Nucleus Security
Nucleus Security provides a unified vulnerability and exposure management platform that aggregates data from 200+ security tools into an AI-enriched system of record, serving 500+ enterprise, federal, and SLED clients through a 100% channel go-to-market.
- Company typePrivate
- Founded2019
- HeadquartersSarasota, United States
- Headcount101–250
- GTM typeB2B
- OfferingSoftware
What Nucleus Security does
Nucleus Security is a Sarasota, Florida-based software company that provides a unified vulnerability and exposure management platform for large enterprises, government agencies, and managed security service providers. Founded in 2018-2019 by former Department of Defense security experts Steve Carter, Scott Kuffer, and Nick Fleming, the company aggregates and normalizes vulnerability data from 200+ security, asset, and threat intelligence tools into a single system of record built on its Nucleus Data Core data fabric architecture. The platform layers AI-powered threat intelligence (Nucleus Insights), a Model Context Protocol server (Nucleus MCP Server) for natural-language interaction with security data, risk-based prioritization, automated remediation workflows, and compliance automation covering FedRAMP, NIST, CMMC, HIPAA, PCI DSS, and ISO 27001.
The company operates a 100% channel go-to-market, distributing exclusively through MSSPs, value-added resellers, system integrators, and marketplaces including AWS, AWS GovCloud, Google Cloud, Carahsoft, CrowdStrike, and FedRAMP. Revenue is generated via multi-year enterprise SaaS subscriptions with quote-based pricing. Nucleus serves more than 500 private and public sector clients including Mastercard, Cisco, Motorola, Paychex, Abbott, Autodesk, Australia Post, Premier League, and the Australian Red Cross, with deep penetration into federal civilian agencies, the Department of Defense, and state, local, and education (SLED) organizations following FedRAMP Moderate Authorization. The company has raised approximately $86.1 million across four funding rounds, most recently a $20 million Series C in February 2026 led by Delta-v Capital.
Nucleus Security firmographics
Firmographics- Name
- Nucleus Security
- Legal name
- Nucleus Security, Inc.
- Website
- https://nucleussec.com
- Company type
- Private
- Founded year
- 2019
- Operating status
- Operating
- Headcount range
- 101–250 employees
- Short description
- Nucleus Security provides a unified vulnerability and exposure management platform that aggregates data from 200+ security tools into an AI-enriched system of record, serving 500+ enterprise, federal, and SLED clients through a 100% channel go-to-market.
- Ownership category
- akta.pro rank
Nucleus Security industry classification
Industry- Product category
- Vulnerability and Exposure Management
- NAICS
- Computer Systems Design and Related Services (5415)
- SIC
- Services-Computer Programming, Data Processing, Etc. (7370)
- akta.pro primary industry
- Continuous Controls Monitoring (CCM) (HDADAHAE)
- akta.pro secondary industry
- Cloud-Native Application Protection Platforms (CNAPP) (HDABAHAH)
Keywords
Where Nucleus Security is headquartered
LocationHeadquarters
- HQ city
- Sarasota
- HQ country
- United States
- HQ region
- North America
Offices1 record
Markets served
Nucleus Security business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure
Revenue model
- Unified Vulnerability and Exposure Management Platform: Subscription-based SaaS platform providing unified vulnerability aggregation, risk prioritization, threat intelligence, and remediation workflow automation. Revenue derived from platform subscriptions with pricing based on enterprise requirements and scale.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Multi-year contract | Custom enterprise pricing |
Go-to-market motion3 records
Distribution channels4 records
Marketing channels7 records
Nucleus Security product offering
Product offeringCore offering
Nucleus Security provides a unified vulnerability and exposure management platform that aggregates, normalizes, deduplicates, and contextualizes vulnerability and asset data from 200+ security and threat intelligence tools. The platform prioritizes risks using AI-powered threat intelligence with daily-refreshed exploitability scoring and business context, and automates remediation workflows through ITSM integrations and a configurable automation framework. The platform is FedRAMP Moderate Authorized and is sold on a 100% channel basis to enterprise and government customers.
Product overview
Nucleus Security offers a unified vulnerability and exposure management platform designed for large enterprises and government agencies. The portfolio consists of the Nucleus Platform as the core product, supplemented by specialized sub-platforms including the Vulnerability Intelligence Platform (VIP) for threat research and Nucleus Insights for AI-powered threat intelligence. The platform delivers its capabilities through modular components covering vulnerability aggregation (200+ integrations), risk prioritization with AI-enriched scoring, automated remediation workflows, threat intelligence consolidation, asset management, and federal compliance automation (POA&M, Compliance Frameworks). The Nucleus MCP Server enables natural language AI interactions with vulnerability data. The company serves multiple verticals including federal government (FedRAMP authorized), SLED organizations, MSSPs, and application/cloud security use cases.
