Nuclei Vulnerability Scanner

Run fast, template-based vulnerability scanning against web apps and infrastructure with Nuclei by ProjectDiscovery. Detect CVEs, misconfigurations, and exposures using thousands of community templates, write custom templates, and integrate severity-ranked results into CI.

Nuclei uses YAML templates to send targeted requests and match known-vulnerability signatures across HTTP, DNS, TCP, and more. This skill helps you run authorized scans against your own assets, author custom templates for app-specific checks, tune rate limits, and report findings by severity.

When to use

Use to scan your own web applications and infrastructure for known CVEs and misconfigurations during authorized security testing, write custom detection templates, or add automated vulnerability checks to CI.

Examples

Scan your app for known CVEs

Template-based vulnerability assessment

Run Nuclei against my staging site to check for known CVEs and common misconfigurations

Write a custom template

Detect an app-specific exposure

Write a Nuclei template that detects an exposed .env file or admin panel on my domain

Automate scans in CI

Continuous vulnerability checks

Add a Nuclei scan to my pipeline that reports HIGH and CRITICAL findings on each deploy