No. 6 of 31 ·Web Application Security Scanners

ZeroThreat

Web · API · paid plans from $100/mo

Freedom report

Two barsScore 6.4

Free tierA free tier is on its own pricing page
Open codeNo open-source code on record
Runs widely1 of 6 device platforms
DocumentedPlans, terms and facts published

ZeroThreat is ranked #6 of 31 in web application security scanners on Freedom251. It runs on API, Web. There is a free plan. A free trial is offered. Paid plans start at $100/mo.

ZeroThreat plans and pricing

All plans

Free Free 5 free scan credits on sign-up, valid for 15 days 1 scan credit per month · 1 target per account · limited vulnerability-insights preview · web applications and APIs zerothreat.ai · 30 Sept 2026

Professional $100/mo Monthly; additional targets @ $75 each; annual option saves 20% Target-based unlimited scans · scheduled scans · 130K+ vulnerability coverage · unlimited retesting · 30-day target-URL cooling zerothreat.ai · 30 Sept 2026

Pay Per Scan $125 once 5 credits; credits valid for 1 year; volume discounts up to 20% Unlimited targets · 7-day unlimited retest window · point-in-time compliance reporting zerothreat.ai · 30 Sept 2026

Compared on web application security scanners

Free plan: Yes
Deployment: hybrid

Best ZeroThreat alternatives

See all 20

Two bars Nuclei Free tier No. 1Free6.6 Two bars OWASP ZAP Free tier No. 2Free6.5 Two bars Wapiti Free tier No. 3Free6.5 One bar Beagle Security Free tier No. 4$99/mo6.4 No signal Qualys External Attack Surface Management Paid plans No. 5—6.4 One bar ImmuniWeb Paid plans No. 7€49.58/mo5.6

The record

Product: ZeroThreat is an AI-powered autonomous penetration-testing platform that continuously discovers, exploits, and validates vulnerabilities across web applications and APIs.
Exploit validation: The platform provides reproducible exploit proof with request/response evidence and exact payloads for findings.
Web testing: Web-app pentesting supports authenticated workflows, SSO, MFA, role-based access, and Playwright rendering for React, Vue, and Angular SPAs.
API testing: API pentesting covers REST, GraphQL, SOAP, and gRPC APIs, including internal APIs, shadow endpoints, BOLA, and BFLA.
Coverage: ZeroThreat states that it detects more than 130,000 vulnerabilities, including OWASP, CWE/SANS, Nuclei, and monthly updated CVE intelligence.
Integrations: Integrations include GitHub Actions, GitLab, Jenkins, Azure Pipelines, CircleCI, TeamCity, AWS CI/CD, Bamboo, Travis CI, Jira, Asana, Slack, and Microsoft Teams.
Integration methods: Integrations connect through native connectors, APIs, or webhooks, with no-code guided setup and API or CLI customization.
Security standards: ZeroThreat states that it complies with GDPR, HIPAA, and PCI DSS and aligns its security measures with ISO 27001 guidelines.
Security controls: The security architecture describes IAM, MFA, network segmentation, TLS 1.3 in transit, Azure Key Vault encryption at rest, and continuous monitoring.
Use cases: ZeroThreat presents use cases for enterprise security teams, DevOps and security teams, SaaS companies, developers, MSSPs, and startups.
Scan timing: The pricing FAQ says scans typically complete in 30 minutes to 2 hours depending on the application, with scans starting within minutes.
Documentation: ZeroThreat provides a Help Center with getting-started, quick-scan, authenticated-scan, and login-sequence documentation.
Company identity: The legal entity is ZeroThreat, Inc., a U.S.-registered corporation.
Headquarters: United States
Price from: $100/mo

Where it ranks on Freedom251

Best Web Application Security Scanners in 2026#6 of 31
Best API Security Testing Software in 2026#8 of 27

Is ZeroThreat yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote ZeroThreat

Sources

zerothreat.ai/what-is-zerothreat· checked 30 Sept 2026
zerothreat.ai· checked 30 Sept 2026
zerothreat.ai/pricing· checked 30 Sept 2026
zerothreat.ai/integrations· checked 30 Sept 2026
zerothreat.ai/solution-security· checked 30 Sept 2026
help.zerothreat.ai/docs· checked 30 Sept 2026
zerothreat.ai/terms-of-use· checked 30 Sept 2026