# Palo Alto Prisma Cloud vs ZeroThreat.ai

| Attribute | Palo Alto Prisma Cloud | ZeroThreat.ai |
|---|---|---|
| **Vioscale score** | 46.7 (26% (low)) | 51.5 (54% (medium)) |
| deployment.options | `{"cloud":true,"hybrid":true,"on_prem":true,"self_hosted":true}` | `{"cloud":true}` |
| description.long | A comprehensive cloud security platform that provides visibility into cloud assets, enforces compliance policies, detects and blocks threats in real time, and protects applications across their entire lifecycle from code development through production deployment. | ZeroThreat.ai is an AI-powered automated penetration testing platform that uncovers real, exploitable vulnerabilities across modern web applications and APIs with proof-based validation and real-time CVE coverage. It uses Agentic AI to execute adaptive attacker workflows, combining deep vulnerability coverage, authenticated testing, business logic testing, and community-driven attack templates to help teams prioritize real risk and eliminate false positives. |
| features.capabilities | `{"ciem":true,"cspm":true,"cwpp":true,"iac_scanning":true,"cloud_coverage":"AWS, Azure, Google Cloud, Alibaba Cloud, Oracle Cloud Infrastructure (five large","agentless_scanning":true,"runtime_protection":true,"compliance_frameworks":"Supports more than 75 compliance standards"}` | `{"ciem":false,"cspm":false,"cwpp":false,"dspm":false,"kspm":false,"iac_scanning":false,"cloud_coverage":"Web application and API security scanning, shadow/zombie API discovery, cloud mi","agentless_scanning":true,"runtime_protection":false,"compliance_frameworks":"OWASP, CWE, SANS, PCI DSS, HIPAA, ISO 27001, GDPR"}` |
| integrations.count | 19 | 15 |
| integrations.list | `[{"name":"Black Duck"},{"name":"Coverity"},{"name":"Checkmarx"},{"name":"GitLab"},{"name":"HashiCorp"},{"name":"Semgrep"},{"name":"Snyk"},{"name":"Veracode"},{"name":"Cortex Cloud"},{"name":"Cortex XDR"},{"name":"Cortex XSOAR"},{"name":"Cortex XSIAM"},{"name":"Cortex Xpanse"},{"name":"Cortex XDS"},{"name":"AWS"},{"name":"Azure"},{"name":"Google Cloud"},{"name":"Alibaba Cloud"},{"name":"Oracle Cloud Infrastructure"}]` | `[{"name":"GitHub Actions"},{"name":"GitHub"},{"name":"Azure Pipelines"},{"name":"CircleCI"},{"name":"GitLab CI/CD"},{"name":"GitLab"},{"name":"TeamCity"},{"name":"AWS CodePipeline"},{"name":"Bamboo"},{"name":"Jenkins"},{"name":"Travis CI"},{"name":"Jira"},{"name":"Slack"},{"name":"Burp"},{"name":"Nuclei"}]` |
| market.availability | `{"hqCountry":"US","primaryMarkets":[],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` | `{"hqCountry":"US","primaryMarkets":[],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` |
| platform.support | `{"cli":true,"web":true}` | `{"web":true}` |
| pricing | `{"type":"quote","sourceUrl":"https://www.paloaltonetworks.com/prisma/cloud","retrievedAt":"2026-08-14T13:46:16.817Z"}` | `{"type":"hybrid","plans":[{"free":true,"name":"Free","summary":"Free with 1 scan credit/month","features":["1 scan credit per month","1 target per account","Limited vulnerability insights preview","Web applications & APIs","OWASP top 10 & CWE-based detection","Authenticated scanning","No setup required"],"components":[{"kind":"fixed","amount":0,"period":"month","currency":"USD"}],"description":"Limited vulnerability preview across one application target","contactSales":false,"includedLimits":{"targets":"1","scan_credits":"1/month"}},{"free":false,"name":"Professional","summary":"$100/target/month (or $80/target/month with annual commitment, 20% discount). Additional targets $75 each.","features":["Unlimited scans per target","Scheduled automated scans","AI remediation guidance & executive summaries","Sensitive data & cloud misconfiguration detection","130K+ vulnerability coverage","CVE Intelligence updated monthly","Authenticated scanning with MFA/SSO support","Business logic testing (BOLA, IDOR, access control)","API pentesting (REST, GraphQL, SOAP, gRPC)","Region-based data storage & access control","Compliance continuous coverage (GDPR, ISO27001, PCI-DSS, HIPAA)","Audit-ready compliance reports","Unlimited retesting & verification","Target URL changes within 30-day cooling period","99.9% accurate results"],"commitment":"monthly","components":[{"kind":"fixed","amount":100,"period":"month","currency":"USD"}],"description":"Unlimited scans per application target with full vulnerability visibility and compliance reporting","contactSales":false,"includedLimits":{"per_target":"unlimited scans","additional_targets":"$75 each"}},{"free":false,"name":"Pay Per Scan","summary":"$25/scan credit. Volume discounts: 5% off (10–20 credits), 10% off (30–50), 15% off (75–100), 20% off (250+)","features":["Unlimited targets","AI remediation & executive summaries","Sensitive data & cloud misconfiguration detection","7-day unlimited retest window","CVE-based attack coverage","Authenticated scanning","Business logic security testing (BOLA, IDOR, access control)","API pentesting (REST, GraphQL, SOAP, gRPC)","Region-based data storage & access control","Compliance view (GDPR, ISO27001, PCI-DSS, HIPAA)","Audit-ready compliance reports","99.9% accurate results"],"components":[{"kind":"fixed","unit":"scan credit","amount":25,"period":"one_time","currency":"USD"}],"description":"On-demand security testing across unlimited application targets with flexible credit purchasing","contactSales":false,"includedLimits":{"targets":"unlimited"}}],"summary":"Free tier with 1 scan credit/month. Professional from $100/target/month. Pay-as-you-go at $25/scan credit with volume discounts to 20%.","currency":"USD","freeTier":true,"sourceUrl":"https://zerothreat.ai/pricing","retrievedAt":"2026-08-18T13:35:56.966Z","startingPrice":{"amount":100,"period":"month","currency":"USD"},"billingPeriods":["month","year"]}` |
| pricing.free_tier | - | yes |
| pricing.model | quote | freemium |
| pricing.price_level | unknown | high |
| pricing.starting_price | - | `{"amount":100,"currency":"USD"}` |
| pricing.transparent | no | yes |
| reliability.status_page | yes | - |
| security.gdpr | yes | yes |
| security.hipaa | - | yes |
| security.iso27001 | - | yes |
| security.pci | - | yes |

