Web

NullRun

Last updated 2026-09-08 · benchmark measured 2026-09-08 — deterministic & reproducible

NullRun sits between your AI agents and the outside world. Cap spend, block unsafe tool calls, require human approval, and audit every decision.

Are you the maker of NullRun? Claim this listing. It is free, takes a meta tag, a DNS record or GitHub admin rights, and never changes the score.

Launched something? Add your product, free.

To cite this score: legit.show/s/nullrun-io/2026-09-08. That address never changes; this page moves with every re-measure.

Legit.Show scored NullRun 98/100 on 2026-09-08, measured across all 7 frames from its public surface. legit.show/s/nullrun-io/2026-09-08

Is NullRun production-ready?

Legit.Show scores NullRun 98 out of 100 — the simple average of its 7 measured frames. Legit.Show ran its deterministic 7-Frame production-readiness benchmark on NullRun (public-surface assessment), measured from the public surface with no LLM in the scoring path. Its strongest frame is Security; its weakest is Accessibility. Every frame it averages is published with its evidence on the Legit.Show listing.

The 7 Frames

• Performance — 95/100
• Accessibility — 95/100
• Security — 100/100
  How this compares across the catalogue: The Web Security Baseline
• Privacy — 100/100
  How this compares across the catalogue: The Privacy Gap
• Reliability — 100/100
• Standards — 97/100
• Discoverability — 100/100

What we measured

• Security headers present: CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy.
• Served over HTTPS with a valid certificate.
• Real Lighthouse performance run — 942 ms to first byte.
• Returns a proper 404 for unknown routes.
• 1 of 1 sampled routes reachable.
• Has a reachable privacy policy.
• Sets cookies / loads scripts with no consent prompt.
• Discoverable: structured data, sitemap, OpenGraph image, canonical URL.

Who built it

product account @nullrun_io

Sources and updates

Description

Taken from nullrun.io's own website on 2026-09-08.

Benchmark

Measured by Legit.Show from the live site, the way any visitor sees it — with no access to its code or accounts. Same method for every product, and no AI decides the score. Last checked 2026-09-08.

Put together from public information, without NullRun's involvement. If anything here is wrong, tell us and a person will check it.

Visit NullRun → · How this was measured →