Nullify

Autonomous AppSec agents that scan commits and PRs, validate exploitability, and open self-correcting fix PRs.

Nullify runs autonomous AppSec agents across commits and pull requests, detecting code vulnerabilities, secrets, and business logic flaws such as IDOR. Agents validate exploitability before raising issues and open merge-ready fix PRs that push follow-up commits when CI fails. Pricing is usage-based rather than per seat.

Category

Security-focused review

Integrations

GitHub, GitLab, Bitbucket, Azure DevOps, CLI, API

Deployment

SaaS + self-hosted

Pricing model

paid

Founded

2022

Funding

$12.5M seed announced 2026, after a $1.1M pre-seed

Outbound clicks are tokenized for directory analytics.