Tembo vs ZeroPath (AI-native SAST and autofix)
Quick answer
Tembo (Tembo Data Systems) and ZeroPath (AI-native SAST and autofix) (ZeroPath) are both listed in the Code security category of Agent Index.
They share no framework tags in our dataset.
This is not a ranking.
Tembo (Tembo Data Systems) and ZeroPath (AI-native SAST and autofix) (ZeroPath) are both listed in the Code security category of Agent Index. They share no framework tags in our dataset.
| Field | ||
|---|---|---|
| Vendor | Tembo Data Systems | ZeroPath |
| HQ | United States · North America | United States · North America |
| Primary category | Code security | Code security |
| Also listed in | Code security, Business operations | Code security, Security |
| Summary | Agent orchestration platform (not a dedicated AppSec scanner) that opens auto-fix PRs from Snyk vulnerability scans and Sentry production errors. | AI-native AppSec platform that finds business-logic and auth flaws, validates findings from existing SAST tools, runs PR security reviews and generates one-click patches refined in natural language. |
| Frameworks (vendor-stated) | — | — |
| Frameworks (vendor-claimed) | — | — |
| Capabilities / tasks | agent platform with security integrations, remediation, sca | appsec, sast, remediation, pr review, sca |
| Pricing (as published) | Published on tembo.io/pricing: free trial; Pro $60/month ($60 usage allowance, up to 5 users); Max $200/month (up to 10 users); Enterprise custom. Usage allowance covers Tembo Gateway tokens and cloud VM compute; overages optional on paid plans. | Team plan starting from $1,000/month + $60 per developer (unlimited repositories and scans) on zeropath.com/pricing; Enterprise is custom; usage-based credits listed as coming soon; startup discounts up to 50%. |
| Pricing model | published-tiers | published-tiers |
| Primary source | https://docs.tembo.io/integrations/snyk | https://zeropath.com/products/sast-autofix |
| Last checked | 2026-10-18 | 2026-10-18 |
| Official site | https://www.tembo.io/ | https://zeropath.com/products/sast-autofix |
FAQ (from this dataset)
What is the difference between Tembo and ZeroPath?
Both are listed under Code security. Shared tasks: remediation, sca. Tembo-only tasks: agent-platform-security-integrations. ZeroPath-only tasks: appsec, sast, pr-review. Differences are from stored category and task tags, not a ranking.
Which one publishes pricing?
Tembo: Published on tembo.io/pricing: free trial; Pro $60/month ($60 usage allowance, up to 5 users); Max $200/month (up to 10 users); Enterprise custom. Usage allowance covers Tembo Gateway tokens and cloud VM compute; overages optional on paid plans. ZeroPath (AI-native SAST and autofix): Team plan starting from $1,000/month + $60 per developer (unlimited repositories and scans) on zeropath.com/pricing; Enterprise is custom; usage-based credits listed as coming soon; startup discounts up to 50%.
Where are Tembo and ZeroPath headquartered?
Tembo publishes HQ in United States. ZeroPath (AI-native SAST and autofix) publishes HQ in United States.
Listings tagged agent platform with security integrations are coding platforms with a documented scanner or vulnerability-fix workflow, not dedicated application-security products. Dedicated AppSec listings are compared on the AI code security agents table.
Use-case comparisons
- AI code security agents — 33 listings (Application security scanning, suggested or automated code fixes, and pull-request security review)
Related
More Tembo comparisons
- Aikido AI AutoFix vs Tembo
- AISLE (autonomous vulnerability discovery, triage and verified-fix agents) vs Tembo
- Amazon Q Developer security scanning vs Tembo
- Amnify security agents (agent-driven code audit, AI pentesting, PR review and autofix pull requests) vs Tembo
- Black Duck Signal (agentic AI AppSec) vs Tembo
More ZeroPath (AI-native SAST and autofix) comparisons
- Aikido AI AutoFix vs ZeroPath (AI-native SAST and autofix)
- AISLE (autonomous vulnerability discovery, triage and verified-fix agents) vs ZeroPath (AI-native SAST and autofix)
- Amazon Q Developer security scanning vs ZeroPath (AI-native SAST and autofix)
- Amnify security agents (agent-driven code audit, AI pentesting, PR review and autofix pull requests) vs ZeroPath (AI-native SAST and autofix)
- Black Duck Signal (agentic AI AppSec) vs ZeroPath (AI-native SAST and autofix)