Sarrah Pitaliya

Hi everyone 👋 For a long time, the cybersecurity community has been stuck in a cycle that feels increasingly broken. We have incredible tools for Web App and API pentesting that can scan thousands of endpoints in minutes, yet security teams are more overwhelmed than ever. The problem isn't a lack of data; it’s a noise problem. If you’ve spent any time in AppSec, you know the drill: you run a...

Hi everyone — quick note from the ZeroThreat team 👋 As AI begins to enter security workflows, there’s a growing conversation around AI-driven pentesting. But one thing becomes clear quickly: fully autonomous AI attacking applications can introduce governance, safety, and operational risks. That’s why while building ZeroThreat Agentic AI Pentesting, the focus wasn’t just intelligence — it was...

Hey folks 👋 For years, application security has mostly followed the same pattern. Run a scan. Get a list of vulnerabilities. Prioritize them using severity scores. But something about that model has always felt incomplete. Because detecting a vulnerability doesn’t necessarily mean it can actually be exploited. Security teams often end up dealing with long lists of potential issues, trying to...

Just a few days to go… Security teams have lived with detection-heavy tools for years. Alerts. CVSS scores. Long vulnerability lists. But here’s the real question: What if security didn’t just detect issues? What if it proved exploitability? ZeroThreat is about to introduce Agentic AI Pentesting, a controlled, reasoning-driven approach that explores complex application behavior, adapts attack...

ZeroThreat.ai isn’t new. But what we’ve built into it changes the game. We’ve added Agentic AI — an autonomous, decision-driven execution layer that: • Observes application behavior • Adapts attack strategies dynamically • Chains multi-step vulnerabilities • Validates real exploit paths • Reduces human intervention in confirmation This is not a cosmetic AI add-on. This is operational AI inside...

Just a few days to go… ZeroThreat is getting ready to introduce ZeroThreat 3.0: Agentic AI Pentesting, a new layer designed to move beyond vulnerability detection into real exploit validation. This isn’t just another automated scan. Agentic AI dynamically reasons through application behavior, adapts attack paths in real time, and validates whether vulnerabilities can actually be exploited — all...

The AI security space is crowded. Every week, a new “AI-powered scanner” or “autonomous pentest” tool launches. But here’s the hard truth: most fail within 12–24 months. Not because the tech is bad — but because the foundation is weak. After studying how security products are built (and broken), here’s what we learned — and how ZeroThreat approaches it differently 👇 1️⃣ They Start With a Tool,...

Every time I kicked off a new enterprise project, I caught myself rewriting the same boilerplate stuff — auth, CI/CD, microservices wiring, frontend-backend integration. So I bundled it all into a starter kit: .NET backend + Angular 16 frontend Preconfigured microservices architecture Authentication & security basics CI/CD ready out of the box It’s bare-bones right now — more of a starting...

As developers, we often spend too much time setting up the same things for every new project: authentication, CI/CD, microservices patterns, and frontend-backend wiring. This boilerplate was created to solve exactly that. With it, you get: ✅ Preconfigured microservices architecture ✅ .NET backend + Angular 16 frontend integration ✅ Auth & security basics built-in ✅ CI/CD pipeline setup out of...

Hi Vibercoders, We’ve all faced the headache of setting up enterprise-grade apps from scratch. That’s why we built a .NET + Angular 16 boilerplate that comes ready with: Microservices structure Security & auth CI/CD configurations Do you prefer using boilerplates like this, or do you feel more comfortable building your own stack?

We built ZeroThreat.ai , an AI-powered pentesting tool that helps you discover vulnerabilities in your modern web apps (including AI-native apps) and APIs before attackers find them. And today, we’re making it even better: Scan FREE — worth $125 — no strings attached. Why ZeroThreat? No setup, no expertise required → start scanning in minutes DevSecOps ready → CI/CD integration for continuous...

Our first Product Hunt launch didn’t go well. We put something out there, pushed for votes, and hoped for the best. It didn’t work. For our relaunch, we took a completely different approach. Here’s what changed: Engage, don’t just post. We spent weeks commenting on other launches, supporting makers, and building trust. This time, people recognized us, not just the product. Conversations >...

I run a cybersecurity SaaS — mainly a pentesting platform. A couple months ago, we added a “Scan a Demo App” button on our homepage. No signup. No email. No config. Just launch, test a realistic (vulnerable) app, and see the results. Hands down the most high-impact move we’ve made. The setup wasn’t even that hard: Hosted a dummy web app with actual OWASP-style flaws Created a read-only user...

Hey Peeps, I recently launched ZeroThreat, a modern DAST tool designed to make vulnerability scanning actually usable for dev and security teams. After just one post, we crossed 20+ dev signups and gained early traction. What ZeroThreat does: Near-zero false positives Handles MFA, SSO, session flows with ease Setup to scan in under 5 mins Designed to blend into modern CI/CD workflows We're...