Skip to content
SPECIFICTION
Get listed

ZeroPath

zeropath.com

From $1,000/mo WebWindowsmacOSLinuxAPISelf-hosted
Visit zeropath.com
Spec score 7.3 #15 of 29 in Container Image Scanning Tools

Spec sheet

Purpose
ZeroPath describes itself as an AI-native application security platform for finding and fixing exploitable vulnerabilities across code, cloud, and runtime.Read 3 Oct 2026 · zeropath.com
Intended users
The pricing page positions Team for engineering teams shipping quickly and Enterprise for organizations with advanced needs.Read 3 Oct 2026 · zeropath.com
Deployment
On-premises deployment can run in a customer's AWS, Azure, or GCP account, where the company says code never leaves the customer's environment.Read 3 Oct 2026 · zeropath.com
Support
The Trust Center states a 24-hour response time for support requests and says priority support is available to enterprise customers.Read 3 Oct 2026 · zeropath.com
Headquarters
2261 Market Street, STE 10797, San Francisco, CA 94114, United StatesRead 28 Sep 2026 · zeropath.com
AI data handling
ZeroPath says its agreements with OpenAI and Anthropic prohibit training on customer data or retaining customer inputs beyond processing.Read 3 Oct 2026 · zeropath.com
Code retention
The Trust Center says source code is retained for 30 days for patch generation, Q&A, and rescanning, then automatically deleted.Read 3 Oct 2026 · zeropath.com
Dependency analysis
ZeroPath says its SAST and SCA assess whether vulnerable dependencies are reachable and exploitable in the application.Read 3 Oct 2026 · zeropath.com
Languages and speed
The SAST page lists support for 15+ languages and says average pull request scans take under 60 seconds.Read 3 Oct 2026 · zeropath.com
SAST findings
The SAST product targets business logic and authentication flaws, including IDOR vulnerabilities, race conditions, and authorization bypasses.Read 3 Oct 2026 · zeropath.com
Security certification
The Trust Center states that ZeroPath is SOC 2 Type II certified and GDPR compliant, and undergoes annual external penetration tests.Read 3 Oct 2026 · zeropath.com
Security coverage
Its product stack includes SAST, SCA, secrets scanning, IaC scanning, PR reviews, policy management, DAST, container scanning, AI inventory, and AI-BOM generation.Read 3 Oct 2026 · zeropath.com
Source control integrations
Native version control integrations include GitHub, GitLab, Bitbucket, and Azure DevOps, with Gerrit and CVS also listed on the site.Read 3 Oct 2026 · zeropath.com
Workflow integrations
ZeroPath lists Jira and Linear two-way issue sync, Slack and email alerts, and imports from Snyk, Semgrep, Checkmarx, SonarQube, Veracode, Fortify, and Synopsys.Read 3 Oct 2026 · zeropath.com

Plans and prices

Team $1,000 a month Starting from $1,000/mo + $60/dev Unlimited repositories & scans · SAST, SCA, secrets & IaC scanning · runtime validation · PR reviews & autofix · SSO/SAML · Jira, Linear & Slack Read 3 Oct 2026 · zeropath.com
Credits Priced on request Usage-based; Coming soon Pay per scan · no monthly commitment · AI-native SAST, SCA & secrets scanning · PR reviews & autofix · CI/CD integration Read 3 Oct 2026 · zeropath.com
Enterprise Priced on request Custom Everything in Team · on-prem/self-hosted/private cloud · BYOK · volume discounts · dedicated support & SLA · SCIM · policy engine · custom compliance reports Read 3 Oct 2026 · zeropath.com

Every ZeroPath plan and price →

Where Specifiction places it

Alternatives to ZeroPathAll alternatives →