What NightVision does

NightVision is a developer-first application security platform that delivers gray-box Dynamic Application Security Testing (DAST) and API discovery for web applications and APIs. Founded in 2022 and headquartered in Bradenton, Florida, the company targets security engineers, platform engineers, and security champions at organizations that ship software continuously and find traditional DAST tools too slow and noisy to integrate into developer workflows. The platform's three core capabilities are Dynamic Testing (10-15 minute scans across public and private networks), API Discovery via the proprietary API eNVy™ engine (generating OpenAPI specs from source code in under 20 seconds and surfacing undocumented and shadow APIs), and Code Traceback (tying every finding to the exact file path and line number in source code). Findings are posted directly into pull requests with AI-assisted remediation context, and the tool integrates natively with GitHub Actions, GitLab CI, Jenkins, and Azure DevOps without requiring proxies, agents, or infrastructure changes.

The company's go-to-market combines a self-service product-led motion—a free 3-day trial with no credit card and paid plans starting at $15,000 per year per application—with an enterprise sales motion offering custom pricing and demos for larger deployments. Revenue is generated through annual subscription licenses, and the company is SOC 2 Type II certified, an important gating credential for enterprise and financial-services buyers. Disclosed customers include BeyondTrust, JPMorgan, Tyler Technologies, Cigital, Ineo, and Spektrum, spanning financial services, security software, and government-adjacent technology verticals.

NightVision has raised approximately $12.3 million in disclosed funding across a $5.4 million seed round in April 2024 and a roughly $6.9 million follow-on in June 2025, from investors across the cybersecurity, industrial, consumer, and financial services sectors. The company remains privately held, founder/management-controlled, and pre-Series A based on round sizes, with 11-50 employees and active product and go-to-market investment.

Name

NightVision

Legal name

NightVision

Website

https://nightvision.net

Company type

Private

Founded year

2022

Operating status

Operating

Headcount range

11–50 employees

Short description

NightVision is a developer-first DAST and API security platform that delivers gray-box dynamic application security testing, source-code-based API discovery, and line-of-code precision findings natively inside CI/CD pipelines for security engineers, platform engineers, and developer teams.

Ownership category

akta.pro rank

Product category

Application Security Testing Software

NAICS

Other Computer Related Services (541519)

SIC

Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Application Security Testing (SAST/DAST/IAST/SCA) (HDADACAC)

akta.pro secondary industry

API Security (Discovery, Testing, Runtime Protection) (HDADACAB)

Keywords

• Dynamic application security testing
• API security testing
• CI/CD security scanning
• Application security testing
• API discovery platform

Headquarters

HQ city

Los Angeles

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Technology or R&D, Personnel, Marketing or Sales, Infrastructure

Revenue model

1. Subscription Licensing: Annual subscription-based pricing model for application security scanning. Paid plans start at $15,000/year for a single application, with custom enterprise pricing available for larger teams. Includes free 3-day trial with no credit card required.

Pricing tiers

Go-to-market motion2 records

Distribution channels3 records

Marketing channels4 records

Core offering

NightVision is a developer-first Dynamic Application Security Testing (DAST) and API security platform that scans web applications and APIs in 10-15 minutes and posts validated, line-of-code findings directly into pull requests. The platform combines gray-box dynamic scanning, API Discovery (API eNVy™) that generates OpenAPI specs from source code, and Code Traceback that ties findings to exact file paths. It integrates natively with GitHub Actions, GitLab CI, Jenkins, and Azure DevOps, requiring no proxies, agents, or infrastructure changes.

Product overview

NightVision is a unified developer-first DAST (Dynamic Application Security Testing) and API security platform. The platform consists of three integrated capabilities: Dynamic Testing provides CI/CD-native gray-box scanning that completes in 10-15 minutes; API Discovery (API eNVy™) generates OpenAPI specs from source code in under 20 seconds to surface undocumented and shadow APIs; and Code Traceback delivers line-of-code precision by tying findings to exact file paths. All three components share a common workflow where findings are posted directly to pull requests with remediation context.

