# ZeroThreat.ai

> Automated penetration testing platform that discovers and validates exploitable attack chains in web applications and APIs

- **Canonical URI:** https://www.vioscale.ai/software/zerothreat-ai
- **Category:** Cloud Security Software
- **Vendor:** ZeroThreat.ai
- **Homepage:** https://zerothreat.ai/
- **Profile claimed by vendor:** yes
- **Last updated:** 2026-08-18T13:39:58.515Z

## Vioscale score

**51.8 / 100**, confidence 54% (medium). Computed 2026-09-01. _(updating — computed under an earlier model version or past its freshness window.)_

Composite of weighted, independently-sourced signals (no user reviews, no vendor payment).

| Signal | Score | Weight | Contribution | Evidence present |
|---|--:|--:|--:|:--:|
| price_level | 25 | 0.042 | 1.1 | ✓ |
| reliability | 0 | 0.094 | 0 | - |
| capabilities | 28.9 | 0.051111111111111114 | 1.5 | ✓ |
| integrations | 34.6 | 0.051111111111111114 | 1.8 | ✓ |
| security_posture | 55 | 0.209 | 11.5 | ✓ |
| pricing_transparency | 100 | 0.052 | 5.2 | ✓ |

## Pricing

_As of 2026-08-18, [verify at source](https://zerothreat.ai/pricing). Independently observed._

from $100/mo · Hybrid · Free tier

> Free tier with 1 scan credit/month. Professional from $100/target/month. Pay-as-you-go at $25/scan credit with volume discounts to 20%.

| Plan | Price | Free | Commitment |
|---|---|:--:|---|
| Free | Free | ✓ | - |
| Professional | $100/target/month (or $80/target/month with annual commitment, 20% discount). Additional targets $75 each. | - | monthly |
| Pay Per Scan | $25/scan credit. Volume discounts: 5% off (10–20 credits), 10% off (30–50), 15% off (75–100), 20% off (250+) | - | - |

### Free

Limited vulnerability preview across one application target

**Included limits:** targets: 1, scan_credits: 1/month

- 1 scan credit per month
- 1 target per account
- Limited vulnerability insights preview
- Web applications & APIs
- OWASP top 10 & CWE-based detection
- Authenticated scanning
- No setup required

### Professional

Unlimited scans per application target with full vulnerability visibility and compliance reporting

**Included limits:** per_target: unlimited scans, additional_targets: $75 each

- Unlimited scans per target
- Scheduled automated scans
- AI remediation guidance & executive summaries
- Sensitive data & cloud misconfiguration detection
- 130K+ vulnerability coverage
- CVE Intelligence updated monthly
- Authenticated scanning with MFA/SSO support
- Business logic testing (BOLA, IDOR, access control)
- API pentesting (REST, GraphQL, SOAP, gRPC)
- Region-based data storage & access control
- Compliance continuous coverage (GDPR, ISO27001, PCI-DSS, HIPAA)
- Audit-ready compliance reports
- Unlimited retesting & verification
- Target URL changes within 30-day cooling period
- 99.9% accurate results

### Pay Per Scan

On-demand security testing across unlimited application targets with flexible credit purchasing

**Included limits:** targets: unlimited

- Unlimited targets
- AI remediation & executive summaries
- Sensitive data & cloud misconfiguration detection
- 7-day unlimited retest window
- CVE-based attack coverage
- Authenticated scanning
- Business logic security testing (BOLA, IDOR, access control)
- API pentesting (REST, GraphQL, SOAP, gRPC)
- Region-based data storage & access control
- Compliance view (GDPR, ISO27001, PCI-DSS, HIPAA)
- Audit-ready compliance reports
- 99.9% accurate results

## About

ZeroThreat.ai is an AI-powered automated penetration testing platform that uncovers real, exploitable vulnerabilities across modern web applications and APIs with proof-based validation and real-time CVE coverage. It uses Agentic AI to execute adaptive attacker workflows, combining deep vulnerability coverage, authenticated testing, business logic testing, and community-driven attack templates to help teams prioritize real risk and eliminate false positives.

