Krux
February 15, 2026
This AI Startup Found 119 Zero-Days in 2025 Already
Published: February 15, 2026 at 8:12 AM
Updated: February 15, 2026 at 8:12 AM
100-word summary
Seattle-based ZAST.AI just raised $6 million from Hillhouse Capital to scale its AI-powered code security platform that promises zero false positives. Founded in 2024, the startup uses AI agents for deep code analysis and auto-generates proof-of-concept attacks to verify real vulnerabilities. The result? They've already discovered hundreds of zero-days across open-source projects this year, earning 119 CVE assignments. Their platform catches both typical bugs like SQL injection and sneaky semantic-level risks like privilege escalation. Multiple Fortune 500 companies are already onboard. This funding signals growing enterprise demand for AI security tools that cut through the noise of traditional scanners, potentially reshaping how companies hunt vulnerabilities at scale.
What happened
Seattle-based ZAST.AI just raised $6 million from Hillhouse Capital to scale its AI-powered code security platform that promises zero false positives. Founded in 2024, the startup uses AI agents for deep code analysis and auto-generates proof-of-concept attacks to verify real vulnerabilities. The result? They've already discovered hundreds of zero-days across open-source projects this year, earning 119 CVE assignments. Their platform catches both typical bugs like SQL injection and sneaky semantic-level risks like privilege escalation. Multiple Fortune 500 companies are already onboard.
Why it matters
This funding signals growing enterprise demand for AI security tools that cut through the noise of traditional scanners, potentially reshaping how companies hunt vulnerabilities at scale.