Overview
News
Technologies
Salaries
Products
People
Growth
Offices
Financials
Overview
ZeroQuarry is an AI security operations platform for continuous application security testing, vulnerability validation, remediation, retesting, and customer evidence.
News
ZeroQuarry is finding security vulnerability chains in AI-reviewed code
iShortn, an open source URL shortener, was already using AI code review when the vulnerabilities ZeroQuarry found were introduced. The review found locally plausible concerns. It missed both attack paths.
Read more
Report
How Different AI Models Perform on Security Scans
A practical comparison of how different LLMs perform on cybersecurity scans, using real ZeroQuarry results from an open source March Madness project.
Read more
Report
Excalidraw security vulnerabilities in the Obsidian plugin
ZeroQuarry found serious Excalidraw plugin security vulnerabilities, including attacker-controlled script execution, and coordinated fixes with Obsidian and the maintainer.
Read more
Report
Opening a Markdown file could trigger RCE in an Obsidian plugin
ZeroQuarry identified a critical RCE path in the Obsidian Tasks plugin and coordinated responsible disclosure with Obsidian and the maintainer. This writeup explains the impact, disclosure process, and product-security tradeoff.
Read more
Report