AI-generated from public sourcesThe starting point for every profile: auto-generated by 0-Doubt from public vendor materials, and not yet confirmed by the vendor or an independent analyst. Nothing here is hidden or overstated — it simply has not been reviewed yet.Where every profile starts, before the vendor or an analyst has reviewed it. A higher label means a more independent source — not a better product.How trust works →Secure coding rating: 0/100How this score is computedA product with no known CVEs starts at a neutral score and climbs the longer it goes without one; a product with known CVEs is penalized by severity instead. This one has 8 known CVEs (vendor-level match — see the CVE list below) and is tracked as ~107 days old in our catalog (a stand-in for real release date, which we don't track). The platform admin controls the formula's weights.
AI platform that finds, triages, and auto-remediates vulnerabilities end-to-end.
Known CVEs (8)About this listSourced from the public NVD database, matched by vendor name. Shown here at the vendor level — we don't track per-product/version data, so a listed CVE may affect a different product from this vendor, not necessarily this one. “New” means published within the last 30 days. “Actively exploited” means CISA's Known Exploited Vulnerabilities (KEV) catalog confirms real-world exploitation, not just a theoretical severity score. An “EPSS” chip appears at 10% and above: that is FIRST's estimated chance of exploitation in the next 30 days, which measures likelihood rather than impact and so can differ sharply from the severity beside it.
In the Linux kernel, the following vulnerability has been resolved:
KVM: x86: Nullify irqfd->producer if updating IRTE for bypass fails
Nullify irqfd->producer if updating the IRTE for bypass fails,…
In the Linux kernel, the following vulnerability has been resolved:
usb: gadget: uvc: fix NULL pointer dereference during unbind race
Commit b81ac4395bbe ("usb: gadget: uvc: allow for application to…
ormar is a async mini ORM for Python. Versions 0.23.0 and below are vulnerable to Pydantic validation bypass through the model constructor, allowing any unauthenticated user to skip all field validati…
Nullify is an autonomous product‑security system that finds vulnerabilities, validates exploitability with reproducible evidence, prioritises risk using business context, and prepares merge‑ready fixes across code, dependencies, secrets, cloud and APIs, enabling security and engineering teams to close the patch gap without manual triage.
Strengths
AI‑native SAST across 16 languages that catches business‑logic flaws
Continuous pentesting of REST and GraphQL APIs with reproducible exploit evidence
Validated automated remediation delivered as merge‑ready pull requests
One prioritised backlog scoring findings on severity, exploitability, reachability and business impact
Coverage of code, secrets, dependencies, cloud and API pentesting in a single platform
Self‑healing fixes that refactor themselves to merge‑ready status
Pricing & packaging
Priced on work done, not seats; customers pay for the work Nullify performs, scoped by volume and outcomes rather than headcount or license tiers.
News about Nullify (6)Where this comes fromItems from Nullify's own public feeds — changelog, blog, GitHub releases or status page — that name Nullify in the headline or summary. News from Nullify that does not name this product is on the vendor's page instead. Each headline links to the original source; nothing here is written by 0-Doubt.
