Zerod

What Zerod does

Zerod is a Barcelona-headquartered cybersecurity company founded in 2022 that operates a Pentest as a Service (PtaaS) platform connecting organizations with a vetted global network of 150+ ethical hackers alongside AI-driven automated scanning tools. The platform covers web applications, mobile apps, APIs, infrastructure, cloud environments, IoT devices, and smart contracts, and serves a mix of enterprises, SMEs, and technology/SaaS firms needing recurring offensive security testing and compliance support for frameworks such as ISO 27001, NIS2, SOC2, HIPAA, and GDPR.

The technology stack centers on Zerod PentAI, a multi-agent autonomous AI engine launched in June 2025 that performs end-to-end penetration tests on web applications and APIs in approximately 72 hours, supplemented by traditional DAST, SAST, SCA, and external surface-monitoring tools that detect 7,000+ vulnerability types. The platform integrates natively with Jira, GitHub, Slack, and Linear to push vulnerability findings into engineering workflows, and a CISO Copilot module centralizes GRC management for the company's virtual CISO offering. Zerod holds ISO 27001 certification and reports 32,000+ vulnerabilities found and 1,200+ tests delivered annually.

Zerod monetizes through four revenue streams: a freemium self-serve tier, a Marketplace tier that takes a 20% platform fee on individual pentests, annual Enterprise subscriptions with credit-based payments and dedicated account management, and a CISO-as-a-Service subscription starting at EUR 499 per month. Distribution runs through a self-serve digital platform, an inside-sales motion with demo-request qualification, and a partner program targeting MSSPs, consultancies, and technology integrators. The company is privately held with 1-10 employees and no disclosed funding, suggesting it has been built largely on operating revenue.

Name

Zerod

Legal name

Zerod

Website

https://zerod.io

Company type

Private

Founded year

2022

Operating status

Operating

Headcount range

1–10 employees

Short description

Zerod is a Barcelona-based cybersecurity company offering a Pentest as a Service platform that combines a vetted global network of 150+ ethical hackers with AI-powered automated scanning, serving enterprises and SMEs needing recurring penetration testing and compliance support.

Ownership category

akta.pro rank

Product category

Penetration Testing Services

NAICS

Testing Laboratories and Services (541380), Testing Laboratories and Services (54138), Security Systems Services (except Locksmiths) (561621)

SIC

Services-Testing Laboratories (8734), Services-Prepackaged Software (7372)

akta.pro primary industry

Penetration Testing Platforms (PTaaS) (HDADAHAG)

akta.pro secondary industries

Penetration Testing & Red Teaming (BPAKAHAF), Application Security Testing (SAST/DAST/IAST/SCA) (HDADACAC)

Keywords

• Penetration testing services
• Offensive security platform
• Vulnerability assessment
• AI ethical hacking
• Cybersecurity compliance

Headquarters

HQ city

Barcelona

HQ country

Spain

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Technology or R&D, Personnel, Operations, Marketing or Sales

Revenue model

1. Pentesting as a Service (PtaaS): Zerod generates revenue through tiered subscription plans for pentesting services. The Free tier offers basic scanning tools and budget proposals. The Marketplace tier charges a 20% platform fee for single pentest engagements. The Enterprise tier operates on an annual plan with credit-based payments on demand, offering multiple pentests, multiple assets, dedicated account manager, multiple ethical hackers, and multiple re-tests.
2. On-Demand Security Tools: Pay-per-use pricing model for automated scanning tools (DAST, SAST, SCA) with no fixed annual fees. Customers pay only for what they need on-demand.
3. CISO as a Service: Virtual CISO service providing expert information security leadership and strategic guidance, starting from 499EUR, providing organizations with specialized cybersecurity professionals without the cost of a full-time executive.