Differentiator

Problem solved

Functional benefit

Brands

• API eNVy: API Discovery technology that generates complete OpenAPI specs from source code in under 20 seconds

Products and services

• NightVision Dynamic Testing Gray-box dynamic application security testing (DAST) platform that scans web applications and APIs across public and private networks. Completes scans in 10-15 minutes with evidence-based, validated findings suitable for CI/CD pipelines, fast enough to run on every commit.
• API Discovery (API eNVy™) Generates complete OpenAPI specifications directly from source code in under 20 seconds. Discovers documented, undocumented, and shadow APIs including REST endpoints that traditional DAST scanners miss.
• NightVision Platform (Code Traceback) Unified developer-first DAST and API security platform combining Dynamic Testing, API Discovery, and Code Traceback. Ties every security finding to the exact file path and line number in source code, with AI-assisted remediation context posted directly to pull requests.

Quantifiable outcome

• 10-15 minute full scan time (vs hours for traditional DAST)
• +3 more outcomes

Named customers6 records

Segments3 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration4 records

AI capability4 records

Feature4 records

Scale indicators4 records

Recent moves6 records

Expansion highlights5 records

Direct peers

• StackHawk: StackHawk is a DAST platform purpose-built for CI/CD pipelines and developer workflows, closely mirroring NightVision's positioning around scan-on-PR, native CI integrations, and developer-first UX. It is NightVision's most directly comparable competitor and is explicitly called out on NightVision's own comparison page.
• Invicti (formerly Netsparker): Invicti is an enterprise DAST platform (Netsparker + Acunetix) that emphasizes automated crawling, proof-based scanning, and CI/CD integrations. It competes head-on with NightVision in the DAST category and is featured on NightVision's comparison page.
• PortSwigger Burp Suite: Burp Suite is the de facto standard DAST and web vulnerability toolkit used by penetration testers and security engineers. It competes with NightVision on dynamic scanning of web apps and APIs, particularly for hands-on security professionals, and is featured on NightVision's comparison page.
• Rapid7 InsightAppSec: InsightAppSec is Rapid7's cloud-native DAST product integrated with the broader Rapid7 Insight platform. It targets the same enterprise AppSec buyer as NightVision with overlapping dynamic scanning and CI/CD workflow capabilities.
• Detectify: Detectify is a SaaS DAST and attack surface monitoring platform with an external crowdsourced vulnerability research model. It targets similar security engineer and AppSec buyer personas as NightVision and competes in the same developer-friendly DAST segment.

Broad incumbents

• Veracode: Veracode is a large, established application security platform offering SAST, DAST, SCA, and manual penetration testing as an integrated suite. It competes with NightVision primarily on the DAST leg but bundles broader AppSec capabilities that NightVision does not match, and is featured on NightVision's comparison page.
• Checkmarx: Checkmarx is a major application security vendor spanning SAST, DAST, SCA, IaC scanning, and API security. Its DAST and API security products overlap directly with NightVision's core offering, and Checkmarx is featured on NightVision's comparison page as a named competitor.
• Qualys Web Application Scanning: Qualys WAS is the dynamic web application scanning component of the broader Qualys Cloud Platform, which spans vulnerability management, CSPM, and compliance. It targets enterprise security buyers overlapping with NightVision's enterprise motion, though typically as part of a larger platform deal.
• Snyk: Snyk is a leading developer security platform spanning SCA, SAST, container, IaC, and increasingly DAST/API security. While NightVision's core product competes most directly with DAST-native peers, Snyk represents the broader platform-consolidation threat to NightVision's standalone positioning.

Emerging players

• OWASP ZAP: OWASP ZAP is the most widely deployed open-source DAST scanner, used by individual developers, security teams, and CI/CD pipelines worldwide. It is not a commercial competitor but anchors the free baseline that NightVision must beat on developer UX, speed, and API discovery to justify $15K+/year pricing.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights6 records

Customer concentration

Compliance1 record

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds2 records

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about NightVision