--- title: ZeroPath Reviews meta\_title: 'ZeroPath Reviews 2026: Details, Pricing, & Features | G2' meta\_description: Filter 11 reviews by the users' company size, role or industry to find out how ZeroPath works for a business like yours. aggregate\_rating: rating\_value: 4.5 review\_count: 11 scale: '5' date\_modified: '2026-08-07' parent\_category: name: "DevSecOps\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t" url: https://www.g2.com/categories/devsecops --- # ZeroPath Reviews & Product Details Visit Website ZeroPath (YC S24) is the first AI-native application security platform that fundamentally reimagines how organizations find and fix vulnerabilities. Unlike deterministic SAST tools that bolt AI onto legacy rule engines, ZeroPath was built from the ground up to combine large language models with advanced program analysis (AST, data flow, taint tracking) by Ex-Tesla Red Team and Google Security engineers. ZeroPath's core differentiation is detecting critical vulnerabilities that pattern-matching SAST fundamentally cannot find. It catches IDORs, authorization bypasses, race conditions, and authentication bugs by reasoning about application behavior and developer intent. This capability achieved a 92% alert reduction when triaging findings from legacy tools. ZeroPath is best suited for enterprises and startups that want a complete appsec experience with: AI-powered SAST across 16+ languages, SCA with exploitability analysis (90% noise reduction by determining if dependency CVEs are actually reachable in your code), secrets detection with validation, IaC scanning for Terraform/CloudFormation/Kubernetes, and natural language security policies. Context-aware autopatch generation fixes 70% of vulnerabilities automatically with framework-specific patches that match your coding standards. To keep the developer experience seamless, ZeroPath integrates into existing workflows with zero configuration. It provides Sub-60-second PR scans on GitHub, GitLab, Bitbucket, and Azure DevOps to provide instant security feedback without blocking development. Developers receive clear explanations, one-click fixes, and can refine patches using natural language commands directly in PR comments. The platform automatically attributes vulnerabilities to responsible developers and syncs bidirectionally with Jira, Linear, and more. Overall, less noise, along with the breadth of integrations, has already made security teams faster in triaging and finding real vulnerabilities. Having been security engineers ourselves, we also understand how important visibility is for the evaluations. ZeroPath users get executive dashboards with real-time MTTR tracking, automated compliance reporting for SOC2 and ISO27001, and risk-based prioritization using CVSS 4.0 scoring. The platform provides complete visibility across organizational repositories, including security models, authentication patterns, and filtering logic, without manual configuration. Our research team dogfeeds our own technology and has discovered CVE-2025-61928 (critical account takeover in better-auth with 300k+ weekly downloads), identified 170+ verified bugs in curl, found 7 vulnerabilities in django-allauth enabling account impersonation, and discovered 0-days in production systems at Netflix, Hulu, and Salesforce. Currently trusted by 750+ companies running 200k+ scans monthly, ZeroPath delivers what security-conscious engineering teams need: more real vulnerabilities, dramatically less noise, and automated fixes that actually work. * * * Product Website ZeroPath Seller [ZeroPath](https://www.g2.com/sellers/zeropath) Discussions [ZeroPath Community](https://www.g2.com/products/zeropath/discuss) Languages Supported English Overview by Etienne L Show More ## Pricing Pricing provided by ZeroPath. ### Core $200.00 Per Month [ View More Pricing Information ](https://www.g2.com/products/zeropath/pricing) ## ZeroPath Integrations (25) What do users say about integrations? Verified by ZeroPath [ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Aikido Security ](https://www.g2.com/products/aikido-security/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Android Studio ](https://www.g2.com/products/android-studio/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Asana ](https://www.g2.com/products/asana/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Azure DevOps Server ](https://www.g2.com/products/azure-devops-server/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Azure Pipelines ](https://www.g2.com/products/azure-pipelines/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Bitbucket ](https://www.g2.com/products/bitbucket/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Cursor ](https://www.g2.com/products/cursor/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Delve ](https://www.g2.com/products/delve-delve/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") GitHub ](https://www.g2.com/products/github/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") GitLab ](https://www.g2.com/products/gitlab/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") IntelliJ IDEA ](https://www.g2.com/products/intellij-idea/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Jira ](https://www.g2.com/products/jira/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Kotlin ](https://www.g2.com/products/kotlin/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Laravel ](https://www.g2.com/products/laravel/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Linear ](https://www.g2.com/products/linear/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Python ](https://www.g2.com/products/python/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Semgrep ](https://www.g2.com/products/semgrep/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Slack ](https://www.g2.com/products/slack/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Snyk ](https://www.g2.com/products/snyk/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") SonarQube ](https://www.g2.com/products/sonarqube/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Sprinto ](https://www.g2.com/products/sprinto-inc/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") TypeScript ](https://www.g2.com/products/typescript/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Visual Studio ](https://www.g2.com/products/visual-studio/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Visual Studio Code ](https://www.g2.com/products/visual-studio-code/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Windsurf ](https://www.g2.com/products/exafunction-windsurf/reviews) Show More ![Maxime J.