Book a live demo

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Aenean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Aenean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Aenean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.

Co-founder & CTO

Tim Thacker

Tim Thacker is the co-founder and Chief Technology Officer of Nullify.

Nullify finds, proves and fixes product security vulnerabilities, then drives every pull request to the right owner until it merges.

Expertise

Tim writes about the engineering behind that loop: how a working exploit proves a finding is real, how an automated fix is checked before a developer ever sees it, and how a team responds when a new runtime vulnerability lands overnight.

At Nullify

Tim co-founded Nullify with CEO Shan Kulkarni and leads the company's technology. Nullify is headquartered in San Francisco and has an office in Sydney, Australia.

Latest from Tim Thacker

7 articles on the Nullify blog.

Industry Insights

AI Agent Security: Risks, Examples and Best Practices for Engineering Teams

Tim Thacker · October 26, 2026

Industry Insights

How to Set Up AI Code Review for Security on Pull Requests

Tim Thacker · October 26, 2026

Industry Insights

AI Code Security: What It Is, How It Works and Where It Falls Short

Tim Thacker · October 26, 2026

How We Had PHP2Shell Fixes Ready Before Our Customers Woke Up

Tim Thacker · October 22, 2026

How to Create Merge-Ready AI Code Fixes That Engineers Trust

Tim Thacker · September 30, 2026

Exploit Validation: Proof, Not Guesses

Tim Thacker · June 26, 2026

Trust Issues: Can We Actually Validate Automated Vulnerability Repair?

Omri Ram and Tim Thacker · June 18, 2026