- Home
- Container Image Scanning Tools
- ZeroPath
On the recordRead 3 Oct 202614 facts
ZeroPath
2261 Market Street, STE 10797, San Francisco, CA 94114, United States
Plans and prices
Team
$1,000a month
Unlimited repositories & scans · SAST, SCA, secrets & IaC scanning · runtime validation · PR reviews & autofix
Read 3 Oct 2026 · zeropath.com
Credits
Priced on request
Pay per scan · no monthly commitment · AI-native SAST, SCA & secrets scanning · PR reviews & autofix
Read 3 Oct 2026 · zeropath.com
Enterprise
Priced on request
Everything in Team · on-prem/self-hosted/private cloud · BYOK · volume discounts
Read 3 Oct 2026 · zeropath.com
On the record
- AI data handling
- ZeroPath says its agreements with OpenAI and Anthropic prohibit training on customer data or retaining customer inputs beyond processing.zeropath.com · read 3 Oct 2026
- Code retention
- The Trust Center says source code is retained for 30 days for patch generation, Q&A, and rescanning, then automatically deleted.zeropath.com · read 3 Oct 2026
- Dependency analysis
- ZeroPath says its SAST and SCA assess whether vulnerable dependencies are reachable and exploitable in the application.zeropath.com · read 3 Oct 2026
- Deployment
- On-premises deployment can run in a customer's AWS, Azure, or GCP account, where the company says code never leaves the customer's environment.zeropath.com · read 3 Oct 2026
- Intended users
- The pricing page positions Team for engineering teams shipping quickly and Enterprise for organizations with advanced needs.zeropath.com · read 3 Oct 2026
- Languages and speed
- The SAST page lists support for 15+ languages and says average pull request scans take under 60 seconds.zeropath.com · read 3 Oct 2026
- Purpose
- ZeroPath describes itself as an AI-native application security platform for finding and fixing exploitable vulnerabilities across code, cloud, and runtime.zeropath.com · read 3 Oct 2026
- SAST findings
- The SAST product targets business logic and authentication flaws, including IDOR vulnerabilities, race conditions, and authorization bypasses.zeropath.com · read 3 Oct 2026
- Security certification
- The Trust Center states that ZeroPath is SOC 2 Type II certified and GDPR compliant, and undergoes annual external penetration tests.zeropath.com · read 3 Oct 2026
- Security coverage
- Its product stack includes SAST, SCA, secrets scanning, IaC scanning, PR reviews, policy management, DAST, container scanning, AI inventory, and AI-BOM generation.zeropath.com · read 3 Oct 2026
- Source control integrations
- Native version control integrations include GitHub, GitLab, Bitbucket, and Azure DevOps, with Gerrit and CVS also listed on the site.zeropath.com · read 3 Oct 2026
- Support
- The Trust Center states a 24-hour response time for support requests and says priority support is available to enterprise customers.zeropath.com · read 3 Oct 2026
- Workflow integrations
- ZeroPath lists Jira and Linear two-way issue sync, Slack and email alerts, and imports from Snyk, Semgrep, Checkmarx, SonarQube, Veracode, Fortify, and Synopsys.zeropath.com · read 3 Oct 2026