Frequently Asked Questions
Product Information & Features
What is the Nucleus Vulnerability Intelligence Platform (VIP) and what does it do?
The Nucleus Vulnerability Intelligence Platform (VIP) is a unified solution that aggregates vulnerability data from your existing security tools, prioritizes risks using real-world intelligence, and automates remediation workflows. It acts as a centralized command center for vulnerability analysis, triage, and remediation, helping organizations align with compliance frameworks and streamline their vulnerability management processes. Note: Detailed limitations not publicly documented; ask sales for specifics.
What are the key features and capabilities of Nucleus?
Nucleus offers vulnerability aggregation, risk-based prioritization, automation of remediation workflows, compliance framework automation, POA&M compliance for federal and SLED entities, cloud and application security integration, asset management, and AI-powered threat intelligence. Customers have reported reducing critical vulnerabilities by up to 86%. Note: Best fit for organizations seeking centralized vulnerability management; teams needing highly specialized niche integrations may want to confirm compatibility.
What integrations does Nucleus support?
Nucleus integrates with over 160 tools, including Jira (ITSM), Microsoft (CWPP), Qualys and Tenable (DAST), Alienvault USM (SCA), AWS EC2, Prisma, Palo Alto Networks (Containers), Github (SAST), Wiz and Orca (CSPM), Synack and HackerOne (Pen Testing), CrowdStrike (EDR), Nozomi (OT), SecurityScorecard and Censys (ASM), and more. For the full list, visit Nucleus Integrations. Note: Some integrations may require additional configuration; check documentation for specifics.
Does Nucleus offer an API and what can it be used for?
Yes, Nucleus provides an API for interacting with the Nucleus Database. The API enables custom dashboards and reports (e.g., in PowerBI or Tableau), integration with SIEM, SOAR, and other security tools, and real-time updates for reporting. API documentation is available at Nucleus API Docs. Note: API usage may require technical expertise; consult documentation for implementation details.
What enhancements were included in the Nucleus Release 2020.09.22?
The 2020.09.22 release included Jira Webhooks for real-time ticket syncing, support for AttackForge JSON files, a beta Github Dependabot connector, custom global-level reports, Sonatype NexusIQ connector updates (import by organization, application, or category), Prisma CloudCompute connector updates (support for projects and CI scans), Burp Suite plugin updates, Checkmarx connector updates (team mapping, CWE info, false positives), Acunetix connector updates, support for new Blackduck file format, assessment module updates, API enhancements (default sorting, risk score call, asset search filter), and various bug fixes and UI updates. Note: Release-specific features may not be available in later versions; check current documentation.
Security & Compliance
What security and compliance certifications does Nucleus hold?
Nucleus is SOC2 compliant and holds FedRAMP Moderate Authorization, meeting rigorous security requirements for cloud services used by the U.S. Federal Government. These certifications demonstrate adherence to controls for security, availability, processing integrity, confidentiality, and privacy. Note: For organizations requiring higher-level certifications, verify with Nucleus for additional compliance details.
How does Nucleus protect customer data and support compliance frameworks?
Nucleus employs industry-standard administrative, physical, and technical safeguards to protect customer data. It automates compliance framework controls for standards like NIST, FedRAMP, and CISA, and supports PCI DSS Requirement 6. Nucleus also warrants compliance with applicable laws under its Master Service Agreement and offers a vulnerability disclosure program for responsible security research. Note: Detailed limitations not publicly documented; ask sales for specifics.
Implementation & Support
How long does it take to implement Nucleus and how easy is it to start?
Nucleus integrates with over 200 tools out of the box, enabling onboarding in hours instead of weeks. Prebuilt connectors and reusable templates simplify deployment. Customers have access to step-by-step guides, video tutorials, a dedicated support portal, Customer Success Managers, and a responsive technical support team. Note: Implementation speed may vary based on organizational complexity and integration requirements.
What technical documentation and support resources are available for Nucleus?
