The Nucleus Vulnerability Intelligence Platform (VIP) is a centralized solution that aggregates vulnerability data from multiple tools, prioritizes risks using real-world intelligence, and automates remediation workflows. It enables organizations to unify their vulnerability management processes, streamline operations, and improve security outcomes. Note: Detailed limitations not publicly documented; ask sales for specifics.
Nucleus offers the Vulnerability Intelligence Platform (VIP), Nucleus Insights (an AI-powered intelligence feed), and the MCP Server for advanced data interaction. Solutions include Exposure Management, Risk-Based Vulnerability Management (RBVM), Application Security, and Cloud Vulnerability & Exposure Management. Nucleus also provides tailored offerings for the Federal Government and State/Local/Education (SLED) sectors. Note: Some features may be limited to specific sectors; check product documentation for details.
Nucleus consolidates vulnerability data from over 200 tools, prioritizes risks using asset context and threat intelligence, automates remediation workflows (including ticketing and ownership assignment), and simplifies compliance with frameworks like NIST, FedRAMP, and CISA. It also supports POA&M compliance, cloud and application security, asset management, and threat intelligence enrichment. Note: Best fit for organizations needing centralized vulnerability management; teams requiring deep custom integrations should review the full integrations list.
Yes, Nucleus allows customers to upload any data using its Custom File Schema feature. Recent performance upgrades have improved the speed of file ingestion, and no changes are required by customers to benefit from these enhancements. Note: Custom file schema may require technical setup; consult documentation for compatibility.
Nucleus integrates with over 160 tools, including Jira (ITSM), Microsoft (CWPP), Qualys and Tenable (DAST), Alienvault USM (SCA), AWS EC2, Prisma, Palo Alto Networks (Containers), Github (SAST), Wiz and Orca (CSPM), Synack and HackerOne (Pen Testing), CrowdStrike (EDR), Nozomi (OT), SecurityScorecard and Censys (ASM), and many more. For a complete list, visit the integrations page. Note: Some integrations may require additional configuration or licensing.
Yes, Nucleus offers an API that enables users to query the database, build custom dashboards and reports in tools like PowerBI or Tableau, and integrate with SIEM, SOAR, and other security tools. The API supports real-time updates and is documented at the API documentation page. Note: API usage may require technical expertise and proper authentication.
Nucleus integrates with over 200 tools out of the box, enabling onboarding in hours instead of weeks. Prebuilt connectors and reusable templates simplify deployment, and step-by-step guides, video tutorials, and a dedicated support portal are available. Note: Implementation speed may vary based on environment complexity and integration requirements.
Nucleus has enhanced platform speed and resiliency, improved custom file schema ingestion, and upgraded reporting download speeds for large datasets. Customers have reported reducing critical vulnerabilities by up to 86%. Note: Performance may depend on data volume and integration complexity.
Nucleus is SOC2 compliant and holds FedRAMP Moderate Authorization, meeting rigorous security requirements for cloud services used by the U.S. Federal Government. These certifications demonstrate adherence to controls relevant to security, availability, processing integrity, confidentiality, and privacy. Note: Certification scope may vary; review documentation for details.
Nucleus employs industry-standard administrative, physical, and technical safeguards to protect customer data. It automates compliance framework controls for standards like NIST, FedRAMP, and CISA, and supports PCI DSS Requirement 6. Under its Master Service Agreement, Nucleus warrants compliance with applicable laws and regulations, including breach notification laws. Note: For specific compliance scenarios, consult legal or sales teams.
Nucleus addresses vulnerability aggregation, risk prioritization, manual remediation workflow automation, compliance challenges, POA&M management, exposure management across hybrid cloud environments, and application security integration. Note: Best fit for organizations with complex infrastructures; teams with simple environments may not require all features.
Roles include Security Analysts, Development and IT Teams, CISOs and Security Leadership, and GRC/Compliance Teams. Industries represented in case studies include banking, airlines, healthcare, cybersecurity services, education, energy, retail, public sector, and technology. Note: Smaller organizations may find some features more than they need; review use case fit before purchase.
Customers report improved operational efficiency, enhanced security outcomes, cost savings, simplified compliance, centralized visibility, and proven ROI (up to 86% reduction in critical vulnerabilities). Service providers like Orange Cyberdefense have seen 85% of their customers use Nucleus weekly. Note: Impact may vary based on organizational maturity and adoption.
Yes. Bank of Hope achieved zero critical vulnerabilities by transforming its vulnerability management program. A Tier-1 airline reduced 86% of critical vulnerabilities. A healthcare enterprise replaced Kenna with Nucleus, reducing its backlog from 4,000 vulnerabilities to nine critical threats. Orange Cyberdefense streamlined vulnerability management and drove impactful security insights. For more, visit Customer Stories. Note: Results are specific to each organization; outcomes may vary.
Nucleus offers a dedicated support portal, comprehensive API documentation, FlexConnect Framework setup guides, quickstart onboarding guides, and troubleshooting resources. Standard product support is included at no additional cost. Note: For advanced troubleshooting, contact technical support directly.
Customers report that Nucleus is easy to use, with intuitive automation and a smooth onboarding process. Reviews highlight immediate value, streamlined workflows, and a user-friendly interface. For example, a Manager of Security Architecture in Healthcare stated, "Nucleus Security has been an exceptional partner from the beginning…After purchasing, they offered one of the best onboarding/implementations I’ve worked with, and the product is easy to use." Note: User experience may vary based on team size and technical expertise.