Differentiator
Problem solved
Functional benefit
Brands
- Nucleus Platform: The core unified vulnerability and exposure management platform that integrates data from 200+ security tools.
- Nucleus Insights
- Nucleus Vulnerability Intelligence Platform (VIP)
- Nucleus MCP Server
Products and services
- Nucleus Platform Unified vulnerability and exposure management platform that integrates security data from 200+ tools, prioritizes risk using AI-powered threat intelligence and business context, and automates remediation workflows. Serves as the central orchestration layer for enterprise and government exposure management programs.
- Nucleus Vulnerability Intelligence Platform (VIP) Dedicated vulnerability threat intelligence platform for accelerated investigation, monitoring, and response. Consolidates data from 16+ feeds including CISA KEV, EPSS, NVD, Recorded Future, Mandiant, and GreyNoise, with real-time exploitability research and CVE analysis capabilities.
- Nucleus Insights AI-powered threat intelligence feed providing daily-refreshed Nucleus Threat Rating (NTR) and actionable exploitation flags (Exploited, Public Exploit, Exploited by Malware, OT Impact). Enriches vulnerability findings with analyst-validated threat context and mitigation guidance embedded directly in vulnerability management workflows.
Quantifiable outcome
- 60% reduction in high-priority risks within 90 days
- +6 more outcomes
Companies that use Nucleus Security
Customer profileNamed customers21 records
Segments6 records
Ideal customer profiles3 records
Nucleus Security technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration25 records
AI capability6 records
Feature8 records
Nucleus Security partnerships and signals
Strategic signalPartnerships
Nine partnerships are on record, tiered core and secondary.
- WizcoreCertified Wiz Integration Network (WIN) Partner. Nucleus integrates with Wiz Cloud Security to provide organizations with a more complete understanding of risks from endpoint vulnerabilities. Named Most Popular New Integration in Wiz's WIN Partner Index 2025.
- ServiceNowcoreServiceNow Build Select Partner. Nucleus provides bi-directional ticketing integration with ServiceNow, enabling automated ticket creation, ownership assignment, and status tracking within ServiceNow workflows.
- AWScoreAWS Partner with marketplace listings for both commercial AWS Cloud and AWS GovCloud. Nucleus runs on AWS infrastructure and is available through AWS Marketplace for enterprise and government customers.
- Google Cloud PlatformsecondaryGoogle Cloud partner with marketplace listing enabling customers to deploy and manage vulnerability programs on GCP.
- CarahsoftcoreCarahsoft Marketplace listing for public-sector organizations. Carahsoft serves as a trusted IT solutions provider for government customers.
- CrowdStrikesecondaryCrowdStrike Marketplace partner. Nucleus integrates with Falcon Exposure Management to provide comprehensive vulnerability visibility from endpoint perspective.
- FedRAMPcoreFedRAMP Moderate Authorized platform listed on FedRAMP Marketplace. Enables federal agencies and FedRAMP cloud service providers to procure Nucleus through authorized channels.
- Orange CyberdefensecoreMSSP partner and customer using Nucleus to streamline vulnerability management for its customers. Over 85% of Orange Cyberdefense customers engage with the Nucleus dashboard weekly. Case study available highlighting operational and cost benefits.
- Channel Partner Ecosystemcore100% channel go-to-market program including 90+ distribution partners, 51 MSSPs, and 46 Value Added Resellers. Partners include 2NS, 2st.net, Access IT Group, Anect, Assura, Axoft, Barefoot Cyber, Blue Mantis, Brookcourt Solutions, Carahsoft, CCS Global, Clearshark by Optiv, CyberCX, CyberOne, and others in the partner directory.
Scale indicators10 records
Recent moves6 records
Expansion highlights7 records
Nucleus Security competitors and assessment
Company assessmentDirect peers
- Tenable: Tenable is a leading vulnerability management platform (Nessus/Tenable.sc, Tenable One exposure management) directly competing with Nucleus in enterprise and federal vulnerability and exposure management. Both companies target Fortune 500 and government buyers with risk-based prioritization and threat intelligence enrichment.
- Qualys: Qualys offers the TruRisk Platform for vulnerability management, detection response, and cloud security, overlapping with Nucleus's unified vulnerability aggregation and risk prioritization. Both companies target large enterprises and government agencies with integrated scanning and compliance reporting.
