ZeroPath
zeropath.com
Actively hiring
Penetration Testing
Cybersecurity AI
AI Agents
Application Security
As featured in
Follow
Overview
News
Salaries
Products
People
Growth
Offices
Financials
Funding and backers
Total raised
$7M
1 round on record
Latest round
$7M
Convertible Note · Jun 2024 · 2 yr ago
Team
1-10
employees, estimated range
Backers
2
Y Combinator, Crosspoint Capital Partners
The money's age
Long since its last round
27 months since the last round · not hiring
Momentum
30/100
in the news, rising traction
Last sign of life
this month
a posting or a news item
The story so fareach stage dated by its source: the company's releases, the press, registers, filings
May 12
Launched ZeroPath Launches Zero, the First AI Built to Run an Entire Application Security Program · YahooFinance
Jan 21, 2025
Launched ZeroPath debuts AI-driven code security tool · investing.com
Jun 17, 2024
Raised a round Convertible Note $7M · SEC Form D
Jun 2024
Went through Y Combinator
2024
Founded
Tractionpublic signals, read monthly
Web presence
top 0.33%
of 133.2M domains by links, Common Crawl
Hacker News stories
10
best: 11 points
Funding rounds
| Round | Date | Amount | Investors | Source |
|---|---|---|---|---|
| Convertible Note | Jun 2024 | $7M | — | SEC Form D |
Registers and programsofficial lists and records that name the company
| Legal entity | ZeroPath Corp. | SEC Form D |
Backed byfrom the funds' portfolios and accelerator catalogs
Y Combinator 
Crosspoint Capital Partners Investors in similar startupsfunds that back the companies most like this one
Similar startupsby what they do, their industry and backers
PortSwigger offers tools for web application security, testing, & scanning. Choose from a range of security tools, & identify the very…
Headquartered in San Francisco, California, Depthfirst is an AI-native application security company providing software risk detection and…
Seezo is an AI-native application security company that helps engineering and AppSec teams perform contextual, explainable, and…
Hacktron AI is a security company building a system that autonomously reviews code, finds vulnerabilities and writes exploits. Its small…
AI penetration testing and autonomous security platform that tests your code, APIs, cloud, and infrastructure — and delivers validated…
Sybil builds artificial intelligence penetration testing agents that probe live web applications for exploitable weaknesses. Founded in…
Overview
ZeroPath applies artificial intelligence agents to application security testing, reasoning about code the way a human auditor would. Founded in 2024 in San Francisco, it targets the false positive problem that makes conventional scanners hard to adopt. The system produces proof-of-concept exploits alongside its findings.
News
Security Compass firma parceria com ZeroPath para oferecer segurança holística de aplicativos em todo o ciclo de vida do desenvolvimento de IA
Read more
Report
Security Compass Partners with ZeroPath to Offer Holistic Application Security Across the AI Development Lifecycle - AOL
Read more
Report
Security Compass Partners with ZeroPath to Offer Holistic Application Security Across the AI Development Lifecycle
Read more
Report
Security Compass Partners with ZeroPath to Offer Holistic Application Security Across the AI Development Lifecycle
Read more
Report
ZeroPath Launches Zero, the First AI Built to Run an Entire Application Security Program
SAN FRANCISCO, May 12, 2026--ZeroPath, the AI-native application security platform that autonomously finds, verifies, and fixes exploitable vulnerabilities, today announced the launch of Zero, a persistent AI agent that fully integrates into company secur
Read more
Report
CVE-2026-42167 Allows Auth Bypass And RCE In ProFTPD - ZeroPath Blog
ZeroPath Research discovered a SQL injection in ProFTPD's mod_sql extension (CVE-2026-42167) that can allow remote code execution, authentication bypass, and privilege escalation depending on configuration - exploitable pre-auth in some cases. Affects Pro
Read more
Report
Critical Spinnaker Vulns Allow RCE And Production Compromise - ZeroPath Blog
ZeroPath Research discovered two separate RCE vulnerabilities in Spinnaker (CVE-2026-32604 and CVE-2026-32613) that let low-privilege authenticated users execute code on Clouddriver and Echo, enabling credential theft and pivots into production cloud envi
Read more
Report
Unpatched RAGFlow Vulnerability Allows Post-Auth RCE - ZeroPath Blog
A currently-unpatched vulnerability in RAGFlow 0.24 allows low-privilege authenticated users to execute arbitrary code on instances using Infinity for chunk storage. We walk through the discovery, exploitation, and our disclosure process.
Read more
Report
Benchmarking Opus 4.6 For Vuln Detection: Flashes Of Brilliance But Lots of Noise - ZeroPath Blog
We tested Opus 4.6 against 435 known vulnerable C functions from real CVEs. With good prompting and tools, it found up to 28.5% of vulnerabilities - impressive compared to human review, but with high false positive rates and inconsistency that underline t
Read more
Report
ZeroPath Scales AI-Native Application Security for the Modern Development Era
SAN FRANCISCO, March 13, 2026--ZeroPath named Top 10 finalist in RSAC 2026 Innovation Sandbox, showcasing AI-native technology that autonomously finds and fixes vulnerabilities.
Read more
Report
Show more news
People
Dean Valentine
Director
Nathan Hrncirik
Director
Etienne Lunetta
Director
Raphael Karger
Director
Names and roles come from public filings, company registers and the company's own site. Is this you? Correct or remove · How we handle this data
Offices
Where the company hires and what each office is for
Cities
1
Hiring now
0
Countries
1
San Francisco
United States
HQ
1-10 est. staff
Financials
Total raised
$7M
Latest round
Convertible Note
Funding rounds
1
Funding rounds
| Round | Announced | Amount | |
|---|---|---|---|
| Convertible Note | 2024 | $7M | Details |