ZeroThreat

以下为收录时的原文，语言与页面不同，未做翻译。

ZeroThreat provides a cutting-edge DAST web app & API security scanner featuring secret, GraphQL scanning, and intelligent threat detection. It integrates smoothly with CI/CD pipelines for fast vulnerability assessment and robust proactive cybersecurity.

官网介绍

Protect Web apps & APIs with AI-powered scanning & automated pentesting. Ensure continuous security, compliance, and actionable remediation insights.

官方常见问题

What is ZeroThreat?

ZeroThreat is an AI-powered autonomous pentesting platform for web applications and APIs. It uses agentic AI agents for offensive security to autonomously discover endpoints, validate real exploit paths, and produce audit-ready remediation guidance, covering OWASP Top 10, OWASP API Top 10, CWE/SANS Top 25, and business logic flaws across 130,000+ vulnerabilities.

How is ZeroThreat different from a traditional DAST scanner?

Traditional DAST scanners match payloads against known patterns. ZeroThreat's business-logic-aware DAST reasons about your application's logic, chains multi-step attacks, and validates exploitability with reproducible proof, including BOLA, BFLA, and authenticated workflow attacks that scanners miss.

How long does a ZeroThreat scan take?

Most applications see initial findings within minutes. Full coverage completes in 30 minutes to 2 hours depending on application size, compare this to 2–4 weeks for a manual engagement.

Can I use my existing Burp Suite extensions and Nuclei templates?

Yes. ZeroThreat supports custom and community attack templates including Burp Suite extensions, Nuclei templates, and OWASP ZAP-compatible payloads, running natively alongside our agentic AI engine.

Is there a free plan? What's included?

Yes. ZeroThreat offers a free tier with 1 scan credit per month, with no credit card required. New accounts also receive 5 free scan credits (valid 15 days) on signup. Coverage includes web applications and APIs, OWASP Top 10 and CWE-based detection, authenticated scanning, and the same detection engine used in paid plans, with no setup required to start.

Do I need security expertise to use ZeroThreat?

No. ZeroThreat is designed for developers, startup founders, and engineering teams, not just security specialists. Zero-configuration onboarding means you enter a URL and the platform handles everything.