Ross ROSS = Recommend OSS · open-source software intelligence for agents

Nuclei

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations. observed · 2026-10-18

github.com/projectdiscovery/nuclei · homepage · Go · MIT (permissive) observed · 2026-10-18

Health v2 · maintenance only

96/100

  • Activity 100
  • Release rhythm 89
  • Longevity 100
How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-10-21. Adoption (stars, forks) is never an input.

  • gap_med: 20
  • age_days: 2391
  • days_rel: 73
  • days_push: 3
  • n_releases_24m: 28

Full methodology

Adoption not part of the score

32091 stars · 3969 forks observed · 2026-10-18

What it is AI-extracted, prompt v1, taxonomy v1, 2026-10-05, confidence 0.97

Nuclei is a high‑performance, open‑source vulnerability scanner written in Go. It uses simple YAML‑based templates to detect security issues across applications, APIs, networks, DNS and cloud configurations.

Use cases

  • scan web applications for known vulnerabilities
  • detect misconfigurations in cloud resources
  • enumerate subdomain takeover and DNS takeover risks
  • run bulk vulnerability scans across large IP ranges
  • customize security checks with user‑written YAML templates
  • integrate Nuclei into CI/CD pipelines for automated security testing
  • perform fast, repeatable scans of network services and protocols

When to choose

  • You need a fast, command‑line scanner that can be scripted and automated.
  • You want to leverage a large, community‑maintained library of vulnerability templates.
  • You require custom, YAML‑based checks to cover unique or emerging attack vectors.
  • You plan to integrate scanning into DevOps workflows or CI/CD pipelines.

When to avoid

  • You require a graphical user interface for vulnerability management.
  • You need extensive compliance reporting or ticketing system integration out of the box.
  • Your environment cannot run Go binaries or Docker containers.

Facets

cli-tool · maturity active

http-client parser testing security penetration-testing windows cli yaml-templates fast customizable community-driven open-source vulnerability-scanner linux macos docker kubernetes

6 sources

Member repositories

For agents

markdown · JSON · MCP: product_card(name="projectdiscovery/nuclei")

Data as of 2026-10-19T08:05:51.212177+00:00 · Report a problem