About Us

Nebulock builds hunt-first, behavior-first security operations. Enterprise security teams use us to find attackers already inside their environment by spotting behavior that's abnormal for that organization, rather than by matching signatures of attacks someone has already seen. Attackers rotate tooling constantly and it costs them almost nothing; changing how they behave is much harder.

Series A, $34M total raised led by FirstMark, with Bain Capital Ventures, Decibel, Zetta, Step Function, and In-Q-Tel. Founding team out of CrowdStrike, Palo Alto Networks, and Arctic Wolf.

The platform is a closed loop:

• A per-customer behavioral system of record that learns what normal looks like in a specific environment and gets more useful the longer it runs

• Detections built from that context, re-baselining as environments shift, maintained by a detection engineering team rather than shipped and forgotten

• Autonomous hunting agents that work from a hypothesis instead of an alert, and write the detection when they establish root cause

• Detection engineering agents that take the context of threat hunts run to build, test, validate a