‹ Application security engineer agents

NebuSec
Autonomous AI defense system for cyber attack
Why it ranks #504
NebuSec, an AI application security engineer from YC S26, ranks #504 of 999 AI agents and #3 of 8 in Application security engineer, with a score of 2.5 of 10. Data as of .
The score adds four parts, each 0 to 10, by weight. Every point comes from public evidence. How scoring works ·
- Proof 0 × 30% 0.0
- Scale 2 × 30% 0.6
- Momentum 4 × 25% 1.0
- Autonomy 6 × 15% 0.9
- = 2.5
- 0
Proof
Do customers use it? 30% of the score
No public claims of customers or revenue yet.
Not found: revenue or growth (+4), named customers (+3), a customer result (+2), a customer count (+2), work done at scale (+2)
- 2
Scale
Is there a real company behind it? 30% of the score
4 people.
- +24 people on its YC page3 or 4 people
Not found: funding round in its news (+3)
- +2
- 4
Momentum
Is it shipping and growing now? 25% of the score
Shows a recent launch and a new batch.
- +3Launched in the last 6 monthsNebula Security: Bringing beyond Mythos protection to your productLaunch YC post · 23 Jul 2026
- +1New: YC Summer 2026
Not found: open roles on YC (+2), new traction claim in the last 6 months (+2), funding news in the last year (+2)
- +3
- 6
Autonomy
How much of the job does it do on its own? 15% of the score
Supervised agent: takes actions in other systems; a person approves key steps.
- +6Level 2 of 4: Supervised agentTakes actions in other systems; a person approves key steps.
What the model read
- Acts in other systems: 58% likely
- Finishes whole tasks: 27% likely
- Calls itself an agent: 80% likely
Level 2: Takes actions in other systems; a person approves key steps.
- +6
About NebuSec
NebuSec is founded by the world’s #1 hacking team.
We were the first team to build an nginx RCE and the first to root Android 17. Our co-founders include members of the world’s No. 1 CTF team, DEF CON winners, Black Hat speakers, and PhD in cybersecurity. We have won $400K in bug bounties by exploiting the Linux kernel and Chrome browser.
Read more
“Audited by NebuSec” is a mark of serious security credibility: a signal to customers, investors, and partners that your product has been reviewed by the world’s best hackers.
Founders
- Eten ZouFounder/CEO
- Yuan TanFounder/CTO
- Frank WuFounder/COO
- Xiaochuan YuFounder/VP of Vulnerability Research
Launches and news
Alternatives in Application security engineer
The top Application security engineer agents by score, with NebuSec in its place.
- 1
CorgeaApplication security engineerS23Corgea finds, and fixes insecure code and packages autonomously.Proof2Scale4Momentum8Autonomy6Score4.7 - 2
TolmoApplication security engineerSp26Tolmo is the AI security platform that secures every layer of cloud…Proof0Scale4Momentum4Autonomy8Score3.4 - 3
NebuSecApplication security engineerS26Autonomous AI defense system for cyber attackProof0Scale2Momentum4Autonomy6Score2.5 - 4
ZeroPathApplication security engineerS24Automatically find and fix your software vulnerabilitiesProof0Scale4Momentum0Autonomy8Score2.4 - 5
Gecko SecurityApplication security engineerF24The AI Security Engineer to Find and Fix VulnerabilitiesProof2Scale1Momentum0Autonomy6Score1.8 - 6
winfuncApplication security engineerS24ai-native security engineering for mission critical codebasesProof0Scale1Momentum0Autonomy8Score1.5