Z
ZeroPath
ZeroPath is an AI-native application security platform designed to provide comprehensive code security.
Our verdict
Who it's for
AI-native application security platform that finds and auto-fixes critical code vulnerabilities.
Who should look elsewhere
Credit-based pricing for usage might be less predictable for some teams.
Pros
- +Significantly reduces false positives compared to traditional SAST tools.
- +Automatically generates working code patches for identified vulnerabilities.
- +Detects complex business logic flaws and authentication bypasses that other tools miss.
- +Provides continuous security coverage that evolves with new threats and vulnerability classes.
- +Offers rapid PR scanning (under 60 seconds) to maintain development velocity.
Cons
- −Credit-based pricing for usage might be less predictable for some teams.
- −Advanced features like on-premise deployment and custom compliance reports are exclusive to Enterprise plans.
Key features
- ✓AI-native Static Application Security Testing (SAST)
- ✓Software Composition Analysis (SCA) with reachability analysis
- ✓Secrets detection and validation
- ✓Infrastructure as Code (IaC) scanning
- ✓Continuous pull request (PR) security reviews
- ✓AI-powered vulnerability autofix generation
- ✓Intelligent prioritization of security risks
- ✓Policy Engine for custom security rules
Pricing
| Plan | Price | Billing | Notes |
|---|---|---|---|
| Credits | — | month | Pay only for what you use; No monthly commitment; AI-native SAST, SCA & secrets scanning |
| Team | $60 | month | Unlimited repositories & scans; AI-native SAST with business logic & broken auth detection; SCA with reachability analysis |
| Enterprise | — | month | Free proof of value engagement; Everything in Team, plus:; On-prem / self-hosted / private cloud |