NebuSec (YC S26) — Autonomous AI defense system for cyber attack
NebuSec is founded by the world’s #1 hacking team. We were the first team to build an nginx RCE and the first to root Android 17.
NebuSec is a Y Combinator company in the Summer 2026 batch. Its directory entry describes it as: Autonomous AI defense system for cyber attack. The founders listed are Eten Zou (Founder/CEO), Yuan Tan (Founder/CTO), Frank Wu (Founder/COO) (Y Combinator directory entry, July 2, 2026).
Get an email when NebuSec changes status, grows its team or files a funding notice. One email first to confirm; nothing else until you click it. At most one a day, one click to stop. Free for up to 3 companies.
What do you want to do with NebuSec?
Who to contact
Eten Zou — Founder/CEO
Yuan Tan — Founder/CTO
Frank Wu — Founder/COO
Xiaochuan Yu — Founder/VP of Vulnerability Research
Example from a real report (our sample on Target): “Target eliminated approximately 1,800 corporate positions, with around 1,000 employees receiving layoff notices and the remainder accounted for by eliminating open roles.” Source: NBC News
NebuSec is founded by the world’s #1 hacking team.
We were the first team to build an nginx RCE and the first to root Android 17. Our co-founders include members of the world’s No. 1 CTF team, DEF CON winners, Black Hat speakers, and PhD in cybersecurity. We have won $400K in bug bounties by exploiting the Linux kernel and Chrome browser.
“Audited by NebuSec” is a mark of serious security credibility: a signal to customers, investors, and partners that your product has been reviewed by the world’s best hackers.
Eten Zou
Founder/CEO
Yuan Tan
Founder/CTO
Frank Wu
Founder/COO
Xiaochuan Yu
Founder/VP of Vulnerability Research
Founders, titles and bios as the company published them. Photographs are our own copies of the ones on that record, so they do not break when the original link expires.
No investor is drawn from a Form D — the form states how many invested and never who. The one investor on this graph is named because a batch has exactly one.
Want the whole picture on NebuSec?
Example from a real report (our sample on Target): “Target eliminated approximately 1,800 corporate positions, with around 1,000 employees receiving layoff notices and the remainder accounted for by eliminating open roles.” Source: NBC News
A Full Report on NebuSec: verified, sourced, every claim cited, ready in a few minutes. See pricing.
What the Full Report on NebuSec covers
The Short Answer
Which Company This Is
What They Do, And How The Money Works
Who Runs It, And How To Reach Them
The Money: Funding, Valuation, Runway
Who Pays Them, And Who They Are Up Against
Warning Bells
Sources
1 cited source found
Plus the sections for what you are deciding, which you pick after ordering.
You get an alert in MentionFox the next time this company shows up.
Is this you?
If you're behind NebuSec: acceptance into a YC batch is one of the few weeks a young company gets looked up by people who matter — investors, other founders, press. FoxPlug turns the commits, deploys, and releases you're already making into that story automatically, so anyone who looks finds something current. GetFoxChat puts a guide on your own site so the people YC's own page just sent you don't read one line and leave.
