Nuclei

Nuclei is a fast, open-source vulnerability scanner from ProjectDiscovery that uses simple YAML-based templates. You describe how to detect a vulnerability as a template, and Nuclei runs it across applications, APIs, networks, DNS and cloud configurations. A large library of templates is contributed by thousands of security professionals.

Nuclei scans in parallel with request clustering, so it is very fast. Templates can simulate real-world steps to confirm a vulnerability and reduce false positives, and they support many protocols, including HTTP, DNS, TCP, SSL, WHOIS, JavaScript and code. It fits into CI/CD pipelines for regression testing and integrates with Jira, Splunk, GitHub, GitLab and Elastic. Paid Pro and Enterprise editions add a hosted platform.

Nuclei has become a standard tool for security teams, backed by a large, fast-moving community template library. It is MIT-licensed.

Stars

0

Forks

0

Commits

0

Repository

projectdiscovery/nuclei

• NessusTenable's commercial vulnerability scanner.
• Burp SuitePortSwigger's web security testing tool, with paid editions.
• QualysCommercial cloud platform for vulnerability management.