Nuclei
Nuclei scans for vulnerabilities using customizable templates written in YAML.
About Nuclei
Nuclei is a vulnerability scanner that uses templates written as YAML files to detect, rank, and describe security flaws. According to its documentation, it is designed to probe modern applications, infrastructure, cloud platforms, and networks. Each template describes a possible attack route, including the vulnerability, its severity, a priority rating, and sometimes associated exploits. The documentation states that the community has contributed over 6500 templates.
The documentation lists several use cases, including web application security, infrastructure security, and CI/CD pipeline security. Some use cases are marked as alpha, specifically API security testing, cloud security, and network device security. Some features, including comprehensive reporting, CI/CD integration, and ticketing integration, are marked in the source as cloud features. The source does not say whether these are available in every setup. Pricing is not stated.
Key features
- Community-contributed template library with over 6500 templates
- Target input from URLs, IP ranges, ASN ranges, or files
- Bulk and parallel scanning of multiple targets
- Custom templates with dynamic variables for parameterized scans
- Inclusion and exclusion filters to narrow the scan scope
- Integration with CI/CD pipelines for automated security testing
Best for: Security engineers and development teams who want to scan web applications, infrastructure, and APIs using customizable YAML templates.
Good for
- Large library of community-contributed templates
- Supports bulk and parallel scanning of many targets
- Can be integrated into CI/CD pipelines
Watch out for
- Several use cases, including API, cloud, and network device security, are marked as alpha
- Reporting, CI/CD, and ticketing features are labeled as cloud features in the source
Nuclei at a glance
- Category
- Privacy & Security › Security Tools
- Type
- Website
- Pricing
- Not confirmed. Check the site
- Platforms
- Web
- Open source
- Not stated
- Language
- English
- Last checked
- Oct 6, 2026 · Online when checked
- Listed
- Oct 5, 2026
Guides for Security Tools
Nuclei alternatives
Tools and sites you could use instead, ranked by how closely they match.
Adapt this collection of contract templates for penetration testing engagements.
Scan applications, APIs, networks, DNS, and cloud configurations for vulnerabilities using Nuclei.
Open source
24 alternatives
Use Markdown templates to prepare reports for listed Offensive Security certification exams.
Open source
24 alternatives
Snyk CLI scans and monitors software projects for security vulnerabilities.
Ndiff compares Nmap scan results from two XML files, showing changes such as hosts and ports appearing or disappearing.
This Markdown template helps candidates prepare reports for Offensive Security certification exams.
Popular in Security Tools
Well-known listings from the same topic.
Online Password Hash Crackonlinehashcrack.comOTP Authapps.apple.com/app/otp-auth/id659877384MD5 reverse lookupmd5.gromweb.comMozilla SSLssl-config.mozilla.orgchallenges.rechallenges.reGoPlus Locker V3gopluslabs.io
Nuclei FAQ
What format are Nuclei templates written in?
Templates are written as straightforward YAML files that define methods for detecting specific security flaws.
What kinds of targets can Nuclei scan?
The source lists URLs, IP ranges, ASN ranges, and file input as supported target specifications.
Can Nuclei be used in a CI/CD pipeline?
Yes. The documentation says Nuclei can be integrated into CI/CD pipelines for automated security testing during development and deployment.
Is something wrong or out of date?
Tell us and an editor will check it.
Own this website?
Claim this listing
Claim the listing and suggest updates yourself. An editor checks every claim first.