- Rapid7: Rapid7's InsightVM and Exposure Command platform provides risk-based vulnerability management and exposure analytics directly comparable to Nucleus. Both companies serve mid-market and enterprise security teams with consolidated vulnerability and threat intelligence workflows.
- Kenna Security (Cisco): Kenna Security (acquired by Cisco) pioneered risk-based vulnerability management with exploitability intelligence, and Nucleus has explicitly cited customer wins replacing Kenna. Direct overlap in risk-based prioritization and threat-informed remediation.
- Brinqa: Brinqa offers a vulnerability risk management platform that unifies vulnerability data from multiple scanners and prioritizes based on business risk. Directly comparable to Nucleus in approach to risk-based prioritization and asset context for enterprise vulnerability management.
- Balbix: Balbix provides an AI-driven risk-based vulnerability management and exposure platform competing with Nucleus on automated prioritization, asset context, and threat intelligence enrichment for enterprise security teams.
Emerging players
- Wiz: Wiz is a cloud security platform with strong vulnerability/exposure management capabilities and a certified Nucleus integration partner. Wiz competes for budget allocated to cloud exposure management and increasingly expands into broader vulnerability aggregation, intersecting Nucleus's cloud use case.
Broad incumbents
- CrowdStrike: CrowdStrike Falcon Exposure Management extends the Falcon platform into vulnerability and exposure management, overlapping with Nucleus at the endpoint-to-vulnerability workflow. CrowdStrike's broader XDR platform and marketplace presence create bundled competition for Nucleus's endpoint-derived vulnerability data.
- Palo Alto Networks (Cortex): Palo Alto Networks offers Cortex XSIAM and Prisma Cloud with vulnerability and exposure management capabilities. As a platform incumbent, Palo Alto competes with Nucleus for the consolidated security operations budget while also being a Nucleus integration partner.
- ServiceNow (Vulnerability Response): ServiceNow Vulnerability Response and its Security Operations suite compete with Nucleus's remediation workflow and ITSM-integrated vulnerability management capabilities. ServiceNow's installed enterprise base and bidirectional Nucleus integration make it both a partner and competitor for workflow ownership.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat6 records
Key risks6 records
Key highlights7 records
Customer concentration
Nucleus Security social profiles
Digital presenceNucleus Security compliance and trust
Trust signalCompliance9 records
Nucleus Security financial estimates
Financial estimateRevenue estimate
Valuation estimate
Nucleus Security leadership team
Management profileNumber of profiles
Profiles13 records
Nucleus Security funding detail
Funding detailFunding overview
Funding rounds5 records
Investors5 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Nucleus Security M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Nucleus Security
What does Nucleus Security do?
Nucleus Security provides a unified vulnerability and exposure management platform that aggregates, normalizes, deduplicates, and contextualizes vulnerability and asset data from 200+ security and threat intelligence tools. The platform prioritizes risks using AI-powered threat intelligence with daily-refreshed exploitability scoring and business context, and automates remediation workflows through ITSM integrations and a configurable automation framework. The platform is FedRAMP Moderate Authorized and is sold on a 100% channel basis to enterprise and government customers.
Is Nucleus Security a public or private company?
Nucleus Security is a private company. It is classified as venture growth investor backed and is currently operating.
When was Nucleus Security founded?
Nucleus Security was founded in 2019. It employs 101 to 250 people.
Where is Nucleus Security based?
Nucleus Security is headquartered in Sarasota, United States, in the North America region.
How does Nucleus Security make money?
One revenue line is on record: unified Vulnerability and Exposure Management Platform.
Who are Nucleus Security's main competitors?
Direct peers on record are Tenable, Qualys, Rapid7, Kenna Security (Cisco), Brinqa and Balbix. Wiz is listed as an emerging player. Broad incumbents are CrowdStrike, Palo Alto Networks (Cortex) and ServiceNow (Vulnerability Response).
Does Nucleus Security have an API?
Yes. Nucleus offers API integration capabilities enabling third-party security tools such as SIEM and SOAR platforms to access vulnerability intelligence. The Nucleus Insights API allows organizations to integrate AI-powered threat intelligence feed into external security tools to sharpen detection, focus hunts on exploitable risk, and coordinate response across teams. Developer documentation is at nucleussec.com/platform/nucleus-insights.
What industry is Nucleus Security in?
Nucleus Security's product category is Vulnerability and Exposure Management. Its primary akta.pro industry code is HDADAHAE, Continuous Controls Monitoring (CCM), with a secondary code of HDABAHAH, Cloud-Native Application Protection Platforms (CNAPP). Its NAICS code is 5415 and its SIC code is 7370.