# ZeroThreat: pentest scope, pricing and delivery

Source: https://pentestcompare.com/providers/zerothreat/
Publisher: Excession Labs (pentestcompare.com)
Last updated: 2026-11-09

ZeroThreat at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.

ZeroThreat is an AI-driven automated pentesting and DAST platform for web apps and APIs (REST, GraphQL, SOAP, gRPC) with published per-target and per-credit pricing.
- Website: https://zerothreat.ai/
- Type: Autonomous testing platform
- Headquarters: Not published
- Services listed: web-app, api, vuln-assessment
- Delivery: automated. AI-driven automated scanning and pentesting of web apps and APIs; agentic AI pentesting is labelled 'Upcoming' in the menu.
- Scope: Web apps yes; APIs yes; Cloud partial; Network unknown; Mobile unknown; AI apps unknown
- Pricing model: published
  - Professional: $100 per target per month (Unlimited scans per target, authenticated scanning, business logic and access control tests, unlimited retesting, scheduling. Extra targets $75 each. Annual billing saves 20%.) https://zerothreat.ai/pricing
  - Pay Per Scan: $125 for 5 scan credits ($25 per credit, valid 1 year) (Any number of targets; unlimited retesting within 7 days; volume discounts of 5% to 20% for larger credit packs.) https://zerothreat.ai/pricing
  - Free: $0 1 scan credit per month, 1 target (Partial view of findings; 5 sign-up credits valid 15 days; no retesting.) https://zerothreat.ai/pricing
- Pricing note: Enterprise has no listed price. A 'target' is a domain or subdomain scanned separately. Cloud misconfiguration findings are listed as a result type, not a cloud pentest.
- Turnaround: Not published (No time to first finding or report is stated on the page.)
- Retesting: Professional: unlimited retesting. Pay Per Scan: unlimited retesting within 7 days. Free: not included.
- Sample report: not published 
- Credentials: None with public evidence found
- Compliance mentioned: OWASP, PCI DSS, HIPAA, ISO 27001, GDPR
Good fit when: Small teams that want a low, published monthly or per-scan price for repeated automated web and API testing with unlimited retests.
Tradeoffs: Automated scanning only; no sample report is offered. The site claims SOC 2 Type II and ISO 27001 'compliance' without an auditor or certificate link, so no credential is listed. No headquarters is named (two US addresses are shown).
Last checked: 2026-11-09
Sources:
- ZeroThreat homepage: https://zerothreat.ai/ (checked 2026-11-09)
- ZeroThreat pricing: https://zerothreat.ai/pricing (checked 2026-11-09)