ZeroThreat.ai

ZeroThreat.ai

ZeroThreat Inc.
+
+

Related Products

  • Aikido Security
    239 Ratings
    Visit Website
  • Reflectiz
    33 Ratings
    Visit Website
  • Criminal IP ASM
    21 Ratings
    Visit Website
  • Astra Pentest
    295 Ratings
    Visit Website
  • Cerberus FTP Server
    159 Ratings
    Visit Website
  • ManageEngine ADManager Plus
    706 Ratings
    Visit Website
  • Building Logistics
    186 Ratings
    Visit Website
  • Letsignit
    272 Ratings
    Visit Website
  • Bitdefender Ultimate Small Business Security
    5 Ratings
    Visit Website
  • ManageEngine ADSelfService Plus
    163 Ratings
    Visit Website

About

Insomnia is an autonomous AI pentesting and offensive security platform from CQR Cybersecurity. Point it at a target and its AI red team runs recon, vulnerability scanning, OSINT, CVE validation, exploitation and privilege escalation across web apps, APIs, networks, cloud and Active Directory, then writes a client-ready PDF, DOCX or HTML report with CVSS scoring and fixes. It brings 275+ security modules into one tool: SAST and DAST, secret detection with live key validation, dependency and CVE scanning, API and GraphQL testing, wireless audit, Active Directory auditing with BloodHound, an HTTP interception proxy and a CI/CD pipeline builder. It also ships Insomnia OS, a Debian-based offensive OS. There is a free Community Edition and a free SAST engine (pip, npm, Docker, Homebrew, plus VS Code and JetBrains plugins). Paid Advanced and Pro plans add full AI automation, the 30,000+ CVE database, exploitation tooling, OSINT and mobile analysis.

About

ZeroThreat.ai is an AI-powered penetration testing platform that identifies and validates real, exploitable vulnerabilities across modern web applications and APIs. Using Agentic AI, it executes adaptive attacker workflows to simulate real-world attack paths, proving impact and eliminating false positives. The platform leverages continuously updated vulnerability checks with proof-based validation, real-time CVE coverage and Application Journeys (Playwright-powered) to test authenticated flows, APIs, and complex business logic beyond traditional crawling. It also integrates custom and community-driven attack templates to extend coverage and reflect real-world attack techniques. By focusing on verified findings rather than raw vulnerability counts, ZeroThreat.ai reduces manual triage by over 90% and enables security teams to prioritize and remediate actual risk with confidence, while maintaining continuous, production-safe testing across environments.

Platforms Supported

Windows Supported
Mac Supported
Linux Supported
Cloud Supported
On-Premises Supported
iPhone Not Supported
iPad Not Supported
Android Not Supported
Chromebook Not Supported

Platforms Supported

Windows Not Supported
Mac Not Supported
Linux Not Supported
Cloud Supported
On-Premises Not Supported
iPhone Not Supported
iPad Not Supported
Android Not Supported
Chromebook Not Supported

Audience

Penetration testers, red teams, MSSPs and security consultants, DevSecOps and development teams, and students learning security.

Audience

Companies in need of a solution to detect human-targeted cyber threats and train employees to prevent social engineering attacks

Support

Phone Support Not Supported
24/7 Live Support Not Supported
Online Supported

Support

Phone Support Not Supported
24/7 Live Support Not Supported
Online Supported

API

Offers API Not Supported

API

Offers API Not Supported

Screenshots and Videos

No images available

Screenshots and Videos

Pricing

$149/month
Free Version Supported
Free Trial Not Supported

Pricing

$100/Target
Free Version Supported
Free Trial Supported

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Reviews/Ratings

Overall 4.5 / 5
ease 4.5 / 5
features 4.5 / 5
design 4.0 / 5
support 4.5 / 5

Pros & Cons from Real Users

Pros

  • BOLA and broken function-level authorization testing is genuinely strong — better than competitors I've evaluated. Transparent about what it can and can't detect, which I appreciate more than overpromising. API discovery found three endpoints in our staging environment that weren't in our internal docs.
  • - Strong API discovery, including hidden endpoints - Tests for complex logic vulnerabilities like BOLA - Clear, developer-friendly reports - Provides actionable remediation guidance

Cons

  • Mass assignment vulnerabilities and some rate limiting issues need more manual follow-up — the tool doesn't catch everything. Would like to see more granular control over which test modules run. Right now it's a bit all-or-nothing. Documentation for edge-case authentication setups is thin. Had to contact support for our custom JWT flow.
  • - Initial mapping may require fine-tuning for large systems - Some advanced configurations need security expertise

Training

Documentation Supported
Webinars Not Supported
Live Online Not Supported
In Person Not Supported

Training

Documentation Supported
Webinars Not Supported
Live Online Not Supported
In Person Not Supported

Company Information

CQR
United States
insom.ai

Company Information

ZeroThreat Inc.
Founded: 2023
United States
zerothreat.ai/

Alternatives

No Alternatives

Alternatives

Strobes

Strobes

Strobes Security
Terra

Terra

Terra Security
PentestOps

PentestOps

Extranet Systems Pty Ltd
Novee

Novee

Novee Security

Categories

AI Pentesting Supported

Categories

AI Pentesting Supported

Integrations

GitHub Not Supported
GitLab Not Supported
Jenkins Not Supported
Microsoft Teams Not Supported
Slack Not Supported

Integrations

GitHub Supported
GitLab Supported
Jenkins Supported
Microsoft Teams Supported
Slack Supported
Claim Insomnia and update features and information
Claim Insomnia and update features and information
Claim ZeroThreat.ai and update features and information
Claim ZeroThreat.ai and update features and information