Anthropic
Cyber Verification Program
Trusted by engineers at
By prioritizing vulnerabilities based on actual business impact and providing validated, actionable remediation, 0.security enables security teams to focus their resources where they matter most. A compelling AI-powered security solution for enterprise environments.
Partner & Europe West Cybersecurity Competency Leader, Switzerland, at EY
We have access to frontier cyber models
OpenAI Daybreak
Trusted Access for Cyber
Microsoft
Security Advisor
AI helps you ship code faster than anyone could secure by hand.
Meanwhile, attackers already use agent swarms to exploit the gaps at machine-speed.
AI agents continuously find & fix security risks at the speed of your coding agents.
The AI security engineer
PR security
Find vulnerabilities in pull requests and open new PRs with fixes.
Security tests
Find previously unknown vulnerabilities (0-days)
and known CVEs across your stack.
Dependency security
Your code is only as secure as the software it depends on.
We check the open-source packages and vendor software you rely on.
Package security
Find previously unknown vulnerabilities in the open-source packages you rely on and check them for known CVEs.
Cyber Intelligence API NEW
Threat intelligence for your coding agents: catch compromised dependencies before they enter your codebase.
Vendor software security Beta
Find vulnerabilities in compiled vendor software, even without access to its source code.
The best security dashboard is one you don’t have to use.
- Connect your repos once
- See first results in 15 min
- Let the agents handle it from here
Our security fixes run in their software
Powerful enough to secure governments, find flaws in operating systems and fix software billionsPublic service, literally. rely on.
3+ billion
devices run software we have secured.
The Linux kernel powers Android phones and the servers running websites, apps & cloud services.
CriticalRX buffer overflow on zero-length serial framesLinux kernel · mctp
CVE-2026-68124 · CNA 9.6 CriticalCriticalArbitrary code execution via crafted expressionsjsonata
CVE-2026-77413 · GHSA-8gq3-vp5j-2grpCriticalCross-tenant agent API-token minting@paperclipai/server
MediumAnonymous /api/systemstatus leaks exception detailSwiss Federal Chancellery · government code
HighSlab use-after-free in AEAD decrypt completionLinux kernel · TIPC
CVE-2026-63801HighUse-after-free in MACsec offload RXLinux kernel · mlx5e
CVE-2026-72072HighMissing CAP_NET_ADMIN check on changelinkLinux kernel · vxlan / geneve
CVE-2026-68142 + CVE-2026-68432HighOOB read on frames shorter than the auth tagLinux kernel · mac802154
CVE-2026-68125HighMemory corruption in 802.15.4 llsec decryptLinux kernel · mac802154
CVE-2026-63831HighUse-after-free of metadata_dst in eswitch repr releaseLinux kernel · ice
Queued upstreamHighResource-exhaustion denial of servicejsonata
CVE-2026-52746HighUse-after-free in LE Audio CIG/CIS setupLinux kernel · Bluetooth
CVE-2026-63944HighStack buffer overflow in NFC digitalLinux kernel · NFC
CVE-2026-80803HighDouble-completion / double-free on resumeLinux kernel · xen-blkfront
Merged upstreamHighCertificate-chain validation bypassnode-forge
HighDenial of service via unbounded recursionprotobuf.js
HighInteger overflow in HTTP chunked-transfer parser → heap OOB readnng (nanomsg)
HighOOB from unvalidated ioctl buffer sizesLinux kernel · atomisp
In reviewHighUse-after-free on inrange_timer at teardownLinux kernel · HID uclogic
In reviewHighStale pen_input pointer on partial registrationLinux kernel · HID uclogic
In reviewHighUse-after-free of in-use VP9 framesLinux kernel · meson vdec
In reviewMediumOOB read on LLCP PDUs shorter than the headerLinux kernel · NFC
CVE-2026-80798CVSS pendingNULL-deref DoS paths via AMDXDNA_EXEC_CMDLinux kernel · amdxdna
CVE-2026-72091 + CVE-2026-72092CVSS pendingOOB read from assoc length underflowLinux kernel · ath6kl
CVE-2026-89524CVSS pendingNULL deref on HT-cap without HT-oper in TDLSLinux kernel · mwifiex
CVE-2026-68197CVSS pendingOut-of-bounds read from unset MAC header on packet-socket TXLinux kernel · net/packet
