Open-weight security AI. Tuned to answer, not refuse.
Trace the attack.
Test the defense.
Open models.
Focused security work.
A focused API for selected security teams investigating exploits, reversing binaries, and testing defenses.
DeepSeek
GLM
Qwen
gpt-oss
Llama
Mistral
Gemma
Kimi
From day zero
to a tested defense.
- 00 / FIRST SIGNAL00 / SIGNAL
Day zero
A new issue surfaces. Capture what changed while the evidence is fresh.
- 01 / INVESTIGATE01 / TRACE
Investigate
Trace code, exploit behavior, and incident signals with low-refusal models.
- 02 / VALIDATE02 / TEST
Validate
Verify mitigations in scope and document the next action.
A new issue surfaces. Capture what changed while the evidence is fresh.
Security signals
cross borders.
Follow a suspicious signal across systems and regions. ZeroDayAPI helps teams investigate what happened and decide what to test next.
Look closer
at the signal.
Follow the evidence from the first clue to a verified fix.
One API.
Different investigations.
Bring security context into the model, then verify the answer in the tools and environments your team already trusts.
API penetration testing
Plan BOLA, IDOR, authorization, and schema-boundary checks from the context of a real endpoint.
Binary reverse engineering
Make sense of decompiler output, patch differences, and suspicious control flow.
Exploit triage
Review a public proof of concept, its likely reachability, and the evidence needed to validate a fix.
FAQ
Frequently asked
questions.
What is ZeroDayAPI?
An OpenAI-compatible API gateway for security workflows. Manage your keys, inspect usage, and call models that have been reviewed and published for your account.
Why focus on security work?
API penetration testing, binary reversing, and exploit triage need clear context and careful verification. These are the workflows the product is being designed around.
Can I use the OpenAI SDK?
The current endpoint uses the chat-completions request and response shape. Set a custom base URL and key; other OpenAI features are not yet implemented.
Does the API run tests for me?
The API returns chat-completion responses. Run proposed checks in your own authorized environment and verify the findings with your existing tools.
Take the next step
in your investigation.
Explore security workflows with an OpenAI-compatible API.