AI-native SAST
Finds business logic flaws, broken authentication, authorization bypass paths, and other issues that pattern-based tools often miss.
ZeroPath
Freemium
Segurança de aplicações nativa de IA para código, dependências e segredos
O que é ZeroPath?
ZeroPath is an AI-native application security platform built around static analysis, dependency scanning, secrets detection, and related code-security workflows. The product pages position it as a system that looks for real vulnerabilities such as business logic flaws, broken authentication, authorization bypasses, vulnerable dependencies, and exposed secrets.
The platform is designed to work inside development pipelines. It offers PR reviews, one-click autofix, CI/CD checks, and integrations with GitHub, GitLab, Bitbucket, Azure DevOps, Jira, Linear, and Slack. Pricing information on the site shows Team and Enterprise plans, with Enterprise adding options such as on-prem/self-hosted deployment, private cloud, BYOK, SCIM provisioning, and custom compliance reporting.
O que ZeroPath pode fazer?
Reachability-aware SCA
Analyzes whether vulnerable dependencies are actually used in risky ways, and pairs dependency scanning with exploitability analysis.
Secrets scanning
Detects API keys, passwords, and other credentials with AI filtering to reduce false positives and validation for suspicious findings.
PR reviews and autofix
Reviews pull requests continuously and can generate ready-to-merge patches, along with refinement steps for iterating on fixes.
Policy and reporting controls
Combines security rules, custom policies, and compliance reporting so teams can define and enforce their own controls.
Enterprise deployment options
Supports multiple deployment and identity options, including cloud-hosted, on-prem/self-hosted, private cloud, SSO/SAML, and SCIM provisioning.
Casos de uso
“Application security testing for code”
Use ZeroPath to scan application code for business logic flaws, broken authentication, IDORs, and other issues that legacy SAST tools may miss.
“Dependency risk triage”
Use the platform to evaluate open source dependencies with reachability and exploitability analysis, then prioritize what actually affects your application.
“Credential exposure review”
Use secrets scanning to detect leaked credentials across source code, binaries, container images, and archives, with AI filtering to reduce noisy results.
“Developer workflow integration”
Use PR reviews and autofix generation to surface findings during code review, produce remediation guidance, and generate patches teams can refine before merge.
“Enterprise AppSec operations”
Use deployment, identity, and policy controls to fit the platform into larger organizations that need SSO/SAML, SCIM, custom rules, and compliance reporting.
Perguntas frequentes
How is ZeroPath priced?
ZeroPath’s pricing page shows Team and Enterprise plans. Team starts at $1,000 per month plus $60 per developer, and Enterprise is custom-priced with a demo and free proof-of-value engagement.
What integrations does ZeroPath support?
The product pages show support for GitHub, GitLab, Bitbucket, Azure DevOps, Jira, Linear, Slack, and email notifications. The pricing page also lists SSO/SAML and SCIM provisioning.
What kinds of security issues can ZeroPath find?
ZeroPath scans code for SAST, SCA, secrets, IaC, PR reviews, and optional dynamic testing. The product pages also describe autofix, policy rules, and runtime validation for exploitable findings.
How can ZeroPath be deployed?
ZeroPath’s product pages describe cloud-hosted, on-prem/self-hosted, private cloud, and BYOK options, which suggests it can fit different deployment and key-management requirements.
How does ZeroPath help teams fix findings?
The source pages describe AI-generated fixes, readable remediation guidance, and PR reviews. That means the platform is built to fit into development workflows rather than acting only as a reporting tool.
Informações rápidas
- Category
- AI-native AppSec platform
- Primary users
- Engineering and security teams
- Source domain
- zeropath.com
- Pricing
- Team from $1,000/month plus $60/dev; Enterprise custom
- Deployment
- Cloud-hosted, on-prem/self-hosted, private cloud
- Key workflows
- SAST, SCA, secrets scanning, PR reviews, autofix, CI/CD checks
Análise de tráfego de ZeroPath
Os dados de tráfego são apenas para referência.
- Classificação do domínio
- 57
Alternativas ao ZeroPath
CybeDefend
www.cybedefend.com
CybeDefend é uma plataforma de segurança de código desenvolvida para fluxos de trabalho de programação com IA. A camada VibeDefend analisa prompts dos agentes e diffs, aplica regras do projeto e do negócio, protege contra ações arriscadas e combina análises de código, dependências, segredos, infraestrutura e CI/CD antes de um pull request.
Aptori
aptori.dev
Segurança de aplicações nativa de IA para código, APIs, cloud e IA
Superagent
superagent.sh
Segurança de IA para código e agentes que encontra e corrige vulnerabilidades continuamente, entregando as correções como pull requests.
KushoAI
kusho.ai
Plataforma nativa de IA para manutenção de software, automatizando testes de API, análises de segurança, validação de fluxos e manutenção de testes em CI/CD.
模力方舟（Gitee AI）
ai.gitee.com
Plataforma completa de modelos e computação AI para testar, executar inferências, treinar, implantar e criar aplicações.
Pangea
pangea.cloud
Pangea é uma plataforma de segurança para aplicações de IA que adiciona proteções a prompts, resultados, acesso a dados e registos. Proteja fluxos de trabalho LLM através de APIs, SDKs, ferramentas de IA ou gateways de API.