What Nullify is
Nullify is also starting with SAST use cases, but has expanded their AI agent functionality to be more holistic with their slack app and creating rudimentary threat models of code changes. Their vision is more holistic - focusing on creating an AI based product security engineer. The vendor site is nullify.ai. This profile is an entry in the oneNorma directory, not a vendor landing page.
What Nullify covers
Nullify is in the catalog for these capabilities. Categories: AI Security. Catalog tags: Best for Startups.
How to evaluate Nullify in a security program
Use Nullify as a stack candidate, not as diligence evidence. The oneNorma score for Nullify is 4.8/10 (percentile 34). If the real gap is in AI Security, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what nullify.ai publishes. Contrast it with pentesting and Security Cloud & Compliance.
