ZAST [.]AI has raised $6 million in an early-stage funding round, bringing its total raised to nearly $10 million. The pre-Series A round was led by Hillhouse Capital, according to SecurityWeek. Founded in 2024 and based in Seattle, Zast[.]AI relies on AI agents to identify and validate software vulnerabilities before reporting them, using an automated PoC generation and validation architecture.
The company says its zero false positive approach reduces alert fatigue and focuses security teams on real risks, with its AI agents able to identify complex vulnerabilities such as IDOR and privilege escalation as well as SQL injection. To date, Zast[.]AI has identified 127 vulnerabilities in products including Microsoft Azure SDK, Apache Struts XWork, Koa, and WordPress, with all findings issued a CVE to improve the security of open source software ecosystems.