People and seats
Invite members, assign seats and remove people when they leave. Upgrade to more seats or reduce the count as the organisation changes, without re-buying the deployment.
Zeus ships with its administration layer built in. Manage people, seats and permissions from an admin console, deploy through MDM with managed policy manifests, and keep approval and audit boundaries in force on every Mac.
Team and enterprise administrators sign in to manage the whole deployment without touching individual Macs.
Invite members, assign seats and remove people when they leave. Upgrade to more seats or reduce the count as the organisation changes, without re-buying the deployment.
Set what each team can use: which providers and models are allowed, which tools and integrations are enabled, and which features are switched off entirely.
Give every member a working configuration from first launch, so the deployment behaves consistently instead of depending on individual set-up choices.
Zeus deploys through MDM, and managed policy manifests define what users can have, what they cannot, and how the app behaves before any request starts.
Restrict speech and AI routes to approved providers, require local models where policy demands it, and force Privacy Mode on for selected apps or the whole deployment.
Control Agent Mode, MCP, Raycast, AppleScript, external URL automation and context sources. Disable any of them outright, or scope them to approved servers and tools.
Limit data retention, constrain diagnostics and configure audit behaviour so the deployment matches your governance requirements rather than the defaults.
Protected actions require a short-lived approval bound to the exact tool and inputs, and they fail closed: replayed requests, changed arguments, expired approvals or missing policy stop the action rather than letting it through. An external tool or model can never declare itself approved.
Credentials stay in macOS Keychain. Diagnostic logs are metadata-only by default, and policy can force that behaviour. Audit records cover decisions and outcomes while excluding dictated text, prompts, tool inputs, results and secrets. Audit export is tamper-evident, not tamper-proof against a compromised machine.
Zeus is distributed directly for macOS: releases are signed, hardened and notarised through Apple's standard trust chain. Third-party MCP packages run as local code under the user's account and are not fully sandboxed today; policy can disable all MCP or local subprocess MCP where that risk is unacceptable.
Tell us the expected seat count and requirements and we will reply with pricing. Deployments over 100 seats can run through contract-led, invoiced procurement.