Loading the SOTA2 catalog…
ZeroPath
AI-Native SAST & AppSec Platform - unifies SAST, SCA, secrets detection, IaC security, PR reviews, policy engine, risk management, and AI agent workflow orchestration.
What is ZeroPath?
AI-Native SAST & AppSec Platform - unifies SAST, SCA, secrets detection, IaC security, PR reviews, policy engine, risk management, and AI agent workflow orchestration.
Product typeApplication, Cloud & Data Security
PricingStarting from $1,000/mo + $60/dev · Subscription, Usage Based
DeploymentSelf-hosted · On-premises
APINot available
What teams use ZeroPath for
SAST & SCA scanning
PR security reviews
Secrets detection
Infrastructure as Code security
AppSec risk management
AI bill of materials generation
Integrations and access
Platforms, integrations, and language support vary by plan and region. Confirm final requirements with the vendor.
Platforms
IntegrationsAPI and webhooks
Languages
Support
What reviewers say
Community reviewsReviews are owned and editable by their authors.
Sign in to reviewLoading community reviews…
Enterprise readiness
Compliance claims are normalized from current vendor documentation and independently reviewed by SOTA2.
SOC 2 Type II
Encryption at rest (AWS default encryption, AES-256)
Encryption in transit (Cloudflare, TLS 1.3)
Multi-party verification required for employee access to customer data
MFA required for all employees (Google Workspace)
API authentication via private/secret key pairs
Isolated Docker container per repository scan
Source code deleted automatically after 30 days
Comprehensive audit logs for sensitive actions
Annual third-party penetration testing
Active vulnerability disclosure program
Mandatory employee security training
Customer incident notification within 72 hours
Data retention:
Benchmarks and comparisons
Independent benchmarksStructured task results are being verified.
Side-by-side comparisonsComparison workspaces will be available in a later release.
