ZeroThreat is a dynamic application security testing (DAST) scanner aimed at development teams rather than dedicated security specialists. It crawls running web applications and APIs the way an attacker would, checking against a library of more than 40,000 vulnerability signatures and reporting what it finds with remediation guidance attached.
The product positions itself around reducing false positives, which is the practical failure mode of most automated scanners: a report full of noise gets ignored. ZeroThreat claims 98.9% detection accuracy with near-zero false positives, though as with any vendor-stated figure this is worth validating against your own application during a trial.
Founded in 2023 and headquartered in Carol Stream, Illinois, the company launched publicly at Web Summit 2024 in Lisbon. Pricing suits teams testing a small number of targets: a free tier covers one scan credit monthly, the Professional plan runs $100 a month per target with unlimited scans, and a pay-per-scan option at $25 per credit fits occasional use.
