0 (0security)

0 is an open-source AI security harness from 0.security, the Swiss applied AI and cybersecurity research lab backed by Y Combinator. It provides a local browser console, a headless CLI and an MCP server for investigating vulnerabilities, reviewing findings and working on fixes. The repository is labeled a research preview, and a hosted version, 0cloud, is available through a waitlist.

What It Is

0 is a security workflow engine for code analysis, pentesting, vulnerability research, reverse engineering, verification and fixing. Users bring their own model provider and run it locally without an account. The browser console lets you chat with 0, investigate findings and start from built-in templates for assessment, verification, fixes and research.

Workflows, Findings and Memory

Findings can be reviewed with source evidence in a queue or on a board. Workflows can be listed and run from the CLI against a target repository, with runs retained as results. Learning keeps local activity and source-grounded notes, and skills and memory let users reuse security instructions and keep lessons linked to their sources. A binary-analysis capability, 0verse, uses a local Ghidra and Java installation and exposes tools for scanning, triage, findings, proofs of vulnerability and reports.

Connecting Agents

Coding agents can drive 0 through CLI commands or an MCP server that exposes its workflows. Plugins and hosts can be managed from the console, and a GitHub Actions integration is documented.

Hosted 0cloud

The 0.security site describes 0cloud, a hosted platform that adds PR security tests, auto-remediation with 1-click fixes, dependency monitoring and continuous pentesting. It also lists enterprise options such as self-hosted or air-gapped deployment, SSO and audit logs.

Current Status

The README states it is a research preview and that only authorized systems should be assessed. Findings and fixes should be reviewed before use. Installation targets Apple Silicon macOS and x64/ARM64 Linux.