ZenVeil
<p> Find, understand and fix security issues faster </p> <p> <a href="https://www.producthunt.com/products/zenveil?utm_campaign=producthunt-atom-posts-feed&utm_medium=rss-feed&utm_source=producthunt-atom-posts-feed">Discussion</a> | <a href="https://www.producthunt.com/r/p/1171249?app_id=339">Link</a> </p>
Last verified:
What is ZenVeil?
ZenVeil is an AI-native DevSecOps scanner that inspects repositories and APIs to detect exposed secrets, supply-chain risks, OWASP-style vulnerabilities, and CVEs, then produces human-readable findings and deterministic fixes. It runs as a lightweight CLI (pip install zenveil), integrates into CI/CD (GitHub Actions) and the web dashboard, and can open automated GitHub PRs that apply patches for deterministic issues. The product is aimed at engineering teams, indie makers, and security-conscious developers who use AI coding tools (Copilot, Cursor, Claude, Tabnine) and need fast, actionable security feedback without lengthy configuration. ZenVeil emphasizes speed (full scans under 30 seconds), AI-aware analysis (Claude-powered explanations and context-aware fixes), and workflow-first features like blocking merges on HIGH/CRITICAL findings and CI/webhook integrations.
ZenVeil pricing
Pricing model: Freemium
ZenVeil offers a Free forever tier and two paid tiers: Pro at $19/month and Team at $59/month. Free includes: $0 forever, no credit card required, free for public repos, 3 public repo scans per hour, and basic finding categories with severity-ranked results and email reports. Pro includes unlimited scans, public & private repos, AI explain and AI fix (generated patches), auto-PR remediation, 90 days of scan history, email alerts on new findings, team seats, PDF compliance reports, and CI/CD webhook support. Team includes everything in Pro plus up to 5 team members, unlimited private repos, Slack & email alerts, priority support, custom scan policies, and expanded compliance/reporting features. All paid plans include a 7-day free trial of paid features.
ZenVeil pros
- AI-native analysis tuned for patterns common in AI-generated code
- Scans complete in under 30 seconds for rapid feedback
- Auto-opens deterministic GitHub PRs with fixes for quick remediation
- CLI-first workflow available via pip install zenveil
- CI/CD integration example and GitHub Actions workflow provided
- Free tier available for public repos with no credit card required
- 200+ secret detection patterns including AWS keys and JWTs
- Supply-chain checks with CVE lookups via OSV.dev
- Severity-ranked findings separated into secrets, CVEs, and OWASP mappings
- Blocks merges on HIGH/CRITICAL findings when used in CI
- AI explanations for each finding that are readable by non-security engineers
- Scan history and email alerts available on paid plans
- Auto-PR remediation available from both CLI and CI outputs
- Dashboard and web/API scanning option for teams that prefer a GUI
- PDF compliance reports and audit logs available for Team/paid customers
ZenVeil cons
- AI features require a paid plan (not all AI fixes are free)
- Auto-PR remediation limited to deterministic findings only
- Web/API scans temporarily fetch repository contents (not local-only)
- Free tier rate-limited to 3 public repo scans per hour
- Longer-term scan history limited on Pro (90 days) unless upgraded
- Team plan seats capped (Team lists up to 5 members by default)
- Some advanced features (priority support, custom policies) reserved for Team tier
- Potential reliance on third-party models (Claude) for AI explainability
Frequently asked questions about ZenVeil
Does ZenVeil upload my source code?
For local CLI scans, ZenVeil analyses source code entirely on your machine and does not upload it; when scanning via the web dashboard or API, repository contents are temporarily fetched from GitHub for the duration of the scan and are not stored on ZenVeil servers after the scan completes.
How quickly will a scan finish?
ZenVeil reports that full scans complete in under 30 seconds, providing rapid feedback suitable for interactive use and CI gates.
What types of issues does ZenVeil detect?
ZenVeil detects exposed secrets (200+ patterns), supply-chain issues including floating dependency versions and CVEs (OSV.dev lookup), OWASP Top 10 style vulnerabilities, insecure CI/CD configurations, and insecure headers or API misconfigurations.
Can ZenVeil fix issues automatically?
For deterministic findings, ZenVeil can auto-generate a patch and open a GitHub PR with the fix applied; these fixes are deterministic and intended for developer review before merge.
Does ZenVeil integrate with CI/CD systems?
Yes — ZenVeil provides GitHub Actions workflow examples, supports CI/CD webhook integrations, can block merges on HIGH/CRITICAL findings, and can auto-open fix PRs from CI output.
What languages and frameworks are supported?
ZenVeil lists explicit support for common developer ecosystems used with AI tools, including Python, Node.js, Go, Rust, and Ruby, and maps findings to OWASP categories and CVE data where applicable.
Is there a free tier and what are its limits?
Yes — Free is $0 forever, requires no credit card, supports public repositories, includes severity-ranked results across all finding categories, and limits public repo scans to 3 per hour.
Why do AI features require a paid plan?
ZenVeil reserves AI-powered explanation and auto-fix generation as paid features to cover model usage and to provide deterministic, higher-value remediation workflows that integrate with private repos and team controls.
How does ZenVeil handle supply-chain vulnerability lookups?
ZenVeil performs CVE lookups via OSV.dev, detects floating dependency versions and missing lockfiles, and surfaces severity information so teams can decide whether to pin, upgrade, or mitigate risky dependencies.
Can I scan private repositories with ZenVeil?
Yes — Pro and Team plans support scanning private repositories; the CLI can be pointed at any GitHub repo when provided appropriate tokens, and the web/API scanning flow will temporarily fetch repository contents during scans.