FoxPlug

Nebula Security launch: what they're building and where to launch next

What they're building

Autonomous AI defense system for cyber attack

Batch
Y Combinator Summer 2026
Industry
B2B
Team size
4
Based
San Francisco, CA, USA; Remote

Founders

nebusec.ai ↗

See their funding details ↗

Nebula Security on the record

What they shipped

  • From its YC profile: Nebula Security is founded by the world’s #1 hacking team. We were the first team to build an nginx RCE and the first to root Android 17. Our co-founders include members of the world’s No. 1 CTF team, DEF CON winners, Black Hat speakers, and PhD in cybersecurity. We have won $400K in bug bounties by exploiting the Linux kernel and Chrome browser. “Audited by Nebula Security” is a mark of serious security credibility: a signal to customers, investors, and partners that your product has been reviewed by the world’s best hackers. (source)
  • Its own site describes it as: "NebuSec builds Nebu, an AI security platform for continuous code and cloud protection, backed by researchers who find zero-days in Chrome and Linux." (source)

Who is behind it

  • Eten Zou, Founder/CEO: CEO & Founder @ Nebula Security (YC S26). PhD in Cybersecurity. Focus on automated vulnerability research. (source)
  • Yuan Tan, Founder: Founder at Nebula Security (YC S26). Black Hat USA speaker. PhD dropout in System Security with experience in DARPA-funded fundamental research on program analysis. (source)
  • Frank Wu, Founder/Security Research Lead: Founder of Nebula Security (YC S26). Black Hat USA speaker and DEF CON finalist with r3kapig, the world's No. 1 hacking team in 2025. He led the DARPA AIxCC automated program repair team and shipped end-to-end RCE/LPE exploit chains on Chrome, Firefox, Linux, and Android. He pwned Google's kernelCTF multiple times with zero-days, and has published research at top academic venues such as USENIX Security and NDSS. (source)
  • Xiaochuan Yu, Founder/CTO: Founder at Nebula Security (YC S26). Hacked into iPhone, Chrome, Firefox, Safari, QEMU, and various things in your daily life. DEFCON finalist for 3 consecutive years. $200k+ Bug Bounty in Chrome. Core member of r3kapig, the #1 hacking team in the world in 2025, on CTFTime. M.S. from UC San Diego. Research published at USENIX Security, BlackHat USA. Ph.D. droped out. (source)

Timeline

  1. 2026: founded, per its YC profile. (source)

Other B2B software launches on FoxPlug

  • RASPIRE: Autonomous Runtime Security
  • Rational: AI Employees for In-House Enterprise Accounting
  • rekursiv.ai: Scale AI scientists whose own breakthroughs accelerate the next.

Where else to launch Nebula Security

  • Product Hunt ↗
    Self-promotion allowedFree
  • Hacker News (Show HN) ↗
    Self-promotion allowed, within the community's rules
    Audience: Hacker News readers; engineers, technical founders, infra-curious people
  • Indie Hackers Forum ↗
    Self-promotion allowed
    Audience: IndieHackers; bootstrapped solo founders sharing revenue and behind-the-scenes
  • Demand Curve ↗
    Self-promotion allowed, within the community's rules
    Audience: Slack community; tight-knit, pseudo-private peer group
  • Dev Hunt ↗
    Self-promotion allowedFree
  • No Code Founders ↗
    Self-promotion allowed, within the community's rules
    Audience: Slack community; tight-knit, pseudo-private peer group
  • OnlineGeniuses ↗
    Self-promotion allowed, within the community's rules
    Audience: Slack community; tight-knit, pseudo-private peer group
  • Product Makers ↗
    Self-promotion allowed, within the community's rules
    Audience: Slack community; tight-knit, pseudo-private peer group

Is this your startup? Start free

Start free →

After you sign up, your new project setup opens with nebusec.ai filled in, then a short onboarding. Already signed in? It opens the setup straight away. See what each plan includes.

Featured on FoxPlug badge

Featured on FoxPlug: Nebula Security