---
title: "NebuSec"
description: "NebuSec builds Nebu, an AI security platform for continuous code and cloud protection, backed by researchers who find zero-days in Chrome and Linux."
url: https://nebusec.ai/
---

# An AI defense system for cyber attack

The power dynamic just shifted back to the defenders.

[Book a demo](https://nebula-security.cal.com/etenz/30min)

![NebuSec](https://nebusec.ai/static/nebusec-fulllogo-dark.svg)

Backed by![Y](https://nebusec.ai/static/yc-logo.svg)Combinator

From the world’s #1 hacking team.

Nebu watches your code and cloud around the clock. When it’s serious, the same team that’s found zero-days in Chrome and the Linux kernel steps in. Don’t let a breach be your first audit.

1177+

Vulnerabilities found

197+

CVEs assigned

Security vulnerabilities identified, verified, and officially recognized.

![CVE](https://nebusec.ai/_astro/cve-logo-mark.DAJjT_eV_Z1WLJd6.webp)

CVE-2026-43499

[View CVE details](https://nebusec.ai/buglist/CVE-2026-43499.md)

$400K+

![Google](https://nebusec.ai/_astro/google-logo.FKCuc9eY_PqzUG.webp)

VRP bounties

Latest findings

* [Linux Kernel · HOT · CVE-2026-43499 — The world's first Android 17 root exploit](https://nebusec.ai/buglist/CVE-2026-43499.md)
* [Chrome · HOT · CVE-2026-5865 — Maglev JIT phi-untagging bug → remote code execution](https://nebusec.ai/buglist/CVE-2026-5865.md)
* [nginx · HOT · CVE-2026-42530 — nginx-quicburst: the world's first default config nginx RCE exploit](https://nebusec.ai/buglist/CVE-2026-42530.md)
* [curl · CVE-2026-8924 — super-cookie PSL bypass leaks cookies to unrelated domains](https://nebusec.ai/buglist/)
* [Firefox · HOT · CVE-2026-10702 — IonStack: Full chain browser-to-kernel Android 17 root exploit](https://nebusec.ai/buglist/)

## Security that meets your team where it is.

* [Code Security](https://nebusec.ai/product/code-security.md)

  [Continuous codebase monitoring, verified findings, and patches ready to merge.](https://nebusec.ai/product/code-security.md)

* Coming soon

  Supply Chain Security

  Secure the dependencies, build pipelines, and releases you rely on.

* Coming soon

  Cloud Security

  Continuous visibility and control across cloud infrastructure, identities, and configurations.

* Coming soon

  AI Pentesting

  Continuous pentesting keeps your security posture up to date.

## One platform for continuous security

### Autonomous vulnerability scan

Every code change gets a comprehensive vulnerability scan with full repository context.

* Scan each code change
* Full repository context

## Latest AI breakthrough research from NebuSec

[View all research](https://nebusec.ai/research/)

* [CVE-2026-7899 · Chrome](https://nebusec.ai/research/v8-turboshaft-wasm-phiop-cve-2026-7899.md)

  [Check Your Motor Oil Before Turbocharging: CVE-2026-7899, When V8's Optimization Engine Builds Up Carbon](https://nebusec.ai/research/v8-turboshaft-wasm-phiop-cve-2026-7899.md)
* [CVE-2026-43501 · Linux Kernel](https://nebusec.ai/research/cve-2026-43501-route-of-root.md)

  [Route of Root: Bring a "DoS only" bug to LPE and bypass the existing patch to win $10,500 in kernelCTF](https://nebusec.ai/research/cve-2026-43501-route-of-root.md)
* [CVE-2026-43499 · Research](https://nebusec.ai/research/ionstack-part-3.md)

  [IonStack part III: Rooting Android 17 with GhostLock](https://nebusec.ai/research/ionstack-part-3.md)
* [CVE-2026-10702 · Firefox](https://nebusec.ai/research/ionstack-part-1-cve-2026-10702.md)

  [IonStack Part I: Unsound IonBanana Peel in Ion Compiler, Slipping Through Firefox's SpiderMonkey JIT](https://nebusec.ai/research/ionstack-part-1-cve-2026-10702.md)
* [CVE-2026-43499 · Linux Kernel](https://nebusec.ai/research/ionstack-part-2.md)

  [IonStack part II: GhostLock, a stack-UAF that has existed in ALL Linux distributions for 15 years](https://nebusec.ai/research/ionstack-part-2.md)

## Security built for enterprise engineering teams

NebuSec was founded by the researchers who discovered zero-days in Chrome, Firefox, and the Linux kernel. We combine deep vulnerability research with AI to protect your codebase continuously.

[Follow us](https://x.com/nebusecurity)

![Silhouette of a person looking up at a stream of stars](https://nebusec.ai/_astro/portrait.h6iVgLDl_1I5yGU.webp)

![NebuSec](https://nebusec.ai/_astro/nebula-logo.pHLD9aNv_Z2u5cJs.svg)

![Nebu](https://nebusec.ai/_astro/nebula-logo.pHLD9aNv_Z2u5cJs.svg)