Comparison between Fluid Attacks and Nucleus Security | Fluid Attacks

Nucleus Security

How does Fluid Attacks' solution compare to Nucleus's? The following comparison table enables you to discern the performance of both providers across various attributes essential for meeting your company's cybersecurity needs. To better understand each attribute, read their descriptions in the dedicated page.

Organization
Attribute
Essential
Advanced
Nucleus
Focus
AI-powered PTaaS on top of native ASPM with built-in scanners
Extras
None
None
None
Headcount

92

Headcount distribution
Headcount growth
Headquarters
Countries
CO and US
Reputation
9.82 from 60 reviews over 6 years on Gartner and Clutch
Same
9.02 from 35 reviews over 4 years on G2 and Gartner
Followers
18K based on the following: FacebookInstagramLinkedInX and YouTube
Same
13K based on the following: Facebook, LinkedIn, X and YouTube
Research firms
None
None
Founded
2001
Funding
Bootstrapped
Same
$36.4M USD in 4 rounds from 3 investors
Acquisitions
None
None
None
Revenue
CVE
257 CVEs reported to MITRE, ranked in the top 10 CVE labs worldwide
None
Compliance
FedRAMP Authorized and SOC2 Type II
Bug bounty
Visits
26K per month. Top 3: 36% MY, 33% CO, 5% IN and others 26%
4K per month. Top 3: 76% US, 6% IN, 5% RO and others 13%
Authority
Vulnerability database
Content
Same
Knowledge base
13 KB sections, 3 in common and 10 additional
KB sections, 3 in common and 2 additional
Community
No
Sync training
No
No
No
Async training
No
Distribution
Direct or with any of its 14 partners
Same
Direct or with any of its 18 partners
Marketplaces AWS and GCP
Freemium
No
No
No
Free trial
Demo
Pricing
Pricing tiers
No plans
Minimum commit
Minimum payment period
Minimum capabilities
Same plus: PTaaS, RE and SCR
Minimum scope
No information available
Pricing drivers
Minimum monthly payment
No information available

Service
Attribute
Essential
Advanced
Nucleus
PTaaS
No
No
Reverse engineering
No
Yes No
Secure code review
No
No
Pivoting
No
No
Exploitation
No
No
Manual reattacks
Not applicable
Not applicable
Zero-day vulnerabilities
None
Continuous zero-day vulnerability research
None
SLA
Response
Min availability
>=99.95% per minute LTM
No information available
After-sale guarantees
No
Yes
Accreditations
None
Hacker certifications
Not applicable
Not applicable
Type of contract
Employee
Same
Endpoint control
Not applicable
Total
Not applicable
Channel control
Not applicable
Total
Not applicable
Standards
Some requirements from 65 standards, 4 in common and 61 additional
All requirements from the same standards
4, all in common
Detection method
Remediation
5, 1 in common and 4 additional
Same, plus 1
1 in common
Outputs
5, 2 in common and 3 additional
Same, plus 2
4, 2 in common and 2 additional

Product
Attribute
Essential
Advanced
Nucleus
ASPM
Yes
No
API
IDE
Same, plus 1 functionality
No
CLI
No
CI/CD
Does not breaks the build
Vulnerability sources
None
Priority criteria
Same
Scanner origin
None
SCA
No
SCA (AI models)
No
No
No
Reachability
No
Reachability type
Same
Not applicable
SBOM
No
Malware detection
Yes
Yes
No
Autofix on components
No
No
No
Containers
No
Source SAST (languages)
No
Source SAST (frameworks)

No

Custom rules
No
No
No
IaC
No
Binary SAST
1 type of binary
Same, plus 2 types of binaries
No
DAST

No

API security testing
No
No
IAST
No
No
No
CSPM
Yes
No
Environments
Left & Right (included)
Same
Left & Right
ASM
No
No
No
Secrets
Same, plus verify other attack vectors and secrets exploitability
No
AI
No
Open-source
Not applicable
No
Provisioning as Code
No
Deployment
Regions
Status
Incidents

Integrations
Attribute
Essential
Advanced
Nucleus
SCM
4, 3 in common and 1 additional
3, all in common
Binary repositories
None
None
None
Ticketing
3, all in common

9, 3 in common and 6 additional

ChatOps
None
None

2

IDE

None

CI/CD
20, 3 in common and 17 additional
5, 3 in common and 2 additional
SCA

15

Container

9

SAST

13

DAST

12

IAST
None
None
None
Cloud
None
CSPM
9
Secrets

7

Remediation
None
None
None
Bug bounty
None
None
Vulnerability management
None
None
Compliance
None
None
None

Notes
 References were last checked on Apr 23, 2025.
Free trial message
Free trial
Search for vulnerabilities in your apps for free with Fluid Attacks' automated security testing! Start your 21-day free trial and discover the benefits of the Continuous Hacking Essential plan. If you prefer the Advanced plan, which includes the expertise of Fluid Attacks' hacking team, fill out this contact form.