Nucleus Security Inc. today announced that it has raised $20 million in new funding to support product development its vulnerability and exposure management services by expanding platform capabilities and scaling up customer deployments.

Founded in 2018, Nucleus focuses on exposure management rather than standalone vulnerability scanning by treating vulnerabilities, assets and contextual risk signals as interconnected data sets that must be normalized and correlated to support operational decision-making. Its platform operates as a centralized system of record that ingests data from more than 200 security, asset management and infrastructure tools, including sources spanning information technology, cloud, application and operational technology environments.

The platform covers vulnerability aggregation, contextual prioritization and remediation orchestration and correlates vulnerability data with asset criticality, ownership and exploit signals. The results are then mapped into actionable tasks for remediation teams.

Other features include automation tools that can be used to coordinate actions across ticketing systems and operational tools to allow security teams to track remediation progress and maintain an up-to-date exposure posture.

The platform supports continuous exposure assessment across development, production and operational systems, with use cases extending to enterprise IT, application security, cloud security and industrial or OT contexts.

In the past year, Nucleus has led a major replacement cycle among enterprise customers as organizations replace expensive, homegrown vulnerability management tools that can no longer meet their needs.

Notable Nucleus customers include Autodesk Inc., CBRE Group Inc., Cisco Systems Inc., JC Penney Co. Inc., the Football Association Premier League Ltd., RSA Insurance Group plc, Swisscom AG, Udemy Inc., American Red Cross and Australia Post Corp.

The Series C funding round was led by Delta-v Capital, with Arthur Ventures also participating.

“Built by practitioners, the platform has emerged as the orchestration platform organizations need to unify risk across the growing sources of exposure data across IT, cloud, application and OT environments, without vendor lock-in,” said Connor Heard, principal at Delta-v Capital. “Vulnerability and exposure management is increasingly a board-level responsibility; we believe Nucleus is uniquely positioned to define the next phase of this market.”

The new funding takes the total raised by Nucleus to approximately $86.1 million, according to data from Tracxn.

Photo: Nucleus Security