Named customers include Autodesk, CISCO, Motorola, Zebra, Delta Dental, Abbott, University of California Santa Barbara (UCSB), Udemy, Department of Energy (DOE), Australian Red Cross, JCPenney, Henkel, Constellation Brands, Paychex, Marathon, American Airlines, Australia Post, and Premier League. Note: Customer fit varies; review case studies for industry-specific examples.
Industries include banking and financial services, airlines, healthcare, cybersecurity services, education, energy and utilities, retail and consumer goods, public sector, and technology. Note: Industry-specific features may vary; consult sales for tailored solutions.
We have been recognized for our Completeness of Vision and Ability to Execute.
Orange Cyberdefense leverages Nucleus to streamline vulnerability management, reduce costs, and drive impactful security insights for its customers.
New CVE research by Nucleus Security gathered in an exclusive company white paper.
LEARN MORE
Nucleus Security recognized as a Challenger by Gartner.
LEARN MORE
Omdia’s Technical Validation, commissioned by Nucleus, details how Nucleus helps organizations build successful vulnerability and exposure management programs.
Welcome to the Nucleus Product Update 3.7. This product update comes just in time for the start of the 2023 US Open Tennis Championships. Serving a few aces, this edition continues to rack up the work we’re doing to introduce new features and product capabilities that improve your Nucleus platform experience and vulnerability management outcomes.
Key highlights from this update include:
We’ve also included a preview of the enhancements coming for AGAC. Oh yea!
Get the details for all updates below.
Have questions or want to know more about anything you see here? Our team is happy to help. Just reach out to our crew at [email protected] for further assistance. Happy reading!
Our integration with ServiceNow ITSM just improved: We’re excited to announce the release of version 1.2.0 of our ServiceNow App!
Highlights include a new “Manage Projects” menu in the ServiceNow App, which allows customers to integrate and easily configure mapping for each action in each project. It also includes an automated test suite that will check that everything is working per the permissions, which reduces the time to integrate substantially and can get you up and running with the app in minutes.
Additionally, this menu has a configurable selection of your preferred ticketing structure for incidents from Nucleus. Select from single tickets per unique vulnerability or a parent/child configuration that maps parent tickets at the unique vuln level to child tickets for each vuln instance.
These changes will ensure a smoother and more functional integration between Nucleus and ServiceNow, which is much faster to configure and test. We hope the result will be a better experience for our customers’ vulnerability remediation teams and, ultimately, more remediated vulnerabilities.
View our change log for a complete list of our updates in v 1.2.0, or view our listing on the ServiceNow store.
One of our most popular and most-beloved product features is the ability for customers to upload any data they want onto the platform using our Custom File Schema. The flexibility provided by this capability means that Nucleus customers are never blocked by our lack of a native connector with any of their favorite security tools, even as we continue to add to our roster of integrations with these. Our Custom File Schema is a workhorse that our customers have used for years, and we’ve incorporated many lessons learned in building file ingestion into the product over that time.
We are pleased to share that we’ve made some low-level changes to this functionality to improve the speed of these file ingestions. Best of all, no changes are required by customers to enjoy the benefits of these enhancements. Stay tuned for additional improvements in the coming months!
We are greatly enhancing Asset Group Access Control (AGAC) functionality in the coming quarter. Once released, Org Admins can restrict their users’ asset group access in the context of SSO Team Mapping in Nucleus. With this upcoming release, Org Admins can create teams within Nucleus, map an SSO object to that team, and restrict that team’s access to specified asset groups. Currently, only a single user’s access can be restricted, which can be cumbersome for sprawling enterprises with tons and tons of users. We will also give the “Add Team” modal a facelift to better accommodate these changes.
This release will be available in closed beta by the end of the quarter. Please get in touch with Nucleus Support if you want to be added to the beta program or would like to learn more.
On Augusts 30th at 2 pm ET, join Patrick Garrity, Security Researcher at Nucleus Security, as he sits down with Stephen Shaffer, Staff Security Automation Engineer at Peloton Interactive, Jonathan Spring, Cybersecurity Specialist at CISA, and Chris Madden, Sr Principal Technical Security Engineer at Yahoo, to talk about the benefits of using SSVC Decision Trees to automate your vulnerability triage process, and also share real-world examples of how to build out a decision criteria that will address critical vulnerabilities first.
The session will include topics such as an overview of SSVC, the benefits of using SSVC, and how to gain organizational alignment on risk priorities. You can register here.
You can access the Nucleus change log to view the complete, unedited version of release updates posted each week. Select the subscribe to the RSS feed option on this page if you would like to receive weekly change log updates. This new Nucleus Product Update is intended to fully summarize and outline those weekly changes for you, with more details, each month. The product updates include all the following features and improvements:
New Features
Product Improvements (Performance, Experience, & Functionality)
Integration Improvements
All:
Carbon Black:
Defender:
Dependabot:
HackerOne:
InsightVM:
Prisma Cloud:
ServiceNow:
Tenable:
Reporting Improvements
Bug Fixes
Discover how unified, risk-based automation can transform your vulnerability management.
