ZeroThreat review
Deep web and API coverage with flexible free, cloud, pay-per-scan, and on-premises options.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
ZeroThreat is an AI-powered autonomous penetration-testing platform for web applications and APIs. It is designed for teams that need authenticated testing, API coverage, JavaScript application crawling, business-logic analysis, and remediation guidance across cloud or private deployments. Its coverage includes login sequences, MFA workflows, REST, GraphQL, SOAP, and gRPC APIs, along with CVE, OWASP, CWE/SANS, and Nuclei-based vulnerability coverage.
Pricing gives smaller teams several entry points. The Free plan costs $0 per month and includes 1 scan credit per month, a limited vulnerability-insight preview, web application and API coverage, and authenticated scanning. Professional Pay-Per-Scan costs $25 per scan, includes unlimited hosts, usage-based scanning, and a free one-week retest; a minimum purchase applies. Professional Cloud costs $100 per first host per month and adds unlimited scans for the subscribed target, scheduled scans, unlimited retests, and compliance coverage with audit-ready reports. Enterprise options add capabilities such as CI/CD and issue-tracking integrations, white-label reports, production-safe testing, optional static IP, private deployment, and Playwright-based UI flow automation.
ZeroThreat fits organizations testing complex applications rather than only basic public pages. Playwright rendering supports JavaScript single-page application crawling, while business-logic, authorization, and multi-step attack-path testing address workflows that narrower scanners may not cover. Scheduled scans, rate limiting, request pacing, and retesting support recurring security work, and integrations include GitHub Actions, GitLab CI/CD, Azure Pipelines, CircleCI, TeamCity, Jira, GitHub Issues, GitLab Issues, Trello, Slack, and Microsoft Teams. Choose it for broad web and API coverage with flexible deployment; teams seeking only lightweight, occasional page checks may not need its wider testing scope.
ZeroThreat pros and cons
- Where it wins
- Authenticated scanning supports login sequences and MFA workflows
- Covers REST, GraphQL, SOAP, and gRPC APIs
- Business-logic testing, retesting, and compliance reports are included
- Where it doesn't
- The Free plan provides only 1 scan credit per month
- Professional Cloud starts at $100 per first host per month
- Several advanced capabilities are limited to enterprise plans
ZeroThreat fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update