Innovation Matrix Assessment
Applies autonomous AI agents to end-to-end AppSec triage and remediation, an emerging but increasingly crowded approach.
Small early-stage team; production maturity across the claimed code/dependency/container/IaC surface is not independently verified.
Closed a $12.5M seed round in February 2026 led by SYN Ventures, bringing total funding to $16.9M.
Aims to replace manual AppSec triage with autonomous fix-generation agents rather than incremental scanning improvements.
No independent data on fix accuracy or false-positive rates was found; claims are vendor-reported.
Targets a real and growing pain point (AppSec talent shortage amid AI-accelerated code generation) but is unproven at scale.
Why CISOs Should Care
Offers CISOs an 'AI workforce' of autonomous agents that triage findings, validate exploits, score business risk, and ship merge-ready fixes for code, dependency, API, container, secrets, and IaC vulnerabilities.
What Makes It Different
Positions itself as replacing manual AppSec triage with autonomous AI agents that carry fixes through to merge, rather than only surfacing findings for humans to act on.
The Matrix Verdict
47/100 — EMERGING / UNRANKED
An early-stage but well-funded (~$16.9M total) AI-native product-security startup addressing the AppSec talent shortage, backed by SYN Ventures.
Editorial Note: Claims vs. Verified Findings
Total funding and product-capability claims are drawn from company and press materials; independent measurement of fix accuracy or false-positive rates was not found in this pass. Originally founded in Sydney, Australia before relocating operations to San Francisco.
Sources
Alternatives to Nullify
ThreatLocker
CISO ReviewedZero Trust endpoint protection platform that blocks unknown applications by default through allowlisting, ringfencing, and storage control.
Endor Labs
Reachability-based software composition analysis that filters open-source dependency risk down to what code paths are actually exploitable.
JFrog
Public software supply chain security platform (Xray plus Advanced Security) that scans binaries and artifacts end-to-end from the…
Apiiro
Builds a continuous 'code risk graph' that maps code, developers, and cloud deployment to prioritize AppSec findings by…
Socket
A software supply chain security platform that combines automated dependency analysis with human verification to catch malicious and…
Adaptive Security
AI-driven platform that simulates deepfake, voice, and multichannel social-engineering attacks to train and test organizations against next-generation phishing.