Zen Enterprise

3 min read Original article ↗

Ad-blocking, reimagined for enterprise

Zen Enterprise is an enterprise ad-blocker, web content filter, and privacy guard. Protect your organization from web-based threats and give employees a faster, cleaner web experience.

Free during early access · Then $2/mo per endpoint

https://dash.irbis.sh

Zen Enterprise management dashboard

PS C:\Users\user> Set-ExecutionPolicy Bypass -Scope Process -Force;
PS C:\Users\user> ([System.Text.Encoding]::UTF8.GetString(
  (Invoke-WebRequest -Uri 'https://dl.irbis.sh/install.ps1'
    -UseBasicParsing).Content)) |
  Set-Content "$env:TEMP\Install-ZenEnterpriseAgent.ps1";
PS C:\Users\user> Invoke-Expression "& '$env:TEMP\Install-ZenEnterpriseAgent.ps1'
  -DeploymentToken '••••••••'"
Creating directories...
Downloading the agent binary from https://dl.irbis.sh/ZenEnterpriseAgent-arm64.exe...
Propagating ACLs to all subfolders and files...
Registering endpoint with deployment token...
Endpoint registration successful.
Registering service 'ZenEnterpriseAgent'...
Starting service 'ZenEnterpriseAgent'...
Service 'ZenEnterpriseAgent' is installed and running.

Centralized policy control

Manage filter lists, custom rules, and allowlists across your entire fleet from a single dashboard. No device access needed.

Threat prevention

Block malvertising, phishing domains, cryptojacking scripts, and other web-borne threats before they execute.

Measurable productivity gains

Eliminate ads, algorithmic feeds, and distracting content. Teams reclaim over 5 hours per person, per month in focused work time.

Deploy in minutes

Roll out via MDM, RMM, or a PowerShell installer. No dedicated hardware, no DNS changes, no VPN conflicts. Works with any browser.

Complete visibility

See what's being blocked across your organization. Employees can request allowlisting when something is incorrectly filtered.

Lightweight by design

The agent reduces bandwidth and CPU overhead by eliminating ad scripts and trackers. Less network traffic means longer battery life and faster page loads.

1

Install the agent

Deploy the Zen agent to endpoints via MDM, RMM, or a PowerShell installer. It registers with your organization's dashboard automatically.

2

System-wide proxy activates

The agent configures a lightweight local proxy that intercepts HTTP/HTTPS traffic system-wide – covering every browser, app, and background process.

3

Everything stays local

Filtering happens entirely on-device using your organization's policies. No traffic is routed through external servers. Zen works offline, behind VPNs, and across networks.

Windows

Windows 10/11 Available

macOS

macOS Coming soon

Linux

Linux Coming soon

$2 /endpoint/month

  • Centralized dashboard
  • Custom filter lists & rules
  • MDM/RMM deployment
  • Allowlist requests
  • Email support

Start free trial

Free during early access

Custom

  • Everything in Team
  • Volume discounts
  • SSO integration
  • Priority support & SLA
  • Dedicated onboarding

Contact sales

Tailored to your organization

How is Zen different from browser extensions?

Consumer ad-blockers help individuals but fall short at the organizational level. They're difficult to manage centrally, can be disabled by end users, and often don't work consistently across browsers or devices. Zen operates as a system-wide proxy, filtering traffic from every browser and many desktop apps – all managed centrally by your IT team.

Does Zen work with our existing VPN?

Yes. Zen runs locally on the endpoint and doesn't interfere with VPN tunnels, proxies, or other network configurations. It works regardless of which network the device is connected to – your employees are protected on the corporate network and on hotel Wi-Fi alike.

What data does Zen collect?

Zen does not collect or transmit browsing data. All filtering happens locally on the device. The only data sent to our servers is basic telemetry for policy sync (e.g., which policies are applied) and license validation.

How do I deploy Zen to my team?

Sign up at the dashboard and configure your filtering policy. You can distribute the agent via your MDM/RMM solution for zero-touch deployment, or install it on endpoints directly using a script. Endpoints register with your organization automatically.

What happens when the free trial ends?

After the early access period, Zen Team is $2 per endpoint per month. You'll be notified well in advance – there's no automatic billing. Your existing configuration and policies carry over seamlessly.

Can employees disable the agent?

The agent runs as a system service and cannot be disabled by employees.

Protect your team from the web's worst content

Get started in under 15 minutes. No credit card required.