ZeroQuarry coordinates focused agents across code repositories, uploaded artifacts, and authorized running systems. Each scan moves through investigation, triage, adversarial review, artifact generation, and remediation handoff.
Clone public or private git repositories, upload archives, or scan changed files from CI. Agents inspect control flow, auth logic, dangerous sinks, dependency context, and business rules.
Upload APKs, JARs, firmware, installers, and archives. ZeroQuarry expands what it can, runs available decompilers and extractors, and reviews the artifact customers receive.
Run active tests against scoped web apps and APIs. ZeroQuarry supports required headers, auth cookies, custom headers, basic auth, and form login with redacted scan logs.
Builds the scan plan, tracks coverage, and dispatches focused workers.
Investigate a specific surface, trace exploit paths, and record candidate findings.
Triage, vendor review, rebuttal, and confidence scoring filter weak findings.
Generate PoCs, disclosure drafts, patch diffs, and workflow-ready exports.
Scan private repositories and authenticated remote targets with scoped credentials and redacted logs.
Choose different models for scan, review, and artifact phases, or require bring-your-own LLM keys.
Run artifact generation through provider batch APIs when lower cost matters more than speed.
Projects, members, quotas, API keys, storage limits, and account-level settings keep usage controlled.
Jira, ServiceNow, Slack, GitHub bot PRs, API endpoints, and share links keep findings moving.
Export Markdown, HTML, and PDF reports with customer-facing branding controls where needed.