ZeroThreat
ZeroThreat: Deep web and API coverage with flexible free, cloud, pay-per-scan, and on-premises options. Ranked #1 of 29 in Web Application Security Scanners by our editors (9.4/10); pricing: Free plan; best for budget-conscious teams needing deep coverage.
At a glance
- Editor score9.4 / 10
- PricingFree plan
- Best forBudget-conscious teams needing deep coverage
- Free planYes
- Paid from$100/mo
- Authenticated scansYes
- Facts checked19 Sep 2026
Where it wins
- Authenticated scanning supports login sequences and MFA workflows
- Covers REST, GraphQL, SOAP, and gRPC APIs
- Business-logic testing, retesting, and compliance reports are included
Where it doesn't
- The Free plan provides only 1 scan credit per month
- Professional Cloud starts at $100 per first host per month
- Several advanced capabilities are limited to enterprise plans
Our verdict on ZeroThreat
ZeroThreat is an AI-powered autonomous penetration-testing platform for web applications and APIs. It is designed for teams that need authenticated testing, API coverage, JavaScript application crawling, business-logic analysis, and remediation guidance across cloud or private deployments. Its coverage includes login sequences, MFA workflows, REST, GraphQL, SOAP, and gRPC APIs, along with CVE, OWASP, CWE/SANS, and Nuclei-based vulnerability coverage.
Pricing gives smaller teams several entry points. The Free plan costs $0 per month and includes 1 scan credit per month, a limited vulnerability-insight preview, web application and API coverage, and authenticated scanning. Professional Pay-Per-Scan costs $25 per scan, includes unlimited hosts, usage-based scanning, and a free one-week retest; a minimum purchase applies. Professional Cloud costs $100 per first host per month and adds unlimited scans for the subscribed target, scheduled scans, unlimited retests, and compliance coverage with audit-ready reports. Enterprise options add capabilities such as CI/CD and issue-tracking integrations, white-label reports, production-safe testing, optional static IP, private deployment, and Playwright-based UI flow automation.
ZeroThreat fits organizations testing complex applications rather than only basic public pages. Playwright rendering supports JavaScript single-page application crawling, while business-logic, authorization, and multi-step attack-path testing address workflows that narrower scanners may not cover. Scheduled scans, rate limiting, request pacing, and retesting support recurring security work, and integrations include GitHub Actions, GitLab CI/CD, Azure Pipelines, CircleCI, TeamCity, Jira, GitHub Issues, GitLab Issues, Trello, Slack, and Microsoft Teams. Choose it for broad web and API coverage with flexible deployment; teams seeking only lightweight, occasional page checks may not need its wider testing scope.
Your product? Our editors can test ZeroThreat in depth and publish a review, labelled as paid · from $149/mo →
ZeroThreat pricing
All 6 ZeroThreat plans and prices →
ZeroThreat fact sheet
| Free plan | Yes |
|---|---|
| Paid from | $100/mo |
| Deployment | Hybrid |
| Authenticated scans | Yes |
| JavaScript crawling | Yes |
| Scheduled scans | Yes |
| Compliance reports | Yes |
| API scanning | Yes |
| Target limit | Not verified |
| Deployment | Cloud, Browser extension, Self-hosted |
| Platforms | Web, Chrome extension |
| Integrations | 11 integrations: GitHub Actions, GitLab CI/CD, Azure Pipelines, CircleCI, TeamCity, Jira … |
| Pricing | Free plan (source) |
| Website | zerothreat.ai |
| Facts checked | 19 Sep 2026 |
ZeroThreat integrations
ZeroThreat lists 11 integrations on its own site.
- GitHub Actions
- GitLab CI/CD
- Azure Pipelines
- CircleCI
- TeamCity
- Jira
- GitHub Issues
- GitLab Issues
- Trello
- Slack
- Microsoft Teams
Alternatives to ZeroThreat
- Burp Suite DASTBroad, enterprise-focused DAST for authenticated web apps, APIs, and CI/CD workflows.9.3
- EscapeDeep testing for complex applications, APIs, workflows, and access controls.9.2
- OWASP ZAPA capable free scanner with broad automation, API support, and extensibility.9.1
See all ZeroThreat alternatives →
ZeroThreat vs the competition
- ZeroThreat vs Burp Suite DAST
- ZeroThreat vs Escape
- ZeroThreat vs OWASP ZAP
- ZeroThreat vs OpenText Fortify DAST
- ZeroThreat vs Beagle Security
- ZeroThreat vs Astra Security
Compare ZeroThreat with any tool side by side →
Also Ranked In
ZeroThreat is ranked in 2 of our directories.
Used ZeroThreat? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used ZeroThreat for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
ZeroThreat is listed in our Web Application Security Scanners directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/zerothreat/"><img src="https://www.itechguides.com/best/badge/zerothreat.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update