ZeroPath
ZeroPath (YC S24) is an AI-native application security platform that delivers comprehensive code protection beyond traditional SAST. Founded by security engineers from Tesla and Google, ZeroPath combines large language models with deep program analysis to deliver intelligent security testing that finds real vulnerabilities while dramatically reducing false positives.
Unlike traditional SAST tools that rely on pattern matching, ZeroPath understands code context, business logic, and developer intent. This enables identification of sophisticated security issues including business logic flaws, broken authentication, authorization bypasses, and complex dependency vulnerabilities.
Our comprehensive security suite covers the application security lifecycle:
1. AI-powered SAST
2. Software Composition Analysis with reachability analysis
3. Secrets detection and validation
4. Infrastructure as Code scanning
5. Automated PR reviews
6. Automated patch generation
and more...
ZeroPath integrates seamlessly with GitHub, GitLab, Bitbucket, Azure DevOps and many more. The platform handles codebases with millions of lines across Python, JavaScript, TypeScript, Java, Go, Ruby, Rust, PHP, Kotlin and more.
Our research team has been successful in finding vulnerabilities like critical account takeover in better-auth (CVE-2025-61928, 300k+ weekly downloads), identifying 170+ verified bugs in curl, and discovering 0-days in production systems at Netflix, Hulu, and Salesforce.
Trusted by 750+ companies and performing 200k+ code scans monthly.
Learn more
Windsurf Editor
Windsurf is a cutting-edge IDE designed for developers to maintain focus and productivity through AI-driven assistance. At the heart of the platform is Cascade, an intelligent agent that not only fixes bugs and errors but also anticipates potential issues before they arise. With built-in features for real-time code previews, automatic linting, and seamless integrations with popular tools like GitHub and Slack, Windsurf streamlines the development process. Developers can also benefit from memory tracking, which helps Cascade recall past work, and smart suggestions that enhance code optimization. Windsurf’s unique capabilities ensure that developers can work faster and smarter, reducing onboarding time and accelerating project delivery.
Learn more
Graphite
Optimize your Git commands and effortlessly manage stacked pull requests directly from your terminal. You can visually create and modify stacked PRs without leaving your integrated development environment, ensuring a seamless workflow. Keep all of your PRs and review requests organized in a single inbox for easy tracking. Receive immediate, actionable insights on each pull request thanks to Graphite's AI, which is aware of the codebase context. Prevent merge conflicts and maintain a clean main branch, regardless of whether your team consists of 10 or 10,000 members. Boost your team's productivity with robust, real-time metrics for developers. Experience a faster, more intuitive Git interface that simplifies the stacking process. Use the command 'gt create' again to add another branch atop your existing changes, eliminating the need to wait for merges into the main branch. Your local stack will automatically sync with remote updates, and you can easily tidy up outdated branches using 'gt sync'. Modify changes across your entire stack with the 'gt modify' command, while Graphite takes care of all the recursive rebasing tasks for you. With 'gt submit', you can create or update PRs for each branch within your stack, ensuring a streamlined and efficient development process. This innovative approach to Git management empowers developers to focus more on coding rather than on handling complex version control issues.
Learn more
cubic
Cubic is an AI-driven code review solution that streamlines the analysis of pull requests on GitHub, enabling software development teams to identify bugs, maintain coding standards, and accelerate their release cycles by minimizing manual review delays. It provides immediate, context-aware feedback upon the opening of a pull request by analyzing the entire repository's history and recognized patterns, which leads to inline comments that identify bugs, coding anti-patterns, technical debt, and suggestions for enhancements that human reviewers could overlook, along with one-click fix options for straightforward issues. Additionally, Cubic can produce concise summaries of pull requests that clarify the purpose and effects of changes, intelligently organize complex differences into more manageable segments, and feature a chat interface that allows developers to pose questions or navigate the codebase directly on the platform. Teams have the capability to establish customized review protocols and incorporate business context from issue tracking systems such as Jira, Linear, or Asana, ensuring that code reviews not only assess technical quality but also align with acceptance criteria. With its innovative features, Cubic significantly enhances the efficiency of the code review process, fostering collaboration and improving overall software quality.
Learn more