ZeroPath

ZeroPath Corp. builds an AI-native application security platform that combines deep program analysis with large language models to find and fix software vulnerabilities. Unlike conventional static analysis, it reasons about code context and developer intent, which lets it catch business logic flaws and authentication bypasses while cutting false positives, and it can generate patches automatically. The company says the platform finds twice as many vulnerabilities with 75% fewer false positives, and reports running more than 200,000 scans a month across 1,000+ organizations. It was founded in 2024 by Nathan Hrncirik, Dean Valentine, Etienne Lunetta and Raphael Karger, is based in San Francisco, and has raised roughly $12.5M in seed funding with Y Combinator among its backers.

LLM-driven analysis on top of deep program analysis, so it surfaces context-dependent bugs like business logic flaws and auth bypasses that pattern-based SAST misses — and ships the fix as an automated patch rather than just an alert.