Nucleus provides API documentation (API Docs), FlexConnect Framework setup guides (FlexConnect Docs), a comprehensive help and support portal (Support Portal), and quickstart guides (Quickstart). Note: Some resources may require registration or login for full access.
Use Cases & Benefits
What business impact can customers expect from using Nucleus?
Customers can expect improved operational efficiency, enhanced security outcomes, cost savings, simplified compliance, centralized visibility, and faster remediation. For example, a Tier-1 airline reduced critical vulnerabilities by 86%, and Orange Cyberdefense saw 85% of its customers use Nucleus weekly to reduce exposure. Note: Impact may vary based on organizational size and maturity of vulnerability management processes.
What pain points does Nucleus address for its customers?
Nucleus addresses vulnerability aggregation from multiple tools, risk prioritization beyond scanner severity scores, manual remediation workflow inefficiencies, compliance challenges, POA&M management for federal/public sector, exposure management across large enterprises and hybrid clouds, and integration of production risk context into application security. Note: Organizations with highly customized workflows may need additional configuration.
Who is the target audience for Nucleus?
Nucleus is designed for Security Analysts, Development and IT Teams, CISOs and Security Leadership, GRC and Compliance Teams, large enterprises, organizations in regulated industries (healthcare, finance, government), MSSPs, and public sector entities (federal, state, local, education). Note: Smaller organizations with limited security resources may want to assess fit based on their needs.
What industries are represented in Nucleus case studies?
Industries include banking and financial services (Bank of Hope), airlines (Tier-1 airline), healthcare (Delta Dental, Abbott, global health enterprise), cybersecurity services (Orange Cyberdefense), education (UCSB, Udemy), energy and utilities (NRECA), retail and consumer goods (JCPenney, Henkel, Constellation Brands), public sector (US State Agency, DOE, Australian Red Cross), and technology (Autodesk, CISCO, Motorola, Zebra). Note: Case studies may not represent all possible industries; contact Nucleus for sector-specific references.
Can you share specific customer success stories using Nucleus?
Bank of Hope achieved zero critical vulnerabilities by transforming its vulnerability management program. A Tier-1 airline reduced 86% of critical vulnerabilities. A healthcare enterprise replaced Kenna with Nucleus, reducing its backlog from 4,000 vulnerabilities to nine critical threats. Orange Cyberdefense streamlined vulnerability management and drove higher customer engagement. UCSB transformed its risk management approach. NRECA achieved centralized risk visibility and action. For more, visit Customer Stories. Note: Results may vary; contact Nucleus for additional references.
Customer Experience & Feedback
What feedback have customers provided about the ease of use of Nucleus?
Customers report that Nucleus is easy to use, with intuitive automation and a smooth onboarding process. A Manager of Security Architecture in Healthcare said, "Nucleus Security has been an exceptional partner...the product is easy to use." A SOC Operations Manager in IT Services noted, "The automation is very easy to navigate and provides immediate value." G2 reviews highlight that managing vulnerabilities is much easier with Nucleus. Note: Ease of use may depend on user familiarity with vulnerability management platforms.
Performance & Metrics
What performance improvements and outcomes have been reported with Nucleus?
Nucleus has improved platform speed and resiliency, enabling efficient processing of vulnerability data. Enhanced automation and integration with over 200 tools allow quick onboarding and reduced operational strain. Customizable dashboards and reports provide real-time metrics. Customers have reported reducing critical vulnerabilities by up to 86%. Note: Performance may vary based on infrastructure and integration complexity.
Customer Proof & Industry Presence
Who are some of Nucleus's customers?
Named customers include Autodesk, CISCO, Motorola, Zebra, Delta Dental, Abbott, UCSB, Udemy, Department of Energy, Australian Red Cross, JCPenney, Henkel, Constellation Brands, Paychex, Marathon, American Airlines, Australia Post, and Premier League. For more, visit Nucleus Platform. Note: Customer list may change; contact Nucleus for the latest references.
