Agent Index by Heritage Services
Submit / Claim
Home / Compare / Nullify autonomous product-security agents vs StackHawk Wingman

Nullify autonomous product-security agents vs StackHawk Wingman

Quick answer

Nullify autonomous product-security agents (find-to-fix with merge-ready PRs and AI Pentest Agent) (Nullify (Nullify Holdings Pty Ltd)) and StackHawk Wingman (find-fix-verify security for AI coding agents) (StackHawk (StackHawk, Inc.)) are both listed in the Code security category of Agent Index.

They share no framework tags in our dataset.

This is not a ranking.

Nullify autonomous product-security agents (find-to-fix with merge-ready PRs and AI Pentest Agent) (Nullify (Nullify Holdings Pty Ltd)) and StackHawk Wingman (find-fix-verify security for AI coding agents) (StackHawk (StackHawk, Inc.)) are both listed in the Code security category of Agent Index. They share no framework tags in our dataset.

Columns

Hide columns to focus the table. The full comparison stays in the HTML.

Field Nullify autonomous product-security agents (find-to-fix with merge-ready PRs and AI Pentest Agent)StackHawk Wingman (find-fix-verify security for AI coding agents)
Vendor Nullify (Nullify Holdings Pty Ltd)StackHawk (StackHawk, Inc.)
HQ Australia · Australia and New ZealandUnited States · North America
Primary category Code securityCode security
Also listed in Code security, SecurityCode security, Security
Summary Australian 'autonomous system of agents' for product security that covers code, secrets, API pentesting and exploit validation. It proves findings with reproducible evidence, scores them against the customer's assets, writes merge-ready fix PRs routed to code owners, and runs remediation campaigns through Jira and Slack until merge, with the customer keeping final merge approval.Security plugin for AI coding agents (Claude Code, Cursor, GitHub Copilot, Codex, Antigravity) that runs dynamic tests against the running app during the coding session, has the agent triage and fix what it finds, then rescans to prove the fix before the pull request. Published at US$10 per user per month.
Frameworks (vendor-stated) ——
Frameworks (vendor-claimed) ——
Capabilities / tasks appsec, sast, sca, secrets detection, remediation, vulnerability management, pen test managementappsec, remediation, vulnerability management, agent platform with security integrations
Pricing (as published) Not published. Nullify says it prices on work performed (scoped program and estimated volume), not seats or license tiers.Wingman: US$10 per user per month, unlimited apps, 14-day free trial (no card). Scale plan: contact sales.
Pricing model quotepublished-tiers
Primary source https://www.nullify.ai/https://www.stackhawk.com/product/wingman/
Last checked 2026-10-192026-10-18
Official site https://www.nullify.ai/https://www.stackhawk.com/product/wingman/

FAQ (from this dataset)

What is the difference between Nullify autonomous product-security agents and StackHawk Wingman?

Both are listed under Code security. Shared tasks: appsec, remediation, vulnerability-management. Nullify autonomous product-security agents-only tasks: sast, sca, secrets-detection, pen-test-management. StackHawk Wingman-only tasks: agent-platform-security-integrations. Differences are from stored category and task tags, not a ranking.

Which one publishes pricing?

Nullify autonomous product-security agents (find-to-fix with merge-ready PRs and AI Pentest Agent): Not published. Nullify says it prices on work performed (scoped program and estimated volume), not seats or license tiers. StackHawk Wingman (find-fix-verify security for AI coding agents): Wingman: US$10 per user per month, unlimited apps, 14-day free trial (no card). Scale plan: contact sales.

Where are Nullify autonomous product-security agents and StackHawk Wingman headquartered?

Nullify autonomous product-security agents (find-to-fix with merge-ready PRs and AI Pentest Agent) publishes HQ in Australia. StackHawk Wingman (find-fix-verify security for AI coding agents) publishes HQ in United States.

Listings tagged agent platform with security integrations are coding platforms with a documented scanner or vulnerability-fix workflow, not dedicated application-security products. Dedicated AppSec listings are compared on the AI code security agents table.

Side-by-side data is generated from the open dataset. “Vendor-claimed” frameworks are as marketed by each vendor and not verified by Agent Index; framework tags indicate relevance, not certification. Request current quotes from each vendor before buying. This page does not rank or score vendors. Sponsored comparisons, if any, will be labelled.

Use-case comparisons

Related

More Nullify autonomous product-security agents (find-to-fix with merge-ready PRs and AI Pentest Agent) comparisons

More StackHawk Wingman (find-fix-verify security for AI coding agents) comparisons