What Nightvision is
Nighvision creates API docs based on scanning your code, and then tests those endpoints from the outside based on the docs they created. The vendor site is nightvision.net. This profile is an entry in the oneNorma directory, not a vendor landing page.
What Nightvision covers
Nightvision is in the catalog for these capabilities. Categories: DAST and API Security. Catalog tags: Best for Enterprise and Best for Startups.
How to evaluate Nightvision in a security program
Use Nightvision as a stack candidate, not as diligence evidence. The oneNorma score for Nightvision is 3.5/10 (percentile 6). If the real gap is in DAST and API Security, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what nightvision.net publishes. Contrast it with pentesting and Security Cloud & Compliance.