DeepZero icon
DeepZero icon

DeepZero

Open-source Python engine for repeatable vulnerability research with YAML pipelines, Ghidra, Semgrep, optional LLM assessment, and resumable state.

Terminal example from the public DeepZero repository, showing stage counts, filtering, decompilation progress, and configurable research stages.

Cost / License

  • Free
  • Open Source (MIT)

Platforms

  • Python  Requires Python 3.11 or newer. Ghidra and Semgrep are needed for the bundled driver workflow; optional LLM services need separate configuration.
Alternatives
0likes
0alternatives
0articles
Save

Features

Features

 Tags

Highlights All activities

DeepZero News & Activities

Recent activities

DeepZero information

AlternativeTo Categories

Development, Security & Privacy, OS & Utilities

GitHub repository

  •  737 Stars
  •  93 Forks
  •  2 Open Issues
  •   Updated  
View on GitHub
DeepZero was added to AlternativeTo by 416rehman on and this page was last updated .

No comments or reviews, maybe you want to be first?

Official Links

AppStores & Other Links

What is DeepZero?

DeepZero is an MIT-licensed Python engine for repeatable vulnerability research. Define stages in YAML, add custom Python processors, control stage concurrency, preserve per-sample analysis state, and resume interrupted runs.

The included Windows driver workflow combines PE metadata, LOLDrivers filtering, Ghidra decompilation, Semgrep scanning, and optional LLM assessment. HTML reports make results browsable. A harmless text-sample demo lets developers try the pipeline engine without Ghidra, a driver corpus, or a model API key.

The maintainer reports using DeepZero to discover public Windows driver findings and Claude separately to help reproduce them. Automated assessments are candidates for further verification.