Nebula Security
New accelerator entry · 2026-07-02 · the record
In their words
Nebula Security is founded by the world’s #1 hacking team. We were the first team to build an nginx RCE and the first to root Android 17. Our co-founders include members of the world’s No. 1 CTF team, DEF CON winners, Black Hat speakers, and PhD in cybersecurity. We have won $400K in bug bounties by exploiting the Linux kernel and Chrome browser. “Audited by Nebula Security” is a mark of serious security credibility: a signal to customers, investors, and partners that your product has been reviewed by the world’s best hackers.
What the record says
Founder at Nebula Security (YC S26). Black Hat USA speaker. PhD dropout in System Security with experience in DARPA-funded fundamental research on program analysis.
Founder of Nebula Security (YC S26). Black Hat USA speaker and DEF CON finalist with r3kapig, the world's No. 1 hacking team in 2025. He led the DARPA AIxCC automated program repair team and shipped end-to-end RCE/LPE exploit chains on Chrome, Firefox, Linux, and Android. He pwned Google's kernelCTF multiple times with zero-days, and has published research at top academic venues such as USENIX Security and NDSS. Ph.D. dropout.
Founder at Nebula Security (YC S26). Hacked into iPhone, Chrome, Firefox, Safari, QEMU, and various things in your daily life. DEFCON finalist for 3 consecutive years. $200k+ Bug Bounty in Chrome. Core member of r3kapig, the #1 hacking team in the world in 2025, on CTFTime. M.S. from UC San Diego. Research published at USENIX Security, BlackHat USA. Ph.D. droped out.
Founders, titles and bios as the company published them. Photographs are our own copies of the ones on that record, so they do not break when the original link expires.
Against the 209 companies on file from Summer 2026. Median team 2, largest 30.
The nearest companies on file from the same batch, side by side with this one.
| Company | Batch | Sectors | Listed |
|---|---|---|---|
| Frontier Computing | Summer 2026 | Artificial Intelligence, Hard Tech, Hardware | 2026-08-31 |
| Ethos Space Resources | Summer 2026 | Hard Tech, Exascale Computing, Energy | 2026-08-23 |
| Spectre Intelligence | Summer 2026 | Biotech, Investing, Trading | 2026-08-22 |
| Edgerun | Summer 2026 | Robotics, Defense | 2026-08-21 |
| Allia Health | Summer 2026 | Artificial Intelligence, Healthcare, Mental Health | 2026-08-19 |
| Nebula Security (this page) | Summer 2026 | B2B, Security, Cybersecurity | 2026-07-02 |
Click a column heading to sort. Comparison is against records held here, not against every company that exists.
The full profile
The rest of this profile is open on any paid or trial plan
It costs no credits. It is a plan check and nothing else.
- Source Check — verify Eten Zou's other claims against the registers that hold them.
- INVEST — compare this company against the peers above, on the numbers.
- RECRUIT — see who is already on the team.
- Press Requests — connect with Eten Zou for a story.
You land back on this company when you are in.
Not ready to upgrade? Keep this one in view instead.
Watchlist Nebula SecurityYou get an alert in MentionFox the next time this company shows up.
Is this you?
If you're behind Nebula Security: acceptance into a YC batch is one of the few weeks a young company gets looked up by people who matter — investors, other founders, press. FoxPlug turns the commits, deploys, and releases you're already making into that story automatically, so anyone who looks finds something current. FoxChat puts a guide on your own site so the people YC's own page just sent you don't read one line and leave.
Sourced from the company's Y Combinator directory entry. Figures are read directly from the source record; names have not been matched against other people.