Acknowledgement
First, I would like to thank Almighty God, who is the source of all knowledge. Without Him, this would not be possible.
Use Nebula only on systems and networks you own or are explicitly authorized to test.
Key features
- One Project for the engagement. Keep assets, browser sessions, Kali terminals, code, files, notes, findings, and reports together.
- Security browser and interception. Capture in-scope traffic in the desktop browser, intercept and edit requests, and use Repeater and Intruder for follow-up testing.
- Bring your own skills. Add
SKILL.md skills to a Project and select them in chat for assistant work.
- Kali tools and optional VPN egress. Run container commands with Docker or Podman and route authorized container traffic through a Project-selected OpenVPN profile.
- Operator-controlled automation. Set scope, approvals, and budgets for assistant and mission actions.
- Evidence through reporting. Preserve hashed artifacts and execution provenance, link evidence to findings, and export reports or engagement bundles.
Butler
Not sure how to get started? Ask Butler. Select the Nebula logo in the header or mobile navigation, then chat or start Voice.
With a configured model or harness, Butler can answer questions, review the selected project's chats and goals, start or steer work, and manage settings and approvals. It shows delegated work separately from main agents; to redirect a child, ask Butler to guide its parent agent.
Voice setup: GPT-Live requires a direct OpenAI API key. Add an enabled OpenAI provider with a key in Nebula Settings, or set OPENAI_API_KEY on the Nebula host. Nebula keeps the key on the host to start the voice session; your device then exchanges audio with OpenAI over WebRTC. Voice sessions incur OpenAI API charges. Butler can delegate work to a Codex harness, but Codex access does not provide the GPT-Live key. See .
