+
+

Related Products

  • Aikido Security
    239 Ratings
    Visit Website
  • Rocket z/Assure VAP
    1 Rating
    Visit Website
  • Proton Pass
    31,996 Ratings
    Visit Website
  • Dynamo Software
    71 Ratings
    Visit Website
  • Source Defense
    7 Ratings
    Visit Website
  • Premier Construction Software
    404 Ratings
    Visit Website
  • P3Source
    16 Ratings
    Visit Website
  • Polonious
    2 Ratings
    Visit Website
  • ARGOS Identity
    8 Ratings
    Visit Website
  • ESET PROTECT Advanced
    2,304 Ratings
    Visit Website

About

Software Composition Analysis (SCA) FossID Workbench enables precise identification of open source components and vulnerabilities. It integrates into software development cycles, providing license recognition, proactive security checks, and detailed compliance reporting. FossID Workbench is available across various industries and helps to ensure that organizations can confidently meet their legal, security, and operational needs in open source software management. Comprehensive Scanning Creates a thorough and complete software bill of materials (SBOM) that catalogs all open source in use, regardless of how it made its way into the codebase. Detailed Reporting Ensures distribution compliance by generating reports, notices files, and copyright statements. Integration & Extensibility Features custom workflows, performing administrative tasks, generating reports, and more with the API.

About

ZeroPath (YC S24) is an AI-native application security platform that delivers comprehensive code protection beyond traditional SAST. Founded by security engineers from Tesla and Google, ZeroPath combines large language models with advanced program analysis to find and automatically fix vulnerabilities. ZeroPath provides complete security coverage: 1. AI-powered SAST for business logic flaws & broken authentication 2. SCA with reachability analysis 3. Secrets detection and validation 4. Infrastructure as Code 5. Automated patch generation. any more... ZeroPath delivers 2x more real vulnerabilities with 75% fewer false positives. Our research team has been successful in finding vulns like critical account takeover in better-auth (CVE-2025-61928, 300k+ weekly downloads), identifying 170+ verified bugs in curl, and discovering 0-days in production systems at Netflix, Hulu, and Salesforce. Trusted by 750+ companies and performing 200k+ code scans monthly.

Platforms Supported

Windows
Mac
Linux
Cloud
On-Premises
iPhone
iPad
Android
Chromebook

Platforms Supported

Windows
Mac
Linux
Cloud
On-Premises
iPhone
iPad
Android
Chromebook

Audience

Businesses searching for an open source compliance solution that detects and identifies open source and third-party components in their codebase and their corresponding licenses and security risks.

Audience

Teams seeking a solution to enhance their application security processes without compromising development speed

Support

Phone Support
24/7 Live Support
Online

Support

Phone Support
24/7 Live Support
Online

API

Offers API

API

Offers API

Screenshots and Videos

No images available

Screenshots and Videos

Pricing

Quoted based on number of contributors, deployment type, add-ons and services selected
Free Version
Free Trial

Pricing

Free
- Free personal plan (free forever, incl. 1 repo, unlimited PR scans and more).

- Core plan (Platform fee: $200/month, up to 25 repos, unlimited PR scans and patches, integration w/ Jira, Linear, and more).

- Enterprise plan for organizations with advanced needs.
Free Version
Free Trial

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Reviews/Ratings

Overall 5.0 / 5
ease 5.0 / 5
features 5.0 / 5
design 4.0 / 5
support 5.0 / 5

Pros & Cons from Real Users

Pros

  • The scanner is absolutely amazing. We have used Synk, Semgrep and Aikido but no one comes close to the logic vulns ZeroPath is able to detect.

Cons

  • The UI is a little hard to understand and take some time getting used to

Training

Documentation
Webinars
Live Online
In Person

Training

Documentation
Webinars
Live Online
In Person

Company Information

FossID
Founded: 2016
Sweden
fossid.com

Company Information

ZeroPath
Founded: 2024
United States
zeropath.com

Alternatives

CodeSentry

CodeSentry

CodeSecure

Alternatives

CodeSonar

CodeSonar

CodeSecure

Categories

Categories

Application Security Features

Analytics / Reporting
Open Source Component Monitoring
Source Code Analysis
Third-Party Tools Integration
Training Resources
Vulnerability Detection
Vulnerability Remediation

Cybersecurity Features

AI / Machine Learning
Behavioral Analytics
Endpoint Management
Incident Management
IOC Verification
Tokenization
Vulnerability Scanning
Whitelisting / Blacklisting

Static Application Security Testing (SAST) Features

Application Security
Dashboard
Debugging
Deployment Management
IDE
Multi-Language Scanning
Real-Time Analytics
Source Code Scanning
Vulnerability Scanning

Static Code Analysis Features

Analytics / Reporting
Code Standardization / Validation
Multiple Programming Language Support
Provides Recommendations
Standard Security/Industry Libraries
Vulnerability Management

Vulnerability Scanners Features

Asset Discovery
Black Box Scanning
Compliance Monitoring
Continuous Monitoring
Defect Tracking
Interactive Scanning
Logging and Reporting
Network Mapping
Perimeter Scanning
Risk Analysis
Threat Intelligence
Web Inspection

Integrations

Jira
Asana
C
Cursor
Dart
DigitalOcean
Elixir
GitHub
GitLab
Gmail
Go
IntelliJ IDEA
Java
JavaScript
Linear
PHP
Python
Rust
TypeScript

Integrations

Jira
Asana
C
Cursor
Dart
DigitalOcean
Elixir
GitHub
GitLab
Gmail
Go
IntelliJ IDEA
Java
JavaScript
Linear
PHP
Python
Rust
TypeScript
Claim FossID and update features and information
Claim FossID and update features and information
Claim ZeroPath and update features and information
Claim ZeroPath and update features and information