Company
Offensive security that engineers trust.
Pentesting hasn’t kept pace with how fast software ships. Manual engagements take weeks; commodity scanners bury teams in false alarms. We’re building the third option: fast, autonomous and honest about what it found.
01Who we are
Zeroday IQ Cyber Pte. Ltd.
We are a registered Singapore private company building offensive security software. We work out of Republic Plaza in the Raffles Place financial district, and we ship from there to engineering teams worldwide.
We were founded by offensive-security and applied-ML engineers with a simple thesis: software ships every day, but pentests still take six weeks. That mismatch is how breaches happen. ZerodayIQ closes the gap with an AI red team that can run continuously, re-fires serious findings against a control request to prove them, and never reports a vulnerability the scan didn’t actually produce.
All commercial engagements, contracts and data processing agreements are entered into by Zeroday IQ Cyber Pte. Ltd., governed by Singapore law.
- Legal name
- Zeroday IQ Cyber Pte. Ltd.
- Status
- Live company, registered with ACRA, Singapore
- Registered office
- 9 Raffles Place, #29-05, Republic Plaza, Singapore 048619
02What we believe
Three principles, no exceptions.
Every scanner module, every prompt and every screen in ZerodayIQ is shaped by these.
-
01
Proof, not guesses
If we can’t show the evidence, it doesn’t make the report. Active scanners compare an attack with a control instead of matching fingerprints, and the Validator is the last gate: it can drop a finding, never add one. Zero false positives on our published control targets, enforced on every release.
-
02
Grounded AI
Models are tools, not oracles. Every analysis call runs against locked instructions that forbid invented findings and require evidence on every issue. Chat answers are grounded only in your stored scan, so the assistant can explain a finding but can’t create one.
-
03
Talk to it, don’t operate it
You shouldn’t need to learn a tool to run a pentest. Type a domain, ask follow-ups in plain English, get answers backed by real evidence. No CLI, no proxy configuration, no scoping calls before your first finding.
03What we built
A pentester’s pipeline, driven from chat.
ZerodayIQ runs 45 independent scanner modules in parallel, coordinated by 16 specialised AI agents: seven for external testing (Recon, Enumeration, WAF, Vulnerability, Exploit, Validator, Report), five for internal-network engagements (Network discovery, Active Directory, Credentials, Lateral movement, Privilege escalation), three that synthesise results (Attack path, Blast radius, MITRE mapper), and an adaptive Director that decides what to dig into next.
Every finding is tagged with CWE, CVSS 4.0, OWASP Top 10 and MITRE ATT&CK references, and mapped to seven frameworks: SOC 2, ISO 27001, PCI DSS, HIPAA, GDPR, NIST CSF and OWASP. The report is ready the moment the scan completes.
45
Scanner modules, DNS to SSTI
16
AI agents, each with its own tools and reasoning trace
~10
Minutes to first results on a quick scan
7
Compliance frameworks mapped per finding
04Honest about limits
We tell you what we can’t yet find.
No scanner finds everything. What we promise is that nothing reaches your report marked proven unless it was reproduced, every finding carries its evidence, and every report states what we tested and what we couldn’t, in a tamper-evident coverage ledger.
We publish our recall and false-positive numbers on public benchmark apps, re-run on every release, on the accuracy scoreboard. Most scanners hide their gaps; we show ours. If we miss a known issue on your benchmark, that’s a bug. Tell us and we’ll fix it.
05Team
Small team. Big mandate.
A focused team of offensive-security engineers, ML practitioners and product builders. We ship every week.
Offensive security
Years in red-team consulting and bug bounty. We know what a real pentest report looks like, and what makes one useless.
Applied ML
Production LLM systems with structured outputs and groundedness guardrails. We treat models like dependencies, not magic.
Distributed systems
Parallel scan orchestration, queued workers and agent fleet management, built for engagements that touch hundreds of subdomains.
See how we work
Run a scan on your own domain.
No card · Only domains you own and verify · See the platform