There is a certain kind of company that does not scream for attention. It builds in the quiet. It earns in the dark. And then one day the market leans in and says, wait… who’s been running the room?
Nucleus Security just secured $20M in Series C funding. Delta-v Capital led the round. Arthur Ventures doubled down. That is not charity. That is conviction with a calculator.
Congratulations to Steve Carter, Co-founder and CEO, and Scott Kuffer, Co-founder and COO, for building something investors do not just understand, but feel in their bones. Also respect to Co-founder Nick Fleming, because companies like this do not materialize without technical gravity at the core.
Let’s talk about the name. Nucleus. The center of mass. The control room. In cybersecurity, noise is cheap. Alerts fly like confetti at a parade nobody asked for. Nucleus Security decided to become the atomic center of vulnerability and exposure management. Not another scanner. Not another dashboard. The system of record. The orchestration layer. The place where chaos gets organized and risk gets prioritized.
They unify data from more than 200 tools. 200. That is not integration theater. That is plumbing at scale. IT, cloud, application, OT. All roads lead back to a single, living picture of exposure. And when you add AI-driven exploit intelligence into that bloodstream, you are not just listing problems. You are ranking consequences.
Here is the business lesson hiding in plain sight. Enterprises built homegrown vulnerability management systems because they had to. Those systems aged. Complexity multiplied. Boards started asking sharper questions. Nucleus Security walked in with a platform designed by former Department of Defense security experts and said, let’s replace the patchwork with a command center.
The $43M Series B in 2024, co-led by Arthur Ventures and Lead Edge Capital with strategic investment from In-Q-Tel, set the stage. The FedRAMP Moderate Authorization, sponsored by the Centers for Medicare and Medicaid Services, opened federal doors that do not open easily. Being listed on the Continuous Diagnostics and Mitigation Approved Products List is not a vanity metric. It is a passport.
Now the Series C adds fuel. Not for vanity growth. For scale. For deeper exposure management orchestration. For meeting enterprise and federal demand that is no longer optional.
From 71 Alafia Drive in Sarasota, Florida, Nucleus Security is serving enterprises, defense contractors, critical infrastructure providers, and FedRAMP cloud service providers who cannot afford guesswork. Organizations like Motorola, Paychex, and Mastercard rely on them to unify vulnerability data and automate what matters.
Delta-v Capital saw a market turning from vulnerability scanning to exposure orchestration. Arthur Ventures saw a team that executes. Steve Carter and Scott Kuffer saw the gap years ago and built the center before the crowd showed up.
