Launched this week

GitHub

Launched this week

Enterprise-grade CI DAST for your APIs. Free. Open source.

1 follower

Enterprise-grade CI DAST for your APIs. Free. Open source.

1 follower

Visit website

ZeroDAST wraps OWASP ZAP inside a security-hardened CI pipeline with automated authentication, delta-scoped PR scanning, and intelligent reporting. 🔐 4 auth adapters — handles custom headers, nested tokens, admin separation. Zero scripting. ⚡ ~3 min PR scans, ~5 min nightly scans 🛡️ Privilege-isolated CI architecture — PR code can't touch the scanner 📊 52% more findings than vanilla ZAP on 4 real-world targets (170k+ combined ⭐) 💰 $0 cost vs $180k+/year for enterprise DAST

Free

Launch tags:GitHub•Security

Launch Team

Wafer Pass — Flat rate to the best LLMs for OpenClaw, Hermes Agent, etc.

Flat rate to the best LLMs for OpenClaw, Hermes Agent, etc.

Promoted

Maker

📌

Hey Product Hunt! I'm the solo developer behind ZeroDAST. I built this because I was frustrated that running vanilla ZAP against any real API with non-trivial auth gives you essentially zero API coverage. On 4 major open-source APIs, vanilla ZAP discovered 0 API endpoints. ZeroDAST discovered 48. The difference? An auth adapter framework that turns per-target custom scripting into declarative config. It's not for everyone — REST APIs with token-based auth only, no SSO/MFA/GraphQL. But within that niche, it delivers enterprise-grade results at zero cost. Would love your feedback! What would make you try this on your own API?

Report

4d ago