Home / Directory / AI SaaS tooling / AI code security / ZeroPath
ZeroPath
San Francisco company from Y Combinator's Summer 2024 batch whose AI scanner finds business logic flaws, broken authentication, and vulnerable dependencies, checks exploitability, and writes patches.
Security and engineering teams that want AI scanning across many repositories, with validated findings and patches, on a flat team price.
Very small teams that find a $1,000 monthly base too high, or buyers who want the longest vendor track record.
Verdict
ZeroPath is a San Francisco application security company whose AI scanner looks for logic bugs, broken authentication, and risky dependencies, then proposes patches. It suits security teams that manage many repositories and want fewer false alarms. Its bug reports to the curl project showed how AI scanners can help open-source maintainers.
Score Breakdown
How ZeroPath scores in the categories that matter to its buyers.
Pricing
ZeroPath publishes a Team price with a monthly base plus a per-developer fee, offers pay-per-scan use, and quotes Enterprise after a free proof of value.
| Plan | Price | What stands out |
|---|---|---|
| Pay per scan | Metered | No monthly commitment |
| Team | $1,000 / month + $60 / developer | Unlimited repositories and scans, SAST, SCA, secrets, IaC, autofix |
| Enterprise | Custom | Self-hosted or private cloud, bring your own model keys, SLA |
The Field at a Glance
How ZeroPath compares with other AI code security vendors we reviewed, by Overall Score and relative typical engagement cost.
ZeroPath scores 8.0 in AI code security, ahead of Corgea (7.9), DryRun Security (7.6), and Pixee (7.5). Relative cost lands upper-mid for this subcategory.
Use-case matrix
| Use case | Fit | Notes |
|---|---|---|
| Business logic and auth flaws | Strong | Built to find logic bugs and broken authorization. |
| Dependency reachability | Strong | Triages only the vulnerable code paths a project calls. |
| Unlimited repositories | Strong | Team plan scans every repository. |
| Self-hosting | Strong | Enterprise runs on premises or in a private cloud. |
| Entry price | Mixed | The Team plan starts with a $1,000 monthly base. |
| Vendor size | Weak | A small team founded in 2024. |
Who it’s for
Good fit
- Security teams with many repositories
- Companies wanting fewer false positives
- Regulated firms needing self-hosting
Poor fit
- Two-person startups on tight budgets
- Buyers wanting a decades-old vendor
- Teams needing only a secrets scanner
Review Excerpts
Below are excerpts from public reviews. Our team scoured public reviews, forums, and chat rooms to get a balanced view of customers' experience with this company. Paid reviews and pay-for-play sites such as Clutch were excluded.
ZeroPath says its findings have led to more than 150 bug fixes in the curl project alone, and it scans code for open-source projects including FFmpeg and django-allauth.
“I was amazed by the quality and insight in some of the issues... even the ones we dismiss often have some insights and the rate of obvious false positive has remained low.”
ZeroPath's Team plan starts at a $1,000 monthly base plus $60 per developer, a higher entry point than per-seat code scanners with free tiers.
Company Facts
- Founded
- 2024 (Y Combinator)
- Headquarters
- San Francisco (Y Combinator)
- Accelerator
- Y Combinator, Summer 2024 batch (Y Combinator)
- Recognition
- RSAC 2026 Innovation Sandbox finalist (zeropath.com)
- Website
- zeropath.com
Key Leadership
Dean Valentine
Co-founder and CEO
Methodology
This page is an independent evaluation of ZeroPath for buyers comparing options in AI code security. AI Industry Reviews accepts no sponsorships, advertising, or pay-for-placement fees. ZeroPath did not pay for this review.
What we scored
The headline number is an Overall Score on a 0-10 scale. Eight criteria sit under it in two groups.
- Buyer outcomes (for AI code security)
- Finding business logic flaws
- Coverage across code and infrastructure
- Price for small teams
- Vendor maturity
- Company & commercial
- Innovation & product leadership
- Project management & communication
- Pricing
- Contract fairness
Pricing measures whether the price looks fair for the value delivered, including packaging and renewal friction that show up in real buying cycles.
Score Composition
| Input | Weight | What it covers |
|---|---|---|
| Reviews | 40% | A proprietary read of what practitioners say about likes, complaints, and day-to-day use, including public review sites, forums, and private chat rooms. Paid reviews and pay-for-play sites such as Clutch are out of scope. |
| Product | 35% | Hands-on look at screens and workflows. |
| Pricing | 15% | Whether the price looks fair for what you get. |
| Docs & training | 10% | Docs, tutorials, and training material. |
How we balanced the evidence
The Overall Score is the simple average of the eight criteria. Recommendation language follows that score and the fit pattern described above.
Scope
ZeroPath is graded here as AI code security. Criteria scores can move as more review volume and product checks are added.