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Maxime J.") MJ Maxime J. Ingénieur Cybersécurité Small-Business (50 or fewer emp.) 2/4/2026 "ZeroPath: ease of use and results superior to the competition" 4/5 What do you like best about ZeroPath? ZeroPath is both very easy to use and demonstrates results far superior to market competitors (Fortify SAST, Checkmarx, Aikido Security, and QINA AI Security (CloudDefense)). ZeroPath includes an API, a CLI, and a web interface that are very easy to use and integrate with the vast majority of professional software. Review collected by and hosted on G2.com. What do you dislike about ZeroPath? ZeroPath is a startup working on a very innovative subject that is not even mature in research yet, its only flaw is not being able to cover certain very specific cases of vulnerabilities. Review collected by and hosted on G2.com. What problems is ZeroPath solving and how is that benefiting you? ZeroPath detects vulnerabilities in source code (whether application or operational) thanks to a detection engine powered by LLM. Thanks to this emerging technology, they rise above their competitors. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: Seller inviteAI Translated ![Manisha A.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Manisha A.") MA Manisha A. Relationship Manager Small-Business (50 or fewer emp.) 2/26/2026 "Accurate Findings, Seamless CI/CD Setup, and a Responsive Team" 4/5 What do you like best about ZeroPath? Compared to Semgrep, Snyk, and Aikido, the results are far more accurate and actually surface real issues without drowning us in false alarms. The CI/CD setup was seamless, and whenever we needed something specific to our stack, their team quickly made it happen. Review collected by and hosted on G2.com. What do you dislike about ZeroPath? UI keeps changing very fast since the product is changing rapidly. Review collected by and hosted on G2.com. What problems is ZeroPath solving and how is that benefiting you? We use ZeroPath for SAST and SCA, and it helps our security and development teams move much faster. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: Seller invite ![Verified User in Retail](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Retail") CR Verified User in Retail Enterprise (\> 1000 emp.) 2/9/2026 "Excellent product with space to improve even more" 3.5/5 What do you like best about ZeroPath? The scanning results are pretty good on business logic flaws Review collected by and hosted on G2.com. What do you dislike about ZeroPath? The scanning result consistency - basically every time I did a scan I had diferent results Review collected by and hosted on G2.com. What problems is ZeroPath solving and how is that benefiting you? Basically they are solving appsec problem when you have to deal with all false positives traditional tools have Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: Seller invite ![Verified User in Computer & Network Security](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Computer & Network Security") UC Verified User in Computer & Network Security 2/10/2026 "Great replacement to traditional SAST & white-box pentests" 4/5 What do you like best about ZeroPath? Primarily just the findings. They are mostly legitimate and pretty easy to understand. Would have been difficult to find otherwise. Review collected by and hosted on G2.com. What do you dislike about ZeroPath? Pricing doesn't make sense for my organization at the moment. Review collected by and hosted on G2.com. What problems is ZeroPath solving and how is that benefiting you? General problems with normal SAST, hard to manage, too many false positives Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerSource: In-app ## Pricing Options Pricing provided by ZeroPath. ### Core $200.00 Per Month ### Enterprise Contact Us Per Year ### Free Free Per Month [ View More Pricing Information ](https://www.g2.com/products/zeropath/pricing) ## Top-Rated Alternatives [ ![GitHub](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "GitHub") GitHub 4.7/5(2,397) ](https://www.g2.com/products/github/reviews) [ ![GitLab](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "GitLab") GitLab 4.5/5(901) ](https://www.g2.com/products/gitlab/reviews) [ ![Wiz](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Wiz") Wiz 4.7/5(842) ](https://www.g2.com/products/wiz-wiz/reviews) [ View All Alternatives ](https://www.g2.com/products/zeropath/competitors/alternatives) ##### Categories on G2 [Vulnerability Scanner](https://www.g2.com/categories/vulnerability-scanner)[Software Composition Analysis](https://www.g2.com/categories/software-composition-analysis)[Static Application Security Testing (SAST)](https://www.g2.com/categories/static-application-security-testing-sast) [Vulnerability Scanner](https://www.g2.com/categories/vulnerability-scanner)[Software Composition Analysis](https://www.g2.com/categories/software-composition-analysis)[Static Application Security Testing (SAST)](https://www.g2.com/categories/static-application-security-testing-sast)[Secure Code Review](https://www.g2.com/categories/secure-code-review)[Static Code Analysis](https://www.g2.com/categories/static-code-analysis)[Software Supply Chain Security Tools](https://www.g2.com/categories/software-supply-chain-security-tools) [Show MoreShow Less](javascript:void(0);) ##### Explore More [What tool integrates mobile analytics with marketing platforms?](https://www.g2.com/discussions/what-tool-integrates-mobile-analytics-with-marketing-platforms)[Which conversation intelligence app is the best](https://www.g2.com/discussions/which-conversation-intelligence-app-is-the-best)[Which live chat software is best for ecommerce](https://www.g2.com/discussions/which-live-chat-software-is-best-for-e-commerce-teams) [Top-rated ERP service for IT companies](https://www.g2.com/discussions/top-rated-erp-service-for-it-companies)[best contact center software](https://www.g2.com/discussions/what-s-the-top-contact-center-software)[Pros and Cons Details](https://www.g2.com/products/zeropath/reviews?qs=pros-and-cons) [Show MoreShow Less](javascript:void(0);)