ZeroPath
by ZeroPath
AI-native SAST with PR reviews and one-click autofix
Reviewed by the the30top research team · Last reviewed 2026-10-27
Overview
ZeroPath is an AI-native application security platform covering SAST, SCA, secrets, IaC and PR reviews, with SAST autofix that generates patches and runtime validation of exploitable findings. It connects to GitHub, GitLab, Bitbucket, Azure DevOps and Jira, Linear and Slack. There is no self-serve free plan, and the Team plan starts at $1,000 a month plus $60 per developer, which prices out small teams.
Our verdict
A credible AI SAST option for security teams that need to find logic flaws and want patches generated. The $1,000 monthly floor makes it a poor fit for small teams.
Best for
Security teams at mid-size and larger companies that want AI SAST with PR review.
Avoid if
You are a small team that needs a free or low-cost plan.
Pros
- Targets business logic and auth flaws
- Autofix generates patches
- On-prem and BYOK on Enterprise
Cons
- High entry price
- No self-serve free plan
- Compliance certifications not stated on the pages reviewed
Key capabilities
Frequently asked questions
How much does ZeroPath cost?
Team starts from $1,000 a month plus $60 per developer. A pay-per-scan credits option and a custom Enterprise plan also exist.
Does ZeroPath review pull requests?
Yes. PR reviews and one-click autofix are listed on the Credits and Team plans.
Can it run on-prem?
Enterprise offers on-prem, self-hosted or private cloud deployment with bring your own LLM keys.