Devin vs ZeroPath (AI-native SAST and autofix)
Quick answer
Devin (Cognition) and ZeroPath (AI-native SAST and autofix) (ZeroPath) are both listed in the Code security category of Agent Index.
They share no framework tags in our dataset.
This is not a ranking.
Devin (Cognition) and ZeroPath (AI-native SAST and autofix) (ZeroPath) are both listed in the Code security category of Agent Index. They share no framework tags in our dataset.
| Field | ||
|---|---|---|
| Vendor | Cognition | ZeroPath |
| HQ | United States · North America | United States · North America |
| Primary category | Code security | Code security |
| Also listed in | Code security, Business operations | Code security, Security |
| Summary | Cognition’s autonomous coding agent. Listed here only for documented Snyk MCP/CLI scanning and SonarQube/Snyk/Checkmarx IDE plugins — not as a dedicated security product. | AI-native AppSec platform that finds business-logic and auth flaws, validates findings from existing SAST tools, runs PR security reviews and generates one-click patches refined in natural language. |
| Frameworks (vendor-stated) | — | — |
| Frameworks (vendor-claimed) | FedRAMP | — |
| Capabilities / tasks | agent platform with security integrations, remediation, appsec | appsec, sast, remediation, pr review, sca |
| Pricing (as published) | Self-serve plans on devin.ai/pricing: Free $0; Pro $20/month; Max $200/month; Teams $80/month minimum plus $40/month per full seat; Enterprise custom (ACUs). | Team plan starting from $1,000/month + $60 per developer (unlimited repositories and scans) on zeropath.com/pricing; Enterprise is custom; usage-based credits listed as coming soon; startup discounts up to 50%. |
| Pricing model | published-tiers | published-tiers |
| Primary source | https://docs.devin.ai/work-with-devin/mcp | https://zeropath.com/products/sast-autofix |
| Last checked | 2026-10-18 | 2026-10-18 |
| Official site | https://devin.ai/ | https://zeropath.com/products/sast-autofix |
FAQ (from this dataset)
What is the difference between Devin and ZeroPath?
Both are listed under Code security. Shared tasks: remediation, appsec. Devin-only tasks: agent-platform-security-integrations. ZeroPath-only tasks: sast, pr-review, sca. Differences are from stored category and task tags, not a ranking.
Which one publishes pricing?
Devin: Self-serve plans on devin.ai/pricing: Free $0; Pro $20/month; Max $200/month; Teams $80/month minimum plus $40/month per full seat; Enterprise custom (ACUs). ZeroPath (AI-native SAST and autofix): Team plan starting from $1,000/month + $60 per developer (unlimited repositories and scans) on zeropath.com/pricing; Enterprise is custom; usage-based credits listed as coming soon; startup discounts up to 50%.
Where are Devin and ZeroPath headquartered?
Devin publishes HQ in United States. ZeroPath (AI-native SAST and autofix) publishes HQ in United States.
Listings tagged agent platform with security integrations are coding platforms with a documented scanner or vulnerability-fix workflow, not dedicated application-security products. Dedicated AppSec listings are compared on the AI code security agents table.
Use-case comparisons
- AI code security agents — 33 listings (Application security scanning, suggested or automated code fixes, and pull-request security review)
Related
More Devin comparisons
- Aikido AI AutoFix vs Devin
- AISLE (autonomous vulnerability discovery, triage and verified-fix agents) vs Devin
- Amazon Q Developer security scanning vs Devin
- Amnify security agents (agent-driven code audit, AI pentesting, PR review and autofix pull requests) vs Devin
- Black Duck Signal (agentic AI AppSec) vs Devin
More ZeroPath (AI-native SAST and autofix) comparisons
- Aikido AI AutoFix vs ZeroPath (AI-native SAST and autofix)
- AISLE (autonomous vulnerability discovery, triage and verified-fix agents) vs ZeroPath (AI-native SAST and autofix)
- Amazon Q Developer security scanning vs ZeroPath (AI-native SAST and autofix)
- Amnify security agents (agent-driven code audit, AI pentesting, PR review and autofix pull requests) vs ZeroPath (AI-native SAST and autofix)
- Black Duck Signal (agentic AI AppSec) vs ZeroPath (AI-native SAST and autofix)