Our mission is to Democratize Security.
ProjectDiscovery is an open source powered security company. We specialize in detecting new, exploitable vulnerabilities and misconfigurations so you can remediate them before hackers exploit them.
- ProjectDiscovery Cloud Platform (PDCP) helps you find and quickly detect vulnerabiