Auth0
Auth0 takes a modern approach to Identity and enables organizations to provide secure access to any application, for any user. Auth0 is highly customizable, and simple yet flexible. Safeguarding billions of login transactions each month, Auth0 delivers convenience, privacy, and security so customers can focus on innovation.
With Auth0, you can rapidly integrate authentication and authorization for web, mobile, and legacy applications, with new Fine Grained Authorization (FGA) that goes beyond role-based access control.
Learn more
ZeroPath
ZeroPath (YC S24) is an AI-native application security platform that delivers comprehensive code protection beyond traditional SAST. Founded by security engineers from Tesla and Google, ZeroPath combines large language models with deep program analysis to deliver intelligent security testing that finds real vulnerabilities while dramatically reducing false positives.
Unlike traditional SAST tools that rely on pattern matching, ZeroPath understands code context, business logic, and developer intent. This enables identification of sophisticated security issues including business logic flaws, broken authentication, authorization bypasses, and complex dependency vulnerabilities.
Our comprehensive security suite covers the application security lifecycle:
1. AI-powered SAST
2. Software Composition Analysis with reachability analysis
3. Secrets detection and validation
4. Infrastructure as Code scanning
5. Automated PR reviews
6. Automated patch generation
and more...
ZeroPath integrates seamlessly with GitHub, GitLab, Bitbucket, Azure DevOps and many more. The platform handles codebases with millions of lines across Python, JavaScript, TypeScript, Java, Go, Ruby, Rust, PHP, Kotlin and more.
Our research team has been successful in finding vulnerabilities like critical account takeover in better-auth (CVE-2025-61928, 300k+ weekly downloads), identifying 170+ verified bugs in curl, and discovering 0-days in production systems at Netflix, Hulu, and Salesforce.
Trusted by 750+ companies and performing 200k+ code scans monthly.
Learn more
Enzoic Account Takeover Protection
Safeguard your users and your business by implementing effective Account Takeover (ATO) prevention. Enzoic’s REST API seamlessly integrates into your login, account creation, and password recovery processes, enabling real-time identification of compromised credentials resulting from external breaches. This capability allows for prompt interventions, such as enforcing a password change or activating additional authentication steps, to ensure account safety.
By utilizing Enzoic, you can achieve proactive defense measures without compromising the user experience. Our solution effectively minimizes fraud and unauthorized access through a continuously refreshed database containing billions of compromised credentials. Regardless of whether the danger arises from a recent incident or an older event, Enzoic adeptly identifies risky credentials and mitigates threats.
Engineered for adaptability and user-friendliness, Enzoic equips your organization to proactively combat account takeover risks while ensuring operational continuity. Additionally, this approach not only enhances security but also fosters user trust, leading to a more secure environment overall.
Learn more
tirreno
tirreno is an open-source security framework.
tirreno helps understand, monitor, and protect your product from threats, fraud, and abuse. While classic cybersecurity focuses on infrastructure and network perimeter, most breaches occur through compromised accounts and application logic abuse that bypasses firewalls, SIEM, WAFs, and other defenses. tirreno detects threats where they actually happen: inside your product.
Learn more
