Sold by: NullifyÂ
Securing your software development lifecycle should reduce security work, not create it. Nullify is your virtual security engineer that continuously finds and fixes issues across your codebase from commit to merge, allowing developers to focus on what truly matters. Nullify operates as a GitHub App that integrates directly into your existing version control workflows, with generative AI-enhanced detection and remediation enforceable as early as possible in the code review process.
Overview
Nullify is your virtual security engineer that continuously finds and fixes security issues across your codebase from commit to merge. Nullify partners closely with AWS to provide a security orchestration platform that allows developers to find and fix leaked secrets, vulnerabilities in code, open source dependencies, APIs, containers and IaC configurations, enabling adoption of secure code practices while reducing security noise and manual work items.
Nullify is a developer-first solution that integrates directly into your existing version control workflows, allowing detection and remediation to occur as quickly as possible in the code review process. Nullify provides your development teams with continuous application security feedback on every workflow, actionable remediation advice powered by fine-tuned LLMs and our proprietary vulnerability database, and rich insights and secure SDLC metrics that can be integrated into your existing observability platforms.
Highlights
- Code: Nullify scans new code changes through pull-requests reviews and existing code in your repository, continuously detecting and suggesting fixes for leaked secrets and security vulnerabilities it finds using our proprietary vulnerability database and LLMs.
- Dependencies: Nullify not only audits for CVEs, but also performs deep static and dynamic code analysis with metadata checks, to detect malicious behavior and attributes - assessing the security risk of your open-source dependencies and containers.
- APIs: Nullify performs payload-based dynamic testing on your live API endpoints, allowing you to detect and fix vulnerabilities in your APIs before pushing to production.
Details
Sold by
Delivery method
Deployed on AWS
Unlock automation with AI agent solutions
Fast-track AI initiatives with agents, tools, and solutions from AWS Partners.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/12 months |
|---|---|---|
Nullify Pro | Priced per code contributor in GitHub (minimum 1) | $800.00 |
Nullify Pro with volume discount (100 seats) | Tiered set of 100 Nullify licenses with volume discount (50%) | $40,000.00 |
Vendor refund policy
See EULA
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA)Â .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Vendor resources
Support
Vendor support
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Updated weekly
Sentiment is AI generated from actual customer reviews on AWS and G2
Functionality
Ease of use
Customer service
Cost effectiveness
Positive reviews
Mixed reviews
Negative reviews
AI generated from product descriptions
Code Scanning
"Continuous security scanning of code changes and existing repositories using proprietary vulnerability database and machine learning models"
Dependency Analysis
"Advanced static and dynamic code analysis for detecting security risks in open-source dependencies and containers with metadata verification"
API Security Testing
"Payload-based dynamic testing of live API endpoints to identify and remediate potential vulnerabilities before production deployment"
Generative AI Remediation
"AI-powered vulnerability detection and actionable remediation advice using fine-tuned large language models"
Version Control Integration
"Direct integration with GitHub workflows enabling real-time security checks during code review and commit processes"
Code Quality Analysis
Automated static code analysis for identifying and reporting code quality issues across multiple programming languages
Security Scanning
Comprehensive security scanning including Static Application Security Testing (SAST), Software Composition Analysis (SCA), and secret detection
Version Control Integration
Native integration with multiple Git providers including GitHub, GitHub Enterprise, Bitbucket, and GitLab
Continuous Monitoring
Real-time code quality and security monitoring across pull requests and development workflows
Performance Metrics
Data-driven insights and metrics for tracking engineering team code quality and performance improvements
Vulnerability Detection
Advanced static application security testing (SAST) with AI-powered false-positive reduction and automated vulnerability identification
Code Security Scanning
Comprehensive security scanning across code, infrastructure as code (IaC), secrets, and open-source software packages with CI/CD integration
Automated Remediation
AI-generated automatic vulnerability fixes and single-click issue resolution using intelligent autofix capabilities
Compliance Management
Automatic generation of Software Bill of Materials (SBOM) and technical vulnerability management for compliance standards
Development Workflow Integration
Extensive integration support with over 100 development tools and platforms across software development lifecycle
Validated by AWS Marketplace
FedRAMP
GDPR
HIPAA
ISO/IEC 27001
PCI DSS
SOC 2 Type 2
No security profile
No security profile
-
-
-
-
Standard contract
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.