Security Startups
← Directory

ZeroPath

AI-native SAST for business logic, auth bypasses, and chained exploit paths, with generated patches.

Proof of life. Named an RSAC 2026 Innovation Sandbox Top 10 finalist

ZeroPath models how services, auth, and data actually flow across repos, then flags issues that look like a human review finding rather than a Semgrep rule hit. It has published research on curl, sudo, and OpenSSL, which is the credibility play against LLM scanners that hallucinate XSS in tests. Autofix and PR review sit on top of the same engine. YC S24.

Category
Application security
Headquarters
San Francisco, USA
Country
USA
Founded
2024
Funding stage
Seed
Total funding
n/a
Website
https://zeropath.com

Investors

Y CombinatorSurgePoint Capital

Tags

SeedUSA

Proof-of-life verified against this source. Outbound clicks are tokenized for directory analytics.