A fast, customizable vulnerability scanner with a YAML-based DSL, powered by a global security community.
Nuclei is a fast, template-based vulnerability scanner that uses a simple YAML-based DSL to detect security issues in applications, APIs, networks, and cloud configurations. It solves the problem of slow, closed-source scanners by enabling community collaboration to quickly address trending vulnerabilities with high accuracy and minimal false positives.
Security researchers, penetration testers, DevOps engineers, and security teams who need a customizable, high-performance tool for vulnerability assessment and continuous security testing.
Developers choose Nuclei for its extensible YAML template system, massive community-contributed template library, and ability to integrate into CI/CD pipelines, offering a modern alternative to traditional, vendor-locked vulnerability scanners.
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Thousands of community-contributed templates enable rapid detection of trending vulnerabilities, as evidenced by the active nuclei-templates repository and bounty programs for contributions.
Ultra-fast scanning with parallel processing and request clustering allows efficient large-scale assessments, making it suitable for bulk network and application scans.
The simple YAML-based domain-specific language lets users easily create and modify detection logic, supported by an AI-powered online editor for template development.
Seamlessly fits into development pipelines for automated vulnerability detection, with native support for tools like GitHub, GitLab, and Jira as highlighted in the integrations list.
The README explicitly warns that the project is in active development, requiring users to review changelogs before updates to avoid disruptions from incompatible changes.
Running Nuclei as a service is discouraged due to potential security risks, limiting its use in automated, long-running deployments without additional hardening measures.
Detection capabilities rely heavily on community templates, which may lag behind for niche or emerging threats, necessitating manual template creation and expertise.