED, AUTOMATED_TESTED, etc.) documented in the evidence system. Review the Current Status page for per-capability maturity. Zen Mesh does not claim production-live availability as a global platform.

Question 6

What is the pricing model?

Accepted Answer

Free Forever tier available. Pro Early Bird with 6-month free trial. See zen-mesh.io/pricing for details.