Pricing tiers

Go-to-market motion3 records

Distribution channels4 records

Marketing channels7 records

Core offering

Zerod operates a Pentest as a Service (PtaaS) platform that connects organizations with a global network of 150+ vetted ethical hackers and AI-powered scanning tools to deliver continuous penetration testing across web applications, APIs, infrastructure, cloud, IoT, and smart contracts. The platform combines human-led offensive security testing with its proprietary AI engine (PentAI) for autonomous vulnerability detection, plus automated scanning tools (DAST, SAST, SCA), virtual CISO services, and compliance support for ISO 27001, NIS2, SOC2, GDPR, HIPAA, and ENS frameworks.

Product overview

Zerod is a cybersecurity platform offering Pentest as a Service (PtaaS) that combines elite ethical hackers with AI-powered automation. The core platform provides access to 150+ certified ethical hackers worldwide for penetration testing across applications, infrastructure, cloud, and IoT. The product portfolio includes the Zerod PentAI (autonomous AI pentesting), Zerod Tools (DAST/SAST/SCA scanning), CISO as a Service (virtual CISO with CISO Copilot), Compliance Services (GRC for ISO 27001, NIS2, SOC2, GDPR), Zerod Enterprise (dedicated enterprise pentesting), and Social Engineering services. The platform integrates with Jira, GitHub, Slack, and Linear for streamlined security workflow management.

Differentiator

Problem solved

Functional benefit

Brands

• Zerod PentAI: AI-powered autonomous pentesting platform that runs expert-level penetration tests on web applications and APIs in hours using a multi-agent AI engine.
• Zerod Enterprise
• CISO as a Service

Products and services

• Zerod Platform (PtaaS) Pentest as a Service platform that connects organizations with a global network of elite ethical hackers and advanced scanning tools, providing on-demand access to experts, real-time vulnerability reports, and unified vulnerability management. Targets enterprises and SMEs needing year-round offensive security.
• Zerod PentAI Fully autonomous AI ethical hacker powered by a multi-agent engine that performs penetration tests on web applications and APIs in hours, delivering results 90% faster than traditional methods with comprehensive coverage from authentication flows to backend logic.
• Pentesting Services Human-driven penetration testing across applications (web/mobile), infrastructure, cloud security, IoT devices, APIs, and smart contracts, combining expert methodologies with automated tools. For organizations requiring expert-led offensive security testing.
• Zerod Tools (DAST, SAST, SCA) Automated security scanning tools including Dynamic Application Security Testing (DAST) for runtime vulnerabilities, Static Application Security Testing (SAST) for source code analysis, and Software Composition Analysis (SCA) for open-source dependency tracking. Detects over 7,000 vulnerability types including OWASP Top 10, SQL injections, and XSS.
• Compliance Services Governance, Risk, and Compliance (GRC) services facilitating audits and certifications including ISO 27001, NIS2, SOC2, HIPAA, and GDPR, with accelerated compliance processes and audit-ready documentation delivered within 24 hours.
• CISO as a Service (CISOaaS) Virtual CISO service providing expert-level strategic guidance and operational support for navigating cybersecurity landscapes and preparing for certifications such as ISO 27001, NIS 2, SOC, and ENS, with a CISO Copilot tool for centralized GRC information management.
• Zerod Enterprise Enterprise-level pentesting with dedicated account management, multiple pentests throughout the year, a dedicated team of ethical hackers, unlimited retesting, and custom security assessments aligned with specific protection needs and compliance requirements.
• Social Engineering Phishing attack simulations combined with engaging online learning modules to empower employees to recognize and thwart sophisticated cyber threats, transforming the workforce into a robust human firewall.

Quantifiable outcome

• 50% faster results than traditional penetration testing
• +5 more outcomes

Named customers2 records

Segments4 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration4 records

AI capability3 records

Feature10 records

Partnerships

Seven partnerships are on record, tiered core and growth.

