Average Ratings 0 Ratings
Average Ratings 1 Rating
Description
SecureStack can detect common security issues in your CI/CD pipeline and prevent them from getting into your applications. SecureStack automatically embeds security with every git push. Our technology is designed to check every aspect of your application security. We look for missing security controls and correct encryption. We also test the effectiveness of your WAF. All this was done in less than 60 seconds. You can see what hackers can see when they look at your applications. Compare your development, staging, and production environments to quickly identify critical differences and find solutions to high-priority issues. We help you to decompose your web app so you can see all the resources used behind the scenes.
Description
ZeroPath (YC S24) is an AI-native application security platform that delivers comprehensive code protection beyond traditional SAST. Founded by security engineers from Tesla and Google, ZeroPath combines large language models with deep program analysis to deliver intelligent security testing that finds real vulnerabilities while dramatically reducing false positives.
Unlike traditional SAST tools that rely on pattern matching, ZeroPath understands code context, business logic, and developer intent. This enables identification of sophisticated security issues including business logic flaws, broken authentication, authorization bypasses, and complex dependency vulnerabilities.
Our comprehensive security suite covers the application security lifecycle:
1. AI-powered SAST
2. Software Composition Analysis with reachability analysis
3. Secrets detection and validation
4. Infrastructure as Code scanning
5. Automated PR reviews
6. Automated patch generation
and more...
ZeroPath integrates seamlessly with GitHub, GitLab, Bitbucket, Azure DevOps and many more. The platform handles codebases with millions of lines across Python, JavaScript, TypeScript, Java, Go, Ruby, Rust, PHP, Kotlin and more.
Our research team has been successful in finding vulnerabilities like critical account takeover in better-auth (CVE-2025-61928, 300k+ weekly downloads), identifying 170+ verified bugs in curl, and discovering 0-days in production systems at Netflix, Hulu, and Salesforce.
Trusted by 750+ companies and performing 200k+ code scans monthly.
API Access
Has API
Yes
API Access
Has API
Yes
Integrations
Azure DevOps
Yes
Bitbucket
Yes
GitHub
Yes
GitLab
Yes
JavaScript
Yes
Jira
Yes
Python
Yes
Slack
Yes
Amazon Web Services (AWS)
Yes
Checkmarx
No
Integrations
Azure DevOps
Yes
Bitbucket
Yes
GitHub
Yes
GitLab
Yes
JavaScript
Yes
Jira
Yes
Python
Yes
Slack
Yes
Amazon Web Services (AWS)
No
Checkmarx
Yes
Pricing Details
$500/mo
500 analyses per month cost $500, which is typically enough for a growing startup.
Free Trial
Yes
Free Version
No
Pricing Details
Free
- Free personal plan (free forever, incl. 1 repo, unlimited PR scans and more).
- Core plan (Platform fee: $200/month, up to 25 repos, unlimited PR scans and patches, integration w/ Jira, Linear, and more).
- Enterprise plan for organizations with advanced needs.
- Core plan (Platform fee: $200/month, up to 25 repos, unlimited PR scans and patches, integration w/ Jira, Linear, and more).
- Enterprise plan for organizations with advanced needs.
Free Trial
Yes
Free Version
Yes
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
Yes
Mac
Yes
Linux
Yes
Chromebook
No
Deployment
Web-Based
Yes
On-Premises
Yes
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Customer Support
Business Hours
Yes
Live Rep (24/7)
No
Online Support
Yes
Customer Support
Business Hours
Yes
Live Rep (24/7)
Yes
Online Support
Yes
Types of Training
Training Docs
Yes
Webinars
Yes
Live Training (Online)
Yes
In Person
No
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
Yes
In Person
No
Vendor Details
Company Name
SecureStack
Founded
2017
Country
Australia
Website
securestack.com
Vendor Details
Company Name
ZeroPath
Founded
2024
Country
United States
Website
zeropath.com
Product Features
Application Development
Access Controls/Permissions
Yes
Code Assistance
No
Code Refactoring
No
Collaboration Tools
Yes
Compatibility Testing
No
Data Modeling
No
Debugging
No
Deployment Management
No
Graphical User Interface
No
Mobile Development
No
No-Code
No
Reporting/Analytics
No
Software Development
No
Source Control
Yes
Testing Management
Yes
Version Control
Yes
Web App Development
No
Application Lifecycle Management
Administrator Level Control
Yes
Defect Tracking
Yes
Iteration Planning
No
Project Management
No
Release Management
No
Requirements Review
No
Task Management
No
Test Case Tracking
No
User Level Management
No
Version Control
Yes
Application Security
Analytics / Reporting
Yes
Open Source Component Monitoring
Yes
Source Code Analysis
Yes
Third-Party Tools Integration
Yes
Training Resources
No
Vulnerability Detection
Yes
Vulnerability Remediation
Yes
Cybersecurity
AI / Machine Learning
No
Behavioral Analytics
No
Endpoint Management
No
IOC Verification
No
Incident Management
Yes
Tokenization
No
Vulnerability Scanning
Yes
Whitelisting / Blacklisting
No
DevOps
Approval Workflow
No
Dashboard
No
KPIs
No
Policy Management
Yes
Portfolio Management
No
Prioritization
No
Release Management
Yes
Timeline Management
No
Troubleshooting Reports
No
Static Application Security Testing (SAST)
Application Security
Yes
Dashboard
Yes
Debugging
No
Deployment Management
Yes
IDE
No
Multi-Language Scanning
No
Real-Time Analytics
Yes
Source Code Scanning
Yes
Vulnerability Scanning
Yes
Product Features
Application Security
Analytics / Reporting
Yes
Open Source Component Monitoring
Yes
Source Code Analysis
Yes
Third-Party Tools Integration
Yes
Training Resources
Yes
Vulnerability Detection
Yes
Vulnerability Remediation
Yes
Cybersecurity
AI / Machine Learning
Yes
Behavioral Analytics
No
Endpoint Management
No
IOC Verification
No
Incident Management
No
Tokenization
No
Vulnerability Scanning
Yes
Whitelisting / Blacklisting
No
Static Application Security Testing (SAST)
Application Security
Yes
Dashboard
Yes
Debugging
No
Deployment Management
Yes
IDE
Yes
Multi-Language Scanning
Yes
Real-Time Analytics
Yes
Source Code Scanning
Yes
Vulnerability Scanning
Yes
Static Code Analysis
Analytics / Reporting
Yes
Code Standardization / Validation
Yes
Multiple Programming Language Support
Yes
Provides Recommendations
Yes
Standard Security/Industry Libraries
Yes
Vulnerability Management
Yes
Vulnerability Scanners
Asset Discovery
No
Black Box Scanning
No
Compliance Monitoring
No
Continuous Monitoring
Yes
Defect Tracking
No
Interactive Scanning
No
Logging and Reporting
Yes
Network Mapping
No
Perimeter Scanning
No
Risk Analysis
No
Threat Intelligence
No
Web Inspection
No