+
+

Related Products

  • Aikido Security
    364 Ratings
    Visit Website
  • Feroot
    33 Ratings
    Visit Website
  • EZO AssetSonar
    118 Ratings
    Visit Website
  • 10Duke Enterprise
    8 Ratings
    Visit Website
  • Setyl
    48 Ratings
    Visit Website
  • Nalpeiron Zentitle
    31 Ratings
    Visit Website
  • ManageEngine Endpoint Central
    3,347 Ratings
    Visit Website
  • DriveStrike
    25 Ratings
    Visit Website
  • Parasoft
    152 Ratings
    Visit Website
  • Reflectiz
    34 Ratings
    Visit Website

About

Debricked's tool enables for increased use of Open Source while keeping associated risks at bay, making it possible to keep a high development speed while still staying secure. The service runs on state of the art machine learning, allowing the data quality to be outstanding as well as instantly updated. High precision (over 90% in supported languages) in combination with flawless UX and scalable automation features makes Debricked one of a kind and the way to go for open source management. Recently, debricked released their new platform by the name of Open Source Select where open source projects can be compared, evaluated and monitored to ensure high quality and community health.

About

ZeroPath (YC S24) is an AI-native application security platform that delivers comprehensive code protection beyond traditional SAST. Founded by security engineers from Tesla and Google, ZeroPath combines large language models with advanced program analysis to find and automatically fix vulnerabilities. ZeroPath provides complete security coverage: 1. AI-powered SAST for business logic flaws & broken authentication 2. SCA with reachability analysis 3. Secrets detection and validation 4. Infrastructure as Code 5. Automated patch generation. any more... ZeroPath delivers 2x more real vulnerabilities with 75% fewer false positives. Our research team has been successful in finding vulns like critical account takeover in better-auth (CVE-2025-61928, 300k+ weekly downloads), identifying 170+ verified bugs in curl, and discovering 0-days in production systems at Netflix, Hulu, and Salesforce. Trusted by 750+ companies and performing 200k+ code scans monthly.

Platforms Supported

Windows Supported
Mac Supported
Linux Supported
Cloud Supported
On-Premises Not Supported
iPhone Not Supported
iPad Not Supported
Android Not Supported
Chromebook Not Supported

Platforms Supported

Windows Not Supported
Mac Not Supported
Linux Not Supported
Cloud Supported
On-Premises Supported
iPhone Not Supported
iPad Not Supported
Android Not Supported
Chromebook Not Supported

Audience

Software developers, security managers, software managers

Audience

Teams seeking a solution to enhance their application security processes without compromising development speed

Support

Phone Support Not Supported
24/7 Live Support Not Supported
Online Not Supported

Support

Phone Support Supported
24/7 Live Support Supported
Online Supported

API

Offers API Supported

API

Offers API Supported

Screenshots and Videos

Screenshots and Videos

Pricing

Free
Free tier: for smaller companies or independent developers, with a scan limit of 500 scans/month (with an initial 1000 scans to start).

Premium: 25 €/contributing developer, no scan limit

Enterprise: custom
Free Version Supported
Free Trial Supported

Pricing

Free
- Free personal plan (free forever, incl. 1 repo, unlimited PR scans and more).

- Core plan (Platform fee: $200/month, up to 25 repos, unlimited PR scans and patches, integration w/ Jira, Linear, and more).

- Enterprise plan for organizations with advanced needs.
Free Version Supported
Free Trial Supported

Reviews/Ratings

Overall 5.0 / 5
ease 5.0 / 5
features 4.5 / 5
design 5.0 / 5
support 5.0 / 5

Reviews/Ratings

Overall 5.0 / 5
ease 5.0 / 5
features 5.0 / 5
design 4.0 / 5
support 5.0 / 5

Pros & Cons from Real Users

Pros

  • Frictionless, no bugs, just works flawlessly. Easy to implement, implemented in a matter of seconds. Detailed on vulnerabilities.
  • Easy to set up (especially when using Github). Possible to configure so that code is kept locally in our build system, which is vital to one of our customers.

