# NightVision

> NightVision is a whole-application DAST (dynamic application security testing) platform. A real-browser crawler maps modern web applications fully authenticated, including MFA-protected states, while local static analysis derives OpenAPI specs from supported source code and adds API routes to the test workflow. Request-level findings retain HTTP evidence; supported source-discovered API scans can add Code Traceback to file and line. An open-source MCP server and Agent Skills let coding agents launch scans, retrieve evidence, propose fixes in repository context, and rescan before human review.

## Platform
- [Platform Overview](https://nightviz.ai/platform): How NightVision crawls, authenticates, tests web apps and APIs, and links findings to source.
- [Web App DAST](https://nightviz.ai/dast): The crawler built for modern apps: LLM-based form handling, WebDriver BiDi intelligent waiting, duplicate page detection.
- [Authenticated Scanning](https://nightviz.ai/authenticated-scanning): Playwright-recorded logins with vaulted credentials, TOTP/MFA, and a login-check gate that fails CI instead of scanning logged out.
- [API Discovery](https://nightviz.ai/api-discovery): API eNVy generates OpenAPI specs from source in under 20 seconds, locally and deterministically; no LLM reads your code to generate the spec.
- [AI-Assisted Remediation](https://nightviz.ai/remediation): Runtime evidence, file:line Code Traceback on supported source-discovered API scans, SARIF export, and an agent-driven fix and verification-scan loop governed by repository review controls.
- [For Coding Agents](https://nightviz.ai/agent-ready): The open-source MCP server and Agent Skills for whole-app DAST, evidence retrieval, remediation, and rescanning. The guided one-call workflow is rolling out in early access.
- [Integrations](https://nightviz.ai/integrations): GitHub, GitLab, Jenkins, Azure DevOps, Bitbucket, Jira, Slack, Teams, Terraform, JFrog Artifactory, WorkOS SSO/SCIM, REST API.

## Get started
- [Pricing](https://nightviz.ai/pricing): Per-application plans with a self-serve free trial.
- [Request a Demo](https://nightviz.ai/demo): Book a guided walkthrough.
- [Start a Free Trial](https://app.nightvision.net/?signup=1): Self-serve trial, no credit card.

## Comparisons
- [NightVision vs Checkmarx](https://nightviz.ai/compare/nightvision-vs-checkmarx)
- [NightVision vs Burp Suite](https://nightviz.ai/compare/nightvision-vs-burp-suite)
- [NightVision vs Invicti](https://nightviz.ai/compare/nightvision-vs-invicti)
- [NightVision vs Veracode](https://nightviz.ai/compare/nightvision-vs-veracode)
- [NightVision vs StackHawk](https://nightviz.ai/compare/nightvision-vs-stackhawk)
- [NightVision vs Snyk](https://nightviz.ai/compare/nightvision-vs-snyk)
- [NightVision vs Rapid7 InsightAppSec](https://nightviz.ai/compare/nightvision-vs-rapid7-insightappsec)
- [NightVision vs 42Crunch](https://nightviz.ai/compare/nightvision-vs-42crunch)
- [NightVision vs Escape](https://nightviz.ai/compare/nightvision-vs-escape)
- [All comparisons](https://nightviz.ai/compare)

## Key guides
- [What you should know about application security testing](https://nightviz.ai/what-you-should-know-about-ast)
- [Shadow API detection](https://nightviz.ai/use-cases/shadow-api-detection)
- [SAST vs DAST: the essential role of DAST](https://nightviz.ai/blog/the-essential-role-of-dynamic-application-security-testing-dast-in-complementing-static-application-security-testing-sast)
- [Automated authentication issue remediation: from detection to pull request](https://nightviz.ai/blog/introducing-automated-authentication-issue-remediation-from-detection-to-pull-request-in-minutes)
- [The NightVision MCP server](https://nightviz.ai/blog/introducing-the-nightvision-mcp-server-a-new-way-to-interact-with-nightvision)
- [NightVision skills for Claude Code](https://nightviz.ai/blog/nightvision-skills-for-claude-code-are-now-available-heres-what-they-do)

## More
- [Documentation](https://docs.nightviz.ai)
- [Company](https://nightviz.ai/company)
- [Partners](https://nightviz.ai/partners)