Nuclei logo

Nuclei

Fast YAML-based vulnerability scanner for applications, APIs, networks, DNS, and cloud configs

Open Source Alternative to
Repository activity
  • Stars29.2k
  • Forks3.5k
  • Open Issues103
nuclei health score - Linux Foundation Insights
License

MIT

Languages
  • Go
  • TypeScript
  • HTML
Nuclei screenshot

About Nuclei

Nuclei is a high-performance vulnerability scanner that uses simple YAML templates to define detection logic. It finds issues across applications, APIs, networks, DNS, and cloud configurations, with scans you can customize for specific targets and checks.

Ultra-fast parallel scan processing and request clustering keep large scans quick, and multiple protocols are supported including TCP, DNS, HTTP, SSL, WHOIS, JavaScript, and Code. It runs against single targets, target lists, or whole networks and slots into CI/CD pipelines for detection and regression testing.

A large community template library covers known CVEs and misconfigurations, and templates are easy to write and extend. Nuclei runs as a standalone CLI tool on your own machine, with optional integrations for Jira, Splunk, GitHub, Elastic, and GitLab.

Key features

  • YAML templates for custom vulnerability detection scenarios
  • Parallel scan processing with request clustering
  • Multiple protocols including TCP, DNS, HTTP, SSL, WHOIS, JavaScript, and Code
  • CI/CD integration for vulnerability detection and regression testing
  • Integrates with Jira, Splunk, GitHub, Elastic, and GitLab

Details

First released
2020
Platforms
CLI
Deployment
Self-hostable
License
MIT
Templates
YAML-based
Protocols
TCP, DNS, HTTP, SSL, WHOIS