Autonomous Pentesting.
Every Surface. Non-Stop.
Continuous security testing across your entire attack surface. Custom pricing for every team.
Replace your annual pentest
Tailored to your team
Continuous autonomous testing for web apps, APIs, and infrastructure.
- Web app & SPA testing (OWASP Top 10)
- REST & GraphQL API security
- Authenticated session testing
- Asset discovery & external recon
- TLS/SSL & certificate analysis
- Automated pentest reports
AI security engineer in your Slack
Tailored to your team
Your own AI security engineer. Tests web, APIs, mobile, cloud, containers, and code continuously.
- +Everything in Starter, plus:
- Personal AI engineer via Slack
- Mobile app testing (iOS & Android)
- Cloud infrastructure (AWS, GCP, Azure)
- Container & Kubernetes pentesting
- Static analysis & secret scanning
- Multi-step exploit chains
- CI/CD pipeline integration
- Slack, Jira, GitHub & PagerDuty
- Compliance mapping (SOC 2, ISO 27001, PCI DSS)
Full red team at scale
Tailored to your team
Unlimited AI security engineers. On-premise, custom agents, internal network, wireless, IoT, and social engineering.
- +Everything in Professional, plus:
- Multiple AI security engineers
- Internal network & Active Directory
- Wireless & IoT pentesting
- Lateral movement & privilege escalation
- Social engineering simulation
- MITRE ATT&CK mapping
- IaC misconfiguration scanning
- Custom AI agent development
- SIEM integration (Splunk, Elastic, Datadog)
- Air-gapped & on-premise deployment
- SSO, white-label reports & dedicated CSM
Your Infrastructure. Your Rules.
Run Nebula on your own infrastructure with full isolation, custom agents, and enterprise governance.
Private Instance
Dedicated Nebula on your infrastructure - on-premise, private cloud, or bare metal.
Air-Gapped
Fully isolated for classified networks. Zero external connectivity.
Custom Agents
Security agents built for your stack, threat model, and attack surface.
SSO & Governance
SAML 2.0, OAuth, MFA, audit trails, and role-based access.
Full Comparison
Everything Nebula Can Do
| Feature | Starter | Professional | Enterprise |
|---|---|---|---|
Attack Surface | |||
| Web applications (OWASP Top 10) | |||
| REST & GraphQL APIs | |||
| Single-page apps (React, Vue, Angular) | |||
| Mobile apps (iOS & Android) | |||
| Cloud infrastructure (AWS, GCP, Azure) | |||
| Containers & Kubernetes | |||
| Internal network & services | |||
| Active Directory & identity systems | |||
| Wireless networks (Wi-Fi, BLE) | |||
| IoT & embedded devices | |||
Testing Techniques | |||
| Authenticated session testing | |||
| Business logic & IDOR flaws | |||
| Privilege escalation | |||
| Multi-step exploit chains | |||
| Lateral movement simulation | |||
| Credential stuffing & password spraying | |||
| Social engineering simulation | |||
| MITRE ATT&CK mapping | |||
AI Engine | |||
| Nebula autonomous engine | |||
| AI security engineer (Slack) | 1 | Up to 3 | |
| Cross-scan memory & learning | |||
| Custom AI agent development | |||
Code & Supply Chain | |||
| Static analysis (SAST) | |||
| Secret & credential scanning | |||
| Dependency & SCA scanning | |||
| Container image scanning | |||
| IaC misconfiguration | |||
Integrations | |||
| CI/CD pipelines | |||
| Slack, Jira, GitHub, PagerDuty | |||
| SIEM (Splunk, Elastic, Datadog) | |||
| REST API & webhooks | |||
Reporting & Compliance | |||
| Automated pentest reports | |||
| Compliance mapping (SOC 2, ISO, PCI, HIPAA) | |||
| White-label & custom branding | |||
Deployment & Support | |||
| On-premise / air-gapped | |||
| SSO (SAML / OAuth) | |||
| Support SLA | 4 hours | 1 hour | |
| Dedicated success manager | |||
Questions
FAQ
See Nebula Find Real Vulnerabilities
30-minute live demo on your own assets. No commitment.