ZeroPath
ZeroPath (YC S24) is an AI-native application security platform that delivers comprehensive code protection beyond traditional SAST. Founded by security engineers from Tesla and Google, ZeroPath combines large language models with deep program analysis to deliver intelligent security testing that finds real vulnerabilities while dramatically reducing false positives.
Unlike traditional SAST tools that rely on pattern matching, ZeroPath understands code context, business logic, and developer intent. This enables identification of sophisticated security issues including business logic flaws, broken authentication, authorization bypasses, and complex dependency vulnerabilities.
Our comprehensive security suite covers the application security lifecycle:
1. AI-powered SAST
2. Software Composition Analysis with reachability analysis
3. Secrets detection and validation
4. Infrastructure as Code scanning
5. Automated PR reviews
6. Automated patch generation
and more...
ZeroPath integrates seamlessly with GitHub, GitLab, Bitbucket, Azure DevOps and many more. The platform handles codebases with millions of lines across Python, JavaScript, TypeScript, Java, Go, Ruby, Rust, PHP, Kotlin and more.
Our research team has been successful in finding vulnerabilities like critical account takeover in better-auth (CVE-2025-61928, 300k+ weekly downloads), identifying 170+ verified bugs in curl, and discovering 0-days in production systems at Netflix, Hulu, and Salesforce.
Trusted by 750+ companies and performing 200k+ code scans monthly.
Learn more
TrustInSoft Analyzer
TrustInSoft commercializes a source code analyzer called TrustInSoft Analyzer, which analyzes C and C++ code and mathematically guarantees the absence of defects, immunity of software components to the most common security flaws, and compliance with a specification. The technology is recognized by U.S. federal agency the National Institute of Standards and Technology (NIST), and was the first in the world to meet NIST’s SATE V Ockham Criteria for high quality software.
The key differentiator for TrustInSoft Analyzer is its use of mathematical approaches called formal methods, which allow for an exhaustive analysis to find all the vulnerabilities or runtime errors and only raises true alarms.
Companies who use TrustInSoft Analyzer reduce their verification costs by 4, efforts in bug detection by 40, and obtain an irrefutable proof that their software is safe and secure.
The experts at TrustInSoft can also assist clients in training, support and additional services.
Learn more
QML
QML is a declarative language that facilitates the description of user interfaces through their visual elements and the relationships between them. This language is designed for high readability, making it easier to dynamically connect components while allowing for their reuse and customization. Leveraging the QtQuick module, developers and designers can craft smooth, animated user interfaces in QML that can seamlessly interface with various back-end C++ libraries. As a specification and programming language for user interfaces, QML empowers both developers and designers to create applications that are not only visually striking but also highly performant with fluid animations. It boasts a declarative, JSON-like syntax that is easy to read, while also providing support for imperative JavaScript expressions and dynamic property bindings for enhanced functionality. Additionally, its flexibility allows for innovative designs that can adapt to different user needs and preferences.
Learn more
Ring
The Ring programming language serves as a versatile, multi-paradigm tool suitable for a variety of applications. It embraces multiple programming paradigms, including imperative, procedural, object-oriented, declarative with nested structures, functional, meta programming, and natural programming. This language is designed to be portable across different operating systems such as Windows, Linux, macOS, Android, and WebAssembly, allowing developers to create applications for consoles, graphical user interfaces, the web, games, and mobile platforms. Emphasizing simplicity, compactness, and flexibility, Ring encourages an organized coding style and features a clear, visual implementation. With its concise syntax and robust feature set, it allows programmers to build intuitive interfaces and domain-specific languages quickly. Additionally, Ring's small footprint, combined with an intelligent garbage collector, grants developers greater control over memory management. In essence, it is a practical language that is well-equipped with a variety of useful libraries to enhance the development experience.
Learn more