Nucleus Security generates $20M for unified vulnerability management

As we speak, vulnerability administration and course of automation platform, Nucleus Security, introduced that it has raised $20 million as a part of a sequence B funding spherical, attaining a valuation of greater than $100 million. 

Nucleus Safety’s platform allows customers to automate vulnerability administration processes and workflows, leveraging the most recent menace intelligence from sources together with Mandiant, EPSS and the CISA Bod KEV. 

It additionally integrates knowledge from different third-party instruments like asset inventories, vulnerability scanners and penetration testing instruments to offer visibility over your entire tech stack. 

For enterprises and technical decision-makers, Nucleus Safety presents an answer for monitoring their group’s safety posture, to allow them to establish and reply to vulnerabilities all through the atmosphere and cut back the possibility of undesirable intrusions.

Unifying vulnerability administration

Because the variety of applied sciences organizations use has elevated, the variety of vulnerabilities that attackers can exploit has additionally multiplied to the extent that researchers found 18,378 vulnerabilities in 2021, together with 3,646 high-risk vulnerabilities.

As we speak, even essentially the most skilled safety crew can’t mitigate such a excessive variety of vulnerabilities manually. 

The one strategy to persistently mitigate these vulnerabilities is by automating the vulnerability administration course of. That’s not simply automating vulnerability scanning, but in addition with the ability to combine the info generated by vulnerability scanners, penetration testing instruments and asset inventories right into a single location. 

“Many individuals affiliate vulnerability administration with scanning, however that’s just one necessary a part of the method. With the ability to handle all the info being generated by scanners of various varieties after which making it actionable in order that the enterprise can react appropriately is a creating house the place Nucleus sits,” stated Scott Kuffer, cofounder of Nucleus Safety. 

“This kind of vulnerability administration ‘at scale’ gives distinctive challenges that may solely be solved by way of knowledge unification and good automation of duties all through your entire pipeline. Nucleus integrates with present instruments to mixture, normalize, prioritize and enrich the vulnerability knowledge in an enterprise,” Kuffer stated. 

Briefly, Nucleus Safety’s answer to this problem is to offer organizations with a central answer for ingesting and processing asset and vulnerability knowledge that integrates with exterior workflow instruments, to automate time-consuming duties round vulnerability administration.  

The subsequent era of safety and vulnerability administration 

Nucleus Safety is part of the security and vulnerability management market, which researchers valued at $6.7 billion in 2020 and estimate will attain a complete worth of $15.86 billion by 2030.

The supplier is competing in opposition to quite a lot of opponents together with Kenna Security (owned by Cisco, a buyer of Nucleus), a risk-based vulnerability administration platform combining menace intelligence and knowledge science to assist organizations prioritize vulnerabilities that pose the best threat, which achieved a valuation of $98 million in 2019 following a sequence D funding spherical of $48 million. 

One other competitor is Vulcan Cyber, a software-as-a-service (SaaS)-based vulnerability administration platform with remediation intelligence, threat prioritization, and safety threat analytics, which raised $21 million as a part of a Collection B funding spherical final yr.

Though, Kuffer argues that one of many key differentiators of Nucleus Safety is its quick deployment time. 

“Nucleus differentiates by being extraordinarily partnership-driven with its method. We hearken to clients and wish to be the very best safety software program vendor that organizations work with. We frequently get the suggestions that we’re the simplest vendor to work with … we additionally get constant suggestions that we may be deployed a lot faster than opponents to a full program deployment,” Kuffer stated.