_Verified by owner._

## Platform & deployment

- **Platforms:** Web
- **Deployment:** Cloud / SaaS

## Integrations (15)

_Independently observed._

- GitHub Actions
- GitHub
- Azure Pipelines
- CircleCI
- GitLab CI/CD
- GitLab
- TeamCity
- AWS CodePipeline
- Bamboo
- Jenkins
- Travis CI
- Jira
- Slack
- Burp
- Nuclei

## Capabilities

_The capabilities that matter for Cloud Security Software. "-" = undocumented, not absent._

| Capability | Supported |
|---|:--:|
| **Posture** | |
| CSPM (posture / misconfig) | ✗ |
| KSPM (Kubernetes posture) | ✗ |
| **Workload** | |
| CWPP (workload protection) | ✗ |
| **Entitlements** | |
| CIEM (entitlements) | ✗ |
| **Data** | |
| DSPM (data posture) | ✗ |
| **Pipeline** | |
| IaC / pipeline scanning | ✗ |
| **Architecture** | |
| Agentless scanning | ✓ |
| **Runtime** | |
| Runtime protection | ✗ |
| **Coverage** | |
| Cloud coverage | Web application and API security scanning, shadow/zombie API discovery, cloud mi |
| **Compliance** | |
| Compliance frameworks assessed | OWASP, CWE, SANS, PCI DSS, HIPAA, ISO 27001, GDPR |
| **Licensing** | |
| Open-core scanner available | - |

## Facts

Every value below carries its source and our confidence. Facts are re-crawled on a freshness schedule.

### integrations

| Attribute | Value | Source | Retrieved | Confidence |
|---|---|---|---|---|
| integrations.count | 15 | [link](https://zerothreat.ai/pricing) | 2026-08-18 | 60% (medium) |

### pricing

| Attribute | Value | Source | Retrieved | Confidence |
|---|---|---|---|---|
| pricing.free_tier | yes | [link](https://zerothreat.ai/pricing) | 2026-08-18 | 60% (medium) |
| pricing.model | freemium | [link](https://zerothreat.ai/pricing) | 2026-08-18 | 60% (medium) |
| pricing.price_level | high | [link](https://zerothreat.ai/pricing) | 2026-08-18 | 60% (medium) |
| pricing.starting_price | `{"amount":100,"currency":"USD"}` | [link](https://zerothreat.ai/pricing) | 2026-08-18 | 60% (medium) |
| pricing.transparent | yes | [link](https://zerothreat.ai/pricing) | 2026-08-18 | 60% (medium) |

### security

| Attribute | Value | Source | Retrieved | Confidence |
|---|---|---|---|---|
| security.iso27001 | yes | [link](https://zerothreat.ai/blog/explore-iso-27001-compliance-and-security) | 2026-08-18 | 75% (high) |
| security.gdpr | yes | [link](https://zerothreat.ai/blog/explore-iso-27001-compliance-and-security) | 2026-08-18 | 75% (high) |
| security.hipaa | yes | [link](https://zerothreat.ai/blog/explore-iso-27001-compliance-and-security) | 2026-08-18 | 75% (high) |
| security.pci | yes | [link](https://zerothreat.ai/blog/explore-iso-27001-compliance-and-security) | 2026-08-18 | 75% (high) |

### market

| Attribute | Value | Source | Retrieved | Confidence |
|---|---|---|---|---|
| market.availability | `{"hqCountry":"US","primaryMarkets":[],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` | [link](https://zerothreat.ai/pricing) | 2026-08-18 | 75% (high) |

---
*Source: Vioscale (https://www.vioscale.ai/software/zerothreat-ai). Independent, evidence-based software intelligence. Cite the canonical URI.*