• JiracoreTechnology or IntegrationZerod's Jira integration seamlessly links security programs to Jira, automatically generating and updating issues based on vulnerability submissions. This integration streamlines teams' response to security findings, ensuring efficient tracking and resolution within familiar project management environments.
• GitHubcoreTechnology or IntegrationThe integration with GitHub streamlines security workflows by allowing vulnerability findings to be pushed directly to repositories as issues. Users can manually select and send key finding details including title, description, and suggested fixes, keeping development teams informed within their preferred code collaboration platform.
• SlackcoreTechnology or IntegrationZerod's Slack integration seamlessly connects security programs to existing Slack channels, automatically posting notifications with submission details when specific events occur. This keeps teams instantly informed about vulnerability findings and other relevant security activity.
• LinearcoreTechnology or IntegrationZerod's Linear integration optimizes workflow by connecting security initiatives to Linear, enabling automatic creation and updates of tasks from vulnerability reports. This simplifies how teams manage security issues, ensuring clear tracking and swift resolution within their trusted project management platform.
• Cybersecurity ConsultanciesgrowthChannel Partner/ Reseller/ DistributorZerod's Partner Program enables cybersecurity consultancies to expand their service portfolio with cutting-edge pentesting solutions. Partners can offer scalable, high-quality offensive security services to their clients, enhancing their value proposition and driving mutual growth.
• Managed Security Service Providers (MSSPs)growthChannel Partner/ Reseller/ DistributorMSSPs can integrate Zerod's pentesting capabilities into their managed security offerings, providing clients with comprehensive offensive security services as part of their security monitoring and management portfolio.
• Technology IntegratorsgrowthStrategic or Co-development PartnerTechnology integrators can partner with Zerod to enhance their cybersecurity offerings, providing clients with access to Zerod's platform, ethical hacker network, and security testing capabilities as part of comprehensive technology solutions.

Scale indicators11 records

Recent moves6 records

Expansion highlights5 records

Direct peers

• Synack: Synack offers a crowdsourced platform of vetted security researchers combined with AI-assisted testing for penetration testing and vulnerability management. It directly overlaps Zerod's PtaaS positioning and elite hacker talent pool narrative.
• Cobalt: Cobalt is a leading Pentest as a Service platform connecting customers with a vetted community of security testers. It is the closest direct competitor to Zerod, offering a marketplace model, on-demand engagements, and integrations with developer tools.
• Astra Security: Astra Security delivers Pentest as a Service, DAST/SAST scanning, and compliance-focused security testing for SaaS companies. It is comparable to Zerod in targeting SMB and mid-market customers with continuous scanning plus human pentesting.
• NetSPI: NetSPI provides penetration testing, attack surface management, and breach and attack simulation services to enterprises. It overlaps with Zerod's enterprise tier offerings and broad offensive security services portfolio.
• Bugcrowd: Bugcrowd provides crowdsourced penetration testing, bug bounty, and attack surface management services. It competes directly with Zerod in delivering human-driven offensive security through a managed platform model.
• HackerOne: HackerOne operates a global hacker-powered security platform spanning bug bounty, Pentest as a Service, and vulnerability disclosure. Its scale, brand recognition, and enterprise customer base make it a direct competitor for Zerod's PtaaS and crowdsourced testing offerings.

Emerging players

• Pentera: Pentera provides automated security validation and continuous penetration testing focused on enterprise infrastructure. It is an emerging player competing with Zerod's AI-led autonomous testing narrative (PentAI), particularly for automated red-teaming and validation use cases.
• Horizon3.ai: Horizon3.ai provides autonomous penetration testing via its NodeZero platform, with AI-driven continuous validation. It competes with Zerod's PentAI for the autonomous offensive testing category.

Broad incumbents

• NCC Group: NCC Group is a global cybersecurity consultancy offering penetration testing, red teaming, and managed security services. As a broad incumbent, it competes for enterprise offensive security budgets that Zerod's Enterprise tier targets.
• Bishop Fox: Bishop Fox is an offensive security consultancy providing penetration testing, red teaming, and attack surface management to enterprise clients. It is comparable to Zerod's human-led pentesting and enterprise services.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• Facebookfacebook.com/CyberZerod
• LinkedInlinkedin.com/company/zerodsecurity

Compliance1 record

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Zerod