Cons

  • Hard to find anything here.
  • Bitbucket implementation could be easier (but is not difficult).

Pros & Cons from Real Users

Pros

  • The scanner is absolutely amazing. We have used Synk, Semgrep and Aikido but no one comes close to the logic vulns ZeroPath is able to detect.

Cons

  • The UI is a little hard to understand and take some time getting used to

Training

Documentation Supported
Webinars Supported
Live Online Supported
In Person Supported

Training

Documentation Supported
Webinars Not Supported
Live Online Supported
In Person Not Supported

Company Information

Debricked
Founded: 2018
Sweden
debricked.com

Company Information

ZeroPath
Founded: 2024
United States
zeropath.com

Alternatives

Revenera SCA

Revenera SCA

Revenera

Alternatives

CodeSonar

CodeSonar

CodeSecure

Categories

Categories

Application Security Features

Analytics / Reporting Supported
Open Source Component Monitoring Supported
Source Code Analysis Not Supported
Third-Party Tools Integration Not Supported
Training Resources Supported
Vulnerability Detection Supported
Vulnerability Remediation Supported

Vulnerability Management Features

Asset Discovery Not Supported
Asset Tagging Not Supported
Network Scanning Not Supported
Patch Management Not Supported
Policy Management Supported
Prioritization Supported
Risk Management Supported
Vulnerability Assessment Supported
Web Scanning Not Supported

Application Security Features

Analytics / Reporting Supported
Open Source Component Monitoring Supported
Source Code Analysis Supported
Third-Party Tools Integration Supported
Training Resources Supported
Vulnerability Detection Supported
Vulnerability Remediation Supported

Cybersecurity Features

AI / Machine Learning Supported
Behavioral Analytics Not Supported
Endpoint Management Not Supported
Incident Management Not Supported
IOC Verification Not Supported
Tokenization Not Supported
Vulnerability Scanning Supported
Whitelisting / Blacklisting Not Supported

Static Application Security Testing (SAST) Features

Application Security Supported
Dashboard Supported
Debugging Not Supported
Deployment Management Supported
IDE Supported
Multi-Language Scanning Supported
Real-Time Analytics Supported
Source Code Scanning Supported
Vulnerability Scanning Supported

Static Code Analysis Features

Analytics / Reporting Supported
Code Standardization / Validation Supported
Multiple Programming Language Support Supported
Provides Recommendations Supported
Standard Security/Industry Libraries Supported
Vulnerability Management Supported

Vulnerability Scanners Features

Asset Discovery Not Supported
Black Box Scanning Not Supported
Compliance Monitoring Not Supported
Continuous Monitoring Supported
Defect Tracking Not Supported
Interactive Scanning Not Supported
Logging and Reporting Supported
Network Mapping Not Supported
Perimeter Scanning Not Supported
Risk Analysis Not Supported
Threat Intelligence Not Supported
Web Inspection Not Supported

Integrations

Azure DevOps Supported
Bitbucket Supported
GitHub Supported
GitLab Supported
Go Supported
JavaScript Supported
PHP Supported
Python Supported
Azure DevOps Server Supported
C++ Not Supported
CircleCI Supported
ClickUp Not Supported
Docker Not Supported
Elixir Not Supported
Jira Not Supported
Linear Not Supported
Ruby Supported
Ruby Not Supported
TypeScript Not Supported

Integrations

Azure DevOps Supported
Bitbucket Supported
GitHub Supported
GitLab Supported
Go Supported
JavaScript Supported
PHP Supported
Python Supported
Azure DevOps Server Not Supported
C++ Supported
CircleCI Not Supported
ClickUp Supported
Docker Supported
Elixir Supported
Jira Supported
Linear Supported
Ruby Not Supported
Ruby Supported
TypeScript Supported
Claim Debricked and update features and information
Claim Debricked and update features and information
Claim ZeroPath and update features and information
Claim ZeroPath and update features and information