projectdiscovery/nuclei
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
Build with Backblaze B2
SDKs, agent skills, IDE extensions, and reference pipelines from Backblaze Labs. All open source.
Loading star history...
Where it stands
Rank, growth pace and release cadence relative to everything GStars tracks.
1 release in the last 90 days, the latest 89 days ago, with 285 contributors on GitHub.
Peaked at #17 in the weekly ranking the week of Jul 19, its best in the past year.
Use Cases & Benefits
- Provides a fast, customizable vulnerability scanner using a simple YAML-based DSL for detecting security issues across applications, APIs, networks, DNS, and cloud configurations.
- Enables collaborative, real-world vulnerability detection with ultra-fast parallel scanning and minimal false positives through customizable templates contributed by a global security community.
- Use for integrating automated vulnerability scanning into CI/CD pipelines to detect and prevent regressions in application security before deployment.
- Use for security teams to perform large-scale, high-accuracy scans across cloud environments and network infrastructures with support for multiple protocols and integrations.
- Use for penetration testers to create and run custom detection scenarios simulating real attack vectors using flexible YAML templates and workflows.
Should you depend on it?
License terms, project hygiene and risks, from GitHub metadata and GStars' snapshots.
License
MIT
Permissive: commercial use, modification and redistribution are allowed with attribution.
Community files
- README: present
- Contributing guide: present
- Code of conduct: present
Watch-outs
No watch-outs from GStars' checks.
General guidance from repository metadata, not legal advice. How we score
From the README
Nuclei is a modern, high-performance vulnerability scanner that leverages simple YAML-based templates. It empowers you to design custom vulnerability detection scenarios that mimic real-world conditions, leading to zero false positives.
Daily snapshots
Stars gained per day, and how forks and open issues moved, from GStars' daily snapshots
+2,238 stars over 90 days across 13 snapshot days; best day +77 on Sep 17.
Forks
4.0K+182
Open issues
92-10
Compared with peers in Security
Fastest-growing repositories GStars tracks in this cohort for the week of Nov 8, by 7-day star growth
| Repository | Stars | +7d | Health | Last release |
|---|---|---|---|---|
| cloudflare/security-audit-skill | 69.3K | +10.7K | 75 | — |
| vxcontrol/pentagi | 33.9K | +719 | 75 | 36 days ago |
| GyulyVGC/sniffnet | 42.3K | +422 | 75 | 111 days ago |
| soxoj/maigret | 39.9K | +332 | 60 | 87 days ago |
| Asymptote-Labs/agent-beacon | 3.4K | +315 | 75 | 1 day ago |
| projectdiscovery/nuclei | 32.6K | — | 60 | 89 days ago |
| Category median | 39.9K | +422 | 75 | — |
Also by projectdiscovery
Other repositories from this maintainer that GStars tracks
- Go17.8K stars
katana
A next-generation crawling and spidering framework.
- Go14.7K stars
subfinder
Fast passive subdomain enumeration tool.
- JavaScript13.3K stars
nuclei-templates
Community curated list of templates for the nuclei engine to find security vulnerabilities.
- Go10.6K stars
httpx
httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.
- Go6.3K stars
naabu
A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests
Discover Repositories
Search across tracked repositories by name or description