Sold by: Nullify
Securing your software development lifecycle should reduce security work, not create it. Nullify is your virtual security engineer that continuously finds and fixes issues across your codebase from commit to merge, allowing developers to focus on what truly matters. Nullify operates as a GitHub App that integrates directly into your existing version control workflows, with generative AI-enhanced detection and remediation enforceable as early as possible in the code review process.
Overview
Nullify is your virtual security engineer that continuously finds and fixes security issues across your codebase from commit to merge. Nullify partners closely with AWS to provide a security orchestration platform that allows developers to find and fix leaked secrets, vulnerabilities in code, open source dependencies, APIs, containers and IaC configurations, enabling adoption of secure code practices while reducing security noise and manual work items.
Nullify is a developer-first solution that integrates directly into your existing version control workflows, allowing detection and remediation to occur as quickly as possible in the code review process. Nullify provides your development teams with continuous application security feedback on every workflow, actionable remediation advice powered by fine-tuned LLMs and our proprietary vulnerability database, and rich insights and secure SDLC metrics that can be integrated into your existing observability platforms.
Highlights
- Code: Nullify scans new code changes through pull-requests reviews and existing code in your repository, continuously detecting and suggesting fixes for leaked secrets and security vulnerabilities it finds using our proprietary vulnerability database and LLMs.
- Dependencies: Nullify not only audits for CVEs, but also performs deep static and dynamic code analysis with metadata checks, to detect malicious behavior and attributes - assessing the security risk of your open-source dependencies and containers.
- APIs: Nullify performs payload-based dynamic testing on your live API endpoints, allowing you to detect and fix vulnerabilities in your APIs before pushing to production.
Details
Sold by
Delivery method
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/12 months |
|---|---|---|
Nullify AI Security Engineer | 1 Nullify AI Security Engineer | $800.00 |
Nullify Pro with volume discount (100 seats) | Tiered set of 100 Nullify licenses with volume discount (50%) | $40,000.00 |
Dimensions summary
Pricing centers on the Nullify AI Security Engineer license, billed per user under a contract. You buy one seat at a time, or choose the Nullify Pro option, which packages 100 licenses as a single tiered purchase with a 50% volume discount. The two dimensions cover the same license type at different quantities. Choose the single-user option for smaller counts, or the 100-seat bundle when you need volume and want the discounted per-license rate. Both are fixed-term contract commitments rather than usage-based billing.
Top-of-mind questions for buyers
One license represents a single AI Security Engineer that works like a member of your security team. It connects to your source repositories, cloud infrastructure, and workflow tools, then finds vulnerabilities, validates them, and prepares merge-ready fixes. Each license operates autonomously while your team approves final merges.
You buy the single option one license at a time, matching smaller needs. The Nullify Pro option packages 100 licenses together and applies a 50% volume discount to the per-license rate. Both are fixed-term contract commitments. The bundle lowers per-license cost when you need higher quantities.
Fix throughput has its own limits separate from license count. Nullify caps open fix pull requests at three per repository and five per remediation plan. This keeps the review queue manageable. Adding licenses expands coverage but does not remove these per-repository and per-plan fix caps.
nullify.ai+1
Helpful?
Vendor refund policy
See EULA
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Vendor resources
Support
Vendor support
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Updated weekly
Sentiment is AI generated from actual customer reviews on AWS and G2
Functionality
Ease of use
Customer service
Cost effectiveness
Positive reviews
Mixed reviews
Negative reviews
AI generated from product descriptions
Automated Code Vulnerability Detection
Scans new code changes through pull request reviews and existing repository code using proprietary vulnerability database and fine-tuned LLMs to detect and suggest fixes for leaked secrets and security vulnerabilities.
Dependency and Container Security Analysis
Performs deep static and dynamic code analysis with metadata checks on open-source dependencies and containers to detect malicious behavior and assess security risk beyond CVE auditing.
API Security Testing
Performs payload-based dynamic testing on live API endpoints to detect and fix vulnerabilities before production deployment.
Version Control Integration
Operates as a GitHub App that integrates directly into existing version control workflows, enabling detection and remediation during the code review process.
Actionable Remediation and SDLC Metrics
Provides continuous application security feedback with LLM-powered remediation advice and rich insights on secure SDLC metrics that can be integrated into existing observability platforms.
Code Quality Monitoring
Monitor and enforce coding standards on every pull request with automated quality checks
Static Application Security Testing
Find and fix application security issues using SAST, SCA, secrets detection, and Infrastructure as Code scanning
Dependency and Vulnerability Management
Identify and remediate vulnerable dependencies and security vulnerabilities across codebase
Engineering Metrics and Analytics
Provide data-driven insights and performance metrics to track and improve engineering team productivity
Multi-Repository Integration
Support integration with multiple Git providers including Github Cloud, Github Enterprise Cloud, Bitbucket Cloud, and Gitlab Cloud
False Positive Reduction
Reduces false positive alerts by 85% through market-leading noise reduction techniques.
AI-Powered Vulnerability Remediation
Provides AI-generated fixes for Static Application Security Testing (SAST) and Infrastructure as Code (IaC) issues with automated AI agent assistance.
Comprehensive Security Coverage
Delivers full security coverage across code-to-cloud throughout the entire software development life-cycle including CVE scanning, IaC analysis, secrets detection, and SAST.
CI/CD Pipeline Integration
Integrates CI Gating feature to scan feature branches for known vulnerabilities in open-source software packages and enforce security gates in continuous integration workflows.
Automated Compliance Management
Automatically generates Software Bill of Materials (SBOMs) and manages technical vulnerability tracking for compliance standards including SOC 2 and ISO 27001.
Validated by AWS Marketplace
FedRAMP
GDPR
HIPAA
ISO/IEC 27001
PCI DSS
SOC 2 Type 2
No security profile
No security profile
-
-
-
-
Standard contract
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.