0.security
0.security is a Swiss applied AI and cybersecurity research lab building an autonomous cybersecurity team that continuously discovers, verifies, fixes and prevents security risks. Its stated aim is to democratize frontier security through open-source tooling, transparent research and usage-based access.
At a Glance
- Individual and indie developers
- AI-native startups and growing engineering teams
- Technology companies and enterprises
- Government, defense and critical-infrastructure providers
AI Tools by 0.security
(1)
0 (0security)
Open Source AI Security Harness
Discussions
No discussions yet
Be the first to start a discussion about 0.security
Latest News
From a kernel finding to an upstream fix: 0.security described two accepted Linux kernel patches and distinct research paths.
Finding the function wasn't enough: a binary-analysis experiment and limits of discovery claims.
A real bug. An incorrect claim of novelty.: 0.security documented how it corrected a mistaken novelty claim in driver research.
Testing a Windows driver without its source: research using imports, dispatch structure and kernel debugging.
Products & Services
Open-source AI security harness with a local browser interface, CLI, MCP server and configurable multi-model workflows for source review, authorized web/API assessment, pentesting, vulnerability research, reverse engineering, verification and automated fixes.
Hosted/managed version of 0 for security workflows on team repositories. 0cloud adds engagement scoping, managed operation and result discussion around the public engine.
Free, open-source security scanner written in Rust. It provides cross-file taint tracking, 200-plus built-in rules, secrets scanning, Semgrep/OpenGrep rule compatibility, branch diffing, PR review comments, fix suggestions and built-in post-quantum cryptography audits.
Market Position
0.security differentiates itself from traditional scanners and point-in-time manual pentests by combining an open-source, multi-model autonomous security harness with verification, evidence-grounded remediation and business-impact prioritization. Foxguard competes in developer security scanning with tools such as Semgrep, CodeQL, Snyk and SonarQube, while 0/0cloud extends into autonomous offensive security research, testing and repair.
Leadership
Founders
Doruk Tan Öztürk
Co-founder and CEO; previously a cyber defense engineer at Migros, Switzerland's largest retail conglomerate. He studied at ETH Zürich and is described by Y Combinator as a Swiss finalist in a math and logic games championship and winner of the Swiss Startup 2026 award.
Fabian Zbinden
Co-founder. Previously an early hire at Crypto Finance, which was later sold to Deutsche Börse, helping it scale from 10 to more than 100 employees; founder of sustainable Swiss clothing brand BEEYOND Clothing; and associated with Mellivora Capital, a regulated quant fund for institutional investors.
Executive Team
Doruk Tan Öztürk
Co-founder & CEO
Previously a cyber defense engineer at Migros; ETH Zürich background and security-research experience.
Fabian Zbinden
Co-founder
Previously at Crypto Finance, Mellivora Capital and BEEYOND Clothing; helped Crypto Finance scale from 10 to 100-plus employees.
Founding Story
The founders began in Zurich with the conviction that software which increasingly writes and changes itself should also secure itself. They created an open-source, self-evolving, multi-model cybersecurity harness to make security previously reserved for large enterprise budgets accessible to individual developers, startups and critical-infrastructure operators; San Francisco broadened the company's ambitions globally.
Business Model
Revenue Model
Usage-based prepaid credits for hosted security testing, with no subscription or seat fees; enterprise customers can purchase custom-priced deployments, managed work and support in their own cloud or air-gapped environments.
Pricing Tiers
$100 in free credits for a 14-day trial, one active developer, unlimited repositories and integrations, and PR Security Tests. No payment card required.
Prepaid credits, unlimited developers and agents, no seat fees. PR Security Tests cost $5 per PR; dependency security, codebase pentests, continuous pentesting and binary pentests are available on request.
Own-cloud or air-gapped deployment, SSO and audit logs, advanced remediation, business-impact prioritization, dedicated support and expert consulting.
Target Markets
- Individual and indie developers
- AI-native startups and growing engineering teams
- Technology companies and enterprises
- Government, defense and critical-infrastructure providers
- Continuous pull-request and repository security testing
- Dependency security and codebase pentesting
- Authorized web/API assessment and AI-agent security evaluation
- Vulnerability research in operating systems, kernels, binaries and open-source packages
- Security verification and automated remediation before software ships
- Security for startups, AI-native development teams, enterprises, governments, defense and critical infrastructure
- FIS
- Spotify
- Nordfen
- Doky