NebuSec

NebuSec develops security tools focused on protecting AI-native systems, application code, software supply chains, and cloud infrastructure. The company positions its approach around continuous protection rather than one-time vulnerability scanning, aiming to identify exploitable vulnerabilities, validate the associated risk, and support engineering teams in remediation before issues can be exploited by attackers. The founding team includes researchers with backgrounds in vulnerability research, systems security, and program analysis, including individuals who have worked at Microsoft, participated in DARPA-funded research, and discovered zero-day vulnerabilities in software such as Chrome, Firefox, and the Linux kernel. Team members have competed on a top-ranked Capture The Flag (CTF) team, presented at DEF CON, and earned significant bug bounty payouts from Chrome vulnerability research. NebuSec targets enterprise engineering teams as its primary customer base, offering technology intended to combine vulnerability research methodology with AI-based analysis to continuously monitor codebases and infrastructure. The company has presented its research at industry conferences including Black Hat USA and the Linux Plumbers Conference. NebuSec is backed by Y Combinator.