ZeroPath Reviews & Product Details

What stands out most about ZeroPath is how accurate its source-to-sink analysis is—it makes triaging much quicker. The auto-generated patches are also surprisingly reliable, and we’ve been able to merge most of them with little to no modification. Review collected by and hosted on G2.com.

The dashboard has a few rough edges, mostly minor UI issues. That said, the team is responsive and tends to fix things quickly when they’re reported. Review collected by and hosted on G2.com.

ZeroPath is both very easy to use and demonstrates results far superior to market competitors (Fortify SAST, Checkmarx, Aikido Security, and QINA AI Security (CloudDefense)). ZeroPath includes an API, a CLI, and a web interface that are very easy to use and integrate with the vast majority of professional software. Review collected by and hosted on G2.com.

ZeroPath is a startup working on a very innovative subject that is not even mature in research yet, its only flaw is not being able to cover certain very specific cases of vulnerabilities. Review collected by and hosted on G2.com.

Their source-to-sink analysis is extremely precise, which speeds up triaging significantly. The auto-generated patches are effective as well, unlike those from other tools we've used, and we've been able to merge most of them with very few modifications Review collected by and hosted on G2.com.

The dashboard has a few minor UI quirks, but nothing serious. When I report an issue, they usually address it pretty quickly. Review collected by and hosted on G2.com.

The finding quality is significantly better than what we were getting from Semgrep, Snyk, and Aikido. It actually catches real vulnerabilities, and false positives are pretty low. CI/CD integration was smooth, and when we needed something custom for our stack, their team just built it for us. Review collected by and hosted on G2.com.

The product can seem to move fast. New features and changes ship frequently, so the UI/workflow shifts from time to time. Review collected by and hosted on G2.com.

Compared to Semgrep, Snyk, and Aikido, the results are far more accurate and actually surface real issues without drowning us in false alarms. The CI/CD setup was seamless, and whenever we needed something specific to our stack, their team quickly made it happen. Review collected by and hosted on G2.com.

UI keeps changing very fast since the product is changing rapidly. Review collected by and hosted on G2.com.

- Finds serious security vulnerabilities including business logic bugs that other scanners miss.

- Extremely easy to use. Started working in like 4 clicks. Github integration is seamless and easy to set up.

- Support is really really fast. Review collected by and hosted on G2.com.

- They still have quite a few small bugs, but the team fixes them quickly when they come up. Review collected by and hosted on G2.com.

We've trialed a few other SAST tools (Semgrep, Aikido) and ZeroPath found the most critical stuff by a pretty wide margin. The detail it gives you on each finding is solid and the false positive rate has been pretty low for us, which makes a huge difference when trying to get engineers to actually fix these issues. Review collected by and hosted on G2.com.

Scan times can run a bit long, but once we figured out the scheduling scanning feature, it became a non-issue Review collected by and hosted on G2.com.

Zeropath is surprisingly effective at identifying real security issues and has a much better signal to noise ratio compared to other SAST tools I have tried. Review collected by and hosted on G2.com.

The product is new and rapidly changing, we encountered some bugs with the dashboard. The Zeropath team was very responsive in fixing those issues. Review collected by and hosted on G2.com.

This solution is particularly interesting as it provides an innovative approach to improving security baselines by overcoming some of the limitations of pure SAST tools. The customer experience is also positive, as they are open to feature requests and see feedback being taken on and addressed. Review collected by and hosted on G2.com.

In my opinion, the trade-off of working with a startup is that the product evolves rapidly and may encounter bugs. However, as a startup to startup, I actually take this positively, as it allows for a more seamless integration of the feedbacks. Review collected by and hosted on G2.com.

The scanning results are pretty good on business logic flaws Review collected by and hosted on G2.com.

The scanning result consistency - basically every time I did a scan I had diferent results Review collected by and hosted on G2.com.