Frequently Asked Questions
Product Information
What is the Nucleus Security Platform and what does it do?
The Nucleus Security Platform is a unified vulnerability management solution that centralizes vulnerability, threat, and asset data from your existing security tools. It automates risk prioritization using asset context and threat intelligence, streamlines remediation workflows, and helps organizations align with compliance frameworks. The platform is designed to simplify vulnerability discovery, triage, and remediation for enterprises and government agencies. Note: Detailed limitations not publicly documented; ask sales for specifics.
What products and services does Nucleus offer?
Nucleus offers the Vulnerability Intelligence Platform (VIP), which aggregates vulnerability data, prioritizes risks, and automates remediation workflows. Additional tools include Nucleus Insights (an AI-powered intelligence feed) and the MCP Server for advanced data interaction. Nucleus also provides tailored solutions for exposure management, risk-based vulnerability management, application security, and cloud vulnerability & exposure management, as well as sector-specific offerings for federal government and SLED (State/Local/Education). Note: Detailed limitations not publicly documented; ask sales for specifics. Learn more.
Features & Capabilities
What are the key capabilities of the Nucleus Security Platform?
The platform consolidates vulnerability data from multiple tools, prioritizes risks using asset context and threat intelligence, automates remediation workflows (including ticketing and ownership assignment), and simplifies compliance with frameworks like NIST, FedRAMP, and CISA. It also automates POA&M compliance for public sector entities, manages exposures across hybrid cloud environments, and integrates production risk context into application security. Note: Best fit for organizations needing centralized vulnerability management; teams requiring highly specialized or niche integrations may want to confirm compatibility. See full feature list.
What integrations does Nucleus support?
Nucleus integrates with over 160 tools across categories such as ITSM (Jira), CWPP (Microsoft), DAST (Qualys, Tenable), SCA (Alienvault USM), Containers (AWS EC2, Prisma, Palo Alto Networks), SAST (Github), CSPM (Wiz, Orca), Pen Testing (Synack, HackerOne), EDR (CrowdStrike), OT (Nozomi), and ASM (SecurityScorecard, Censys). For a complete and current list, visit the integrations page. Note: Some legacy or highly specialized tools may require custom integration work.
Does Nucleus offer an API for custom integrations and reporting?
Yes, Nucleus provides an API that allows users to interact with the Nucleus Database for custom dashboards, real-time reporting, and integration with third-party tools such as SIEM and SOAR platforms. Full API documentation is available at api-docs.nucleussec.com. Note: API usage may require technical expertise for advanced customizations.
What technical documentation and resources are available for Nucleus?
Nucleus offers comprehensive technical documentation, including API docs, FlexConnect Framework setup guides, a help and support portal, and quickstart onboarding guides. These resources are accessible at help.nucleussec.com and api-docs.nucleussec.com. Note: Some advanced topics may require direct support from Nucleus technical staff.
Use Cases & Benefits
What problems does Nucleus solve for organizations?
Nucleus addresses challenges such as fragmented vulnerability data, ineffective risk prioritization, manual and error-prone remediation workflows, complex compliance requirements, inefficient POA&M management, and the difficulty of managing exposures across large or hybrid cloud environments. It also helps integrate production risk context into application security processes. Note: Organizations with highly unique workflows may require additional customization.
What business impact can customers expect from using Nucleus?
Customers have reported improved operational efficiency, enhanced security outcomes, cost savings, simplified compliance, and centralized visibility. For example, organizations have reduced critical vulnerabilities by up to 86%, achieved faster remediation, and increased customer engagement (e.g., 85% of Orange Cyberdefense customers use Nucleus weekly). Note: Actual results may vary based on organizational maturity and implementation scope. See customer stories.
Who is the target audience for Nucleus?
Nucleus is designed for security analysts, development and IT teams, CISOs and security leadership, and GRC/compliance teams. It is used by organizations in regulated industries (healthcare, finance, government), large enterprises, MSSPs, and public sector entities (federal, state, local, education). Note: Smaller organizations with limited security resources may want to evaluate fit based on their needs. Learn more.
What industries are represented in Nucleus case studies?
Industries include banking and financial services (e.g., Bank of Hope), airlines, healthcare, cybersecurity services (e.g., Orange Cyberdefense), education (e.g., UCSB), energy and utilities (e.g., NRECA), retail and consumer goods, public sector, and technology. See all case studies. Note: Some niche industries may not have published case studies.
Can you share specific customer success stories using Nucleus?
Yes. For example, Bank of Hope achieved zero critical vulnerabilities after transforming its vulnerability management program with Nucleus. A Tier-1 airline reduced 86% of its critical vulnerabilities, and a healthcare enterprise replaced Kenna with Nucleus, reducing its backlog from 4,000 vulnerabilities to just nine critical threats. Read more customer stories. Note: Outcomes depend on customer engagement and implementation.
Security & Compliance
What security and compliance certifications does Nucleus have?
Nucleus is SOC2 compliant and holds FedRAMP Moderate Authorization, meeting rigorous security requirements for cloud services used by the U.S. Federal Government. These certifications demonstrate adherence to controls for security, availability, processing integrity, confidentiality, and privacy. Note: For organizations requiring additional certifications, contact Nucleus for details. Learn more.
How does Nucleus protect customer data and support compliance?
Nucleus employs industry-standard administrative, physical, and technical safeguards to protect customer data. The platform automates compliance framework controls and requirements, supporting standards like NIST, FedRAMP, CISA, and PCI DSS Requirement 6. Nucleus also offers a vulnerability disclosure program and warrants compliance with applicable laws under its Master Service Agreement. Note: Customers with unique compliance needs should review the MSA and consult with Nucleus. See MSA.
Performance & Implementation
How quickly can Nucleus be implemented and how easy is it to start?
Nucleus integrates with over 200 tools out of the box, enabling onboarding in hours instead of weeks. Prebuilt connectors and reusable templates simplify deployment. Customers have access to step-by-step guides, video tutorials, and a dedicated support portal. Customer Success Managers and a responsive technical support team assist with implementation and troubleshooting. Note: Highly complex environments may require additional configuration time. See Quickstart Guide.
What feedback have customers given about the ease of use of Nucleus?
Customers have described Nucleus as "easy to use," with a user-friendly interface, intuitive automation, and a smooth onboarding process. For example, a Manager of Security Architecture in Healthcare said, "After purchasing, they offered one of the best onboarding/implementations I’ve worked with, and the product is easy to use." Another customer noted, "There are no words to describe how much easier it is to manage vulnerabilities using Nucleus." Note: User experience may vary depending on organizational processes. See more reviews.
Customer Proof & Social Validation
Who are some of Nucleus's customers?
Notable customers include Autodesk, CISCO, Motorola, Zebra, Delta Dental, Abbott, University of California Santa Barbara (UCSB), Udemy, Department of Energy (DOE), Australian Red Cross, JCPenney, Henkel, Constellation Brands, Paychex, Marathon, American Airlines, Australia Post, and Premier League. See full customer list. Note: Customer fit may depend on industry-specific requirements.
