# NebuSec

[NebuSec on Hacklab](https://hacklab.so/org/nebusec)

Startup · 4 people on Hacklab

## Links

- [Website](https://nebusec.ai/)
- [Y Combinator](https://www.ycombinator.com/companies/nebusec)
- [LinkedIn](https://www.linkedin.com/company/125323912)
- [X](https://x.com/nebusecurity)

## About

<!-- hacklab:yc-profile -->

## YC company profile

Autonomous AI defense system for cyber attack

NebuSec is founded by the world’s #1 hacking team.

We were the first team to build an nginx RCE and the first to root Android 17. Our co-founders include members of the world’s No. 1 CTF team, DEF CON winners, Black Hat speakers, and PhD in cybersecurity. We have won $400K in bug bounties by exploiting the Linux kernel and Chrome browser.

“Audited by NebuSec” is a mark of serious security credibility: a signal to customers, investors, and partners that your product has been reviewed by the world’s best hackers.

- **YC batch:** Summer 2026
- **Founded:** 2026
- **Team size:** 4
- **Location:** San Francisco
- **Country:** US
- **Status:** Active
- **Industry:** B2B
- **Stage:** Early
- **Tags:** B2B, Security, Cybersecurity, Enterprise, AI
- **YC partner:** Ankit Gupta

## Founders

### Eten Zou — Founder/CEO

CEO & Founder @ Nebula Security (YC S26). PhD in Cybersecurity.
Focus on automated vulnerability research.

[LinkedIn](https://www.linkedin.com/in/xiaochen-zou-phd-29540b168) · [X](https://x.com/etenal7)

### Yuan Tan — Founder/CTO

Founder at Nebula Security (YC S26). Black Hat USA speaker. PhD dropout in System Security with experience in DARPA-funded fundamental research on program analysis.

[LinkedIn](https://www.linkedin.com/in/yuantan1/)

### Frank Wu — Founder/COO

Founder of Nebula Security (YC S26). Black Hat USA speaker and DEF CON finalist with r3kapig, the world's No. 1 hacking team in 2025. He led the DARPA AIxCC automated program repair team and shipped end-to-end RCE/LPE exploit chains on Chrome, Firefox, Linux, and Android. He pwned Google's kernelCTF multiple times with zero-days, and has published research at top academic venues such as USENIX Security and NDSS. Ph.D. dropout.

[LinkedIn](https://www.linkedin.com/in/yifan-wu-cs) · [X](https://x.com/FrankOverF1ow)

### Xiaochuan Yu — Founder/VP of Vulnerability Research

Founder at Nebula Security (YC S26). Hacked into iPhone, Chrome, Firefox, Safari, QEMU, and various things in your daily life. DEFCON finalist for 3 consecutive years. $200k+ Bug Bounty in Chrome. Core member of r3kapig, the #1 hacking team in the world in 2025, on CTFTime. M.S. from UC San Diego. Research published at USENIX Security, BlackHat USA. Ph.D. droped out.

[LinkedIn](https://www.linkedin.com/in/xiaochuan-yu-3103a5297) · [X](https://x.com/Nyaaaaa_ovo)

[Source: Y Combinator](https://www.ycombinator.com/companies/nebusec) · Retrieved 2026-11-02. Company information is self-reported on YC.

## Current staff

- [Eten Zou](https://hacklab.so/eten-zou) — Founder/CEO (Present)
- [Frank Wu](https://hacklab.so/frank-wu) — Founder/COO (Present)
- [Xiaochuan Yu](https://hacklab.so/xiaochuan-yu) — Founder/VP of Vulnerability Research (Present)
- [Yuan Tan](https://hacklab.so/yuan-tan) — Founder/CTO (Present)