Zoltra

Frequently looked up

Q1How do I get started with Zoltra?

You start with a free scan of your app with no card required. Then you can try 7 days free with a card before the $80/month subscription begins. Setup involves adding your domain and a DNS TXT record for verification, which typically resolves in a few minutes. If you want fix pull requests, you can connect your GitHub repository.

Q2What happens after Zoltra finds a vulnerability?

Zoltra investigates the finding to confirm the risk and show the evidence. For confirmed code-level vulnerabilities with GitHub connected, Zoltra prepares a fix pull request on a separate branch for your review. After you merge and deploy it, Zoltra tests the same vulnerability against the live app to verify it is actually closed.

Q3How does Zoltra keep my team informed about security issues?

Zoltra delivers findings to your team through Slack, Discord, and email. Each finding includes its severity, status, and the domain it was found on. A weekly summary is automatically delivered to your team without needing to be requested.

Q4What does Zoltra check for in my app?

Zoltra checks for missing access controls, exposed routes and data, browser-visible secrets, unsafe security settings, and other vulnerabilities. It maps all subdomains, endpoints, services, and certificates your domain exposes to the internet, then follows suspicious paths to find what an attacker could actually reach.

Q5Can I cancel my subscription and get a refund?

You can cancel through billing controls or by contacting billing@zoltra.io. Cancellation stops the next renewal but does not refund the current paid period or trial unless required by law.