## Capabilities (Cloud Security Software)

| Capability | Palo Alto Prisma Cloud | ZeroThreat.ai |
|---|:--:|:--:|
| **Posture** |  |  |
| CSPM (posture / misconfig) | ✓ | ✗ |
| KSPM (Kubernetes posture) | - | ✗ |
| **Workload** |  |  |
| CWPP (workload protection) | ✓ | ✗ |
| **Entitlements** |  |  |
| CIEM (entitlements) | ✓ | ✗ |
| **Data** |  |  |
| DSPM (data posture) | - | ✗ |
| **Pipeline** |  |  |
| IaC / pipeline scanning | ✓ | ✗ |
| **Architecture** |  |  |
| Agentless scanning | ✓ | ✓ |
| **Runtime** |  |  |
| Runtime protection | ✓ | ✗ |
| **Coverage** |  |  |
| Cloud coverage | AWS, Azure, Google Cloud, Alibaba Cloud, Oracle Cloud Infrastructure (five large | Web application and API security scanning, shadow/zombie API discovery, cloud mi |
| **Compliance** |  |  |
| Compliance frameworks assessed | Supports more than 75 compliance standards | OWASP, CWE, SANS, PCI DSS, HIPAA, ISO 27001, GDPR |
| **Licensing** |  |  |
| Open-core scanner available | - | - |

*Source: Vioscale. Generated 2026-09-01T17:39:19.647Z. "-" = undocumented, not absent.*