Artificial intelligence workforce for product security startup Nullify Holdings Pty. Ltd. today announced that it has raised $12.5 million in new funding to accelerate the deployment of its AI offering across midsized enterprises and high-growth software-as-a-service companies globally.

Founded in 2022, Nullify offers what it calls the world’s first autonomous AI workforce for product security. The company says its system acts like a team of AI security engineers that continuously monitor an organization’s software environment to detect, assess and fix security issues without constant human oversight, rather than being just another vulnerability scanner or alert dashboard.

Nullify’s platform ingests a company’s code, cloud configurations and business context to map the full technology stack and understand how systems are connected. The platform’s contextual awareness allows the AI workforce to reason about real-world exploitability and prioritize vulnerabilities based on actual risk rather than generic severity scores.

Once vulnerabilities are detected, the company’s AI agents can autonomously triage, validate and generate reproducible proofs of exploitability allowing the system. That way, they can confirm whether a bug can truly be exploited and estimate its impact on the business. The way results are categorized and filtered reduces false positives and helps security teams focus on what matters most in their risk landscape.

Nullify’s platform and AI agents can also generate merge-ready fixes and work with development tools such as GitHub, Jira and Slack to assign fixes to the appropriate engineers, track their progress and close the loop on vulnerability remediation. The automation functionality extends through code review feedback loops and escalation workflows to help ensure that fixes are not only proposed but also actually merged and deployed.

The company says early adopters of its platform have already replaced fragmented legacy tools and manual security work with a single, autonomous AI workforce that delivers rapid risk reduction, closes the loop on vulnerability management and regains control over their security posture.

According to the company, its AI “employees” have saved more than 42,000 hours of manual work, auto-resolved more than 450 vulnerabilities and achieved a nearly 90% average merge-ready rate for vulnerability fix pull requests.

“For organizations facing significantly greater speed and sophistication of AI-enabled attackers, holding the line with legacy dashboards, scanners and ticket routing is a losing game,” said co-founder and Chief Executive Shan Kulkarni. “Whether organizations have a mature program or zero product security headcount, Nullify AI employees replace tool sprawl and the human hours it consumes so defenders can finally outpace the offense.”

The seed round was led by SYN Ventures, with existing investor Black Nova Venture Capital also participating. As part of the deal, SYN Ventures Operating Partner Glenn Chisholm is joining Nullify’s Board of Directors.

“The security labor gap is the defining challenge for defenders today,” said Chisholm. “Nullify’s first-of-its-kind AI workforce doesn’t just summarize alerts, it autonomously makes decisions and acts, delivering outcomes that once required entire teams.”

The new funding takes the total raised by Nullify to date to $16.9 million. The company has offices in San Francisco and Sydney, Australia.

Image: Nullify