Nucleus is a vulnerability and exposure management platform from Nucleus Security. It brings the findings from an organisation’s scanners, asset inventories and threat intelligence into one place, tracks which vulnerabilities attackers are exploiting in the wild, and routes the ones that matter to the people who own them.
It is built for large enterprises and the public sector, where findings from dozens of tools pile up faster than teams can triage them. It also serves federal, state and local agencies and the defence industrial base.
At A Glance
| Vendor | Nucleus Security |
|---|---|
| Category | Vulnerability and exposure management |
| Deployment | FedRAMP Moderate Authorized platform |
| Agentic AI | Nucleus Helix AI engine and agents; Nucleus Insights agentic intelligence feed |
| Customers | Autodesk, Cisco, Motorola, Swisscom, Australia Post |
| Founded | 2019 |
| Market classification | Vulnerability Management |
What Nucleus Does
Manual vulnerability management is slow and error-prone. Security teams typically run many scanners and tools, each producing its own list of findings with its own idea of an asset. Nucleus sits above these tools, merges their output into a single record of assets, exposures and threats, and enriches each finding with exploit intelligence so that teams can see which ones are actually dangerous. From there it assigns ownership, opens tickets and reports progress, with AI agents doing much of the investigation and upkeep. The platform handles a reported 9B vulnerability and security findings a day.
Products
Nucleus Data Core
The Data Core is the platform’s live system of record for exposure. It continuously takes in signals from more than 200 sources, then normalises, deduplicates, enriches and adds context to the raw data, so every other module works from one clean view.
Nucleus Insights
Insights is threat and vulnerability intelligence, produced with AI and validated by experts. It adds exploitation signals to every finding, including the Nucleus Threat Rating, malware association, zero-day status and ease of attack.
Nucleus Discover
When a new vulnerability is disclosed, scanners can take time to catch up. Discover identifies exposure to newly disclosed and zero-day vulnerabilities before scanner signatures exist.
Platform Modules
| Asset Management | One asset inventory, with assets deduplicated, matched and grouped. |
|---|---|
| Risk Prioritization | Custom risk scores and CISA BOD 26-04 SSVC decision logic, using asset context and threat intelligence. |
| Remediation and Ticketing | Automated workflows with ownership and prescriptive fix guidance. |
| Analytics and Reports | Role-based live dashboards and automated reports in plain language. |
| Compliance Frameworks and the Vulnerability Intelligence Platform (VIP) | Mapping to framework controls, and central access to enriched vulnerability intelligence. |
How It Works
| Component | What it does |
|---|---|
| Ingestion | Connectors, plus the FlexConnect framework for any data source in any format, pull data from security, asset and threat intelligence tools. |
| Data Core | Incoming signals become one system of record for assets, exposures and threats. |
| Remediation | Workflows assign an owner and create a ticket, a reported 15 minutes from a vulnerability becoming exploitable to an owned ticket. |
| Federal | The FedRAMP environment includes POA&M process automation and alignment with NIST RMF and CISA BODs, supporting federal civilian agencies, the Department of Defense, defence industrial base contractors under CMMC 2.0 and NIST SP 800-171, and regional governments. |
Agentic AI Capabilities
Nucleus Helix
Helix is the AI engine that runs on the Data Core, pairing specialised AI models and agents with predictable execution. It has three jobs: building the exposure management programme, closing exposure gaps through specialised reasoning agents, and tracking the threat landscape. The Helix AI Agent is a natural-language interface where analysts search data, investigate findings, identify owners, answer operational questions and create workflows.
Insights Agents
Behind Nucleus Insights, agents continuously collect, assess and validate exploit and malware evidence at machine speed, producing an agentic intelligence feed that keeps exploitation signals current.
Integrations
| Area | Integrations |
|---|---|
| Cloud and network scanners | Amazon AWS Inspector, Amazon AWS EC2, Amazon AWS ECR, Alert Logic, Alienvault USM |
| Application security | Acunetix by Invicti (DAST), 42Crunch (API security), Aqua (CSPM) |
| Patch and data export | Action1, Amazon AWS S3 |
The catalogue lists 183 integrations across 27 categories.
Company Background
| Founded | 2019. |
|---|---|
| Founders | Steve Carter (Co-founder and CEO), Scott Kuffer (Co-founder and CPO) and Nick Fleming (Co-founder and Chief Engineer). |
| Leadership | Kunal Desai (CFO), Will Gorman (CTO), Jeff Gouge (CIO) and David Smith (CRO). |
| Clients | More than 500 reported private and public sector clients. |
| Investors | Including Delta-V. |
| Recognition | Included in the Gartner Magic Quadrant for Exposure Assessment Platforms and the IDC MarketScape (2025), and a 2026 Top InfoSec Innovator Award from Cyber Defense Magazine in CTEM and exposure management. |
Note: This overview is compiled from Nucleus’s publicly available information as of 3 November 2026. It is provided for information only. NHI Mgmt Group does not endorse any vendor, and nothing on this page represents the opinions of NHI Mgmt Group.