Nullify runs an AI system that scans code for security vulnerabilities, decides which ones matter, and opens merge-ready fixes without a human sitting in the critical path. The Sydney-based company was founded in 2022 by Tim Thacker, Shantanu "Shan" Kulkarni, and Tony Mao, and has raised over $4.5 million from investors including Two Sigma Ventures, Root Ventures, and OIF Ventures.
Nullify connects to GitHub and Slack, running repository assessments and pull-request reviews, then opens autofix pull requests instead of only flagging a list of vulnerabilities for a security team to triage by hand. The company says its product has saved customers more than 48,000 hours of manual security work, positioning autonomous remediation as the differentiator against traditional static-analysis scanners that stop at detection.
Nullify suits engineering and product-security teams that want vulnerabilities fixed rather than reported, particularly at companies without a large dedicated AppSec headcount. Pricing runs on the Pro tier at $800 per year (roughly $67/month), covering unlimited repositories, users, and detections, with no free tier and custom Enterprise plans for organizations needing SSO and advanced integrations.
