ZeroThreat
ZeroThreat is an AI-driven automated pentesting and DAST platform for web apps and APIs (REST, GraphQL, SOAP, gRPC) with published per-target and per-credit pricing.
Visit ZeroThreat Back to comparison
Last checked 9 November 2026. Facts come from ZeroThreat's own public pages, linked below.
At a glance
| Type | Autonomous testing platform |
|---|---|
| Headquarters | Not published |
| Services listed | Web application penetration testing, API penetration testing, Vulnerability assessment source |
| Delivery | automated AI-driven automated scanning and pentesting of web apps and APIs; agentic AI pentesting is labelled 'Upcoming' in the menu. |
| Scope | Web apps: yes APIs: yes Cloud: not published Network: not published Mobile: not published AI apps: not published |
| Pricing model | published |
| Turnaround | Not published No time to first finding or report is stated on the page. source |
| Retesting | Professional: unlimited retesting. Pay Per Scan: unlimited retesting within 7 days. Free: not included. source |
| Sample report | not published |
| Compliance mentioned | OWASP, PCI DSS, HIPAA, ISO 27001, GDPR |
| Integrations | GitHub Actions, GitLab CI/CD, Azure Pipelines, CircleCI, TeamCity, Jira, Slack, Microsoft Teams |
Pricing
| Plan or item | Price | Unit | What it covers |
|---|---|---|---|
| Professional | $100 | per target per month | Unlimited scans per target, authenticated scanning, business logic and access control tests, unlimited retesting, scheduling. Extra targets $75 each. Annual billing saves 20%. source |
| Pay Per Scan | $125 | for 5 scan credits ($25 per credit, valid 1 year) | Any number of targets; unlimited retesting within 7 days; volume discounts of 5% to 20% for larger credit packs. source |
| Free | $0 | 1 scan credit per month, 1 target | Partial view of findings; 5 sign-up credits valid 15 days; no retesting. source |
Enterprise has no listed price. A 'target' is a domain or subdomain scanned separately. Cloud misconfiguration findings are listed as a result type, not a cloud pentest.
Credentials
No credentials with public evidence found.
Our assessment
Editorial judgment by Excession Labs, based on the facts above. Not a rating.
Good fit when
Small teams that want a low, published monthly or per-scan price for repeated automated web and API testing with unlimited retests.
Tradeoffs
Automated scanning only; no sample report is offered. The site claims SOC 2 Type II and ISO 27001 'compliance' without an auditor or certificate link, so no credential is listed. No headquarters is named (two US addresses are shown).
Sources
- ZeroThreat homepage (checked 9 November 2026)
- ZeroThreat pricing (checked 9 November 2026)
See something wrong or out of date? Send a correction.
Compare with
- EquixlyEquixly offers autonomous AI penetration testing and AI red teaming for web apps, APIs, GenAI/LLM systems and MCP servers, run continuously.
- HadrianHadrian Nova runs AI agent pentests against an application or environment the customer defines. Results stream live and a compliance-mapped PDF report is…
- Horizon3.ai (NodeZero)NodeZero is an autonomous pentesting platform covering internal, external, cloud, Kubernetes and Active Directory testing, with a newer web application…
- NoveeNovee is an AI penetration testing platform built on its own offensive security model. It targets web and internal apps, mobile apps and their APIs, AI apps…