CVE-2026-74667MediumOOB read in LLCP connect_sn TLV walkLinux kernel · NFC
CVE-2026-80800MediumOOB read in st21nfca ATR_REQ handlingLinux kernel · NFC
CVE-2026-80823CVSS pendingOOB read from unvalidated directory-index countsLinux kernel · ocfs2
CVE-2026-89492CVSS pendingUse-after-free from carrier_work rearm on disconnectLinux kernel · ipheth
CVSS pendingUse-after-free of ghl_poke_timer / ghl_urb at driver unbindLinux kernel · HID sony
MediumHeap out-of-bounds write in ciscodump extcapWireshark
MediumTemplate injection → arbitrary file readUptime Kuma
MediumStack overflow via deeply nested collectionsyaml
MediumOut-of-bounds read in LLCP SNL TLV parserLinux kernel · NFC
Merged upstreamMediumInteger overflow in frame-size calculationLinux kernel · atomisp
In reviewMediumOOB read from unvalidated AV1 frame indicesLinux kernel · v4l2-ctrls
In reviewMediumOOB in NPU cmdstream tile validationLinux kernel · accel/ethosu
In reviewMediumOOB read in firmware-request handlerLinux kernel · Bluetooth btnxpuart
In reviewMediumOOB read in HT/VHT capability IE parsingLinux kernel · mwifiex
In reviewMediumOOB read in pairwise-cipher OUI walkLinux kernel · mwifiex
In reviewMediumECRED deferred-recvmsg race → list corruptionLinux kernel · Bluetooth L2CAP
In reviewMediumOOB read in port100 frame length handlingLinux kernel · NFC
In reviewLowReachable WARN DoS in rsa-pkcs1pad empty digestLinux kernel · crypto
Queued upstreamHow it works
Indexes & understands your codebase
Builds a graph of your repo, dependencies and infrastructure and analyses your coding conventions.
An army of AI security agents find & fix
Parallel agents investigate like a real AI-powered attacker to find, verify and prepare fixes for complex vulnerabilities.
Learns your code and gets better over time
Context about your code, architecture and past findings carries into the next investigation.
Security tailored for your team.
Personalized from custom rules to continuous learning.
Custom Rules
Tell what matters to your team. Add rules in plain language and apply them across your workspace's security work.
Continuous learning & improving
carries security findings, codebase facts and your review feedback into future investigations. See what it has learned in Memory.
Automated & on schedule
See an example schedule
| Check | When it runs |
|---|---|
| PR reviews | Every PR / push |
| Full-codebase scans | Every release |
| Secrets checks | Every push |
| Monitoring | Threat & CVE alerts |
| Check | When it runs |
|---|---|
| Websites & APIs | Custom schedule |
| Dependencies | Custom schedule |
| Cloud & infrastructure | Custom schedule |
| Apps | Custom schedule |
Triggers
Security tests
Depth by branch
PR security
Always-on
For wherever your team already builds.
No new dashboard to babysit.
Fix with your coding agent
Give Codex, Claude Code or Cursor the finding context and a prompt to investigate, fix and verify it.
Give your agent access
Start security tests, follow runs and retrieve findings from your terminal or coding agent.
Review the next commit
Choose whether new commits trigger another security review as your pull request changes.
Get verified fix PRs
Let open pull requests for verified fixes, ready for your team to review and merge.
The world’s best security should belong to everyone.
curl -fsSL https://raw.githubusercontent.com/0sec-labs/0/main/install.sh | bash0 in your terminal.
Security handled, 24/7.
So you can focus on building.
We believe the best511
security is built in the open.
Our open-source harness powers our platform and our vulnerability research breakthroughs.
Security on your terms.
For software companies, large enterprises and critical infrastructure.
Self-hosted deployment
Run in your own cloud or an air-gapped environment.
Compliance reporting
Reports to support your compliance requirements, including SOC 2 audit preparation.
Enterprise ready
SSO, audit logs, integrations and tailored workflows, with business-impact prioritization, advanced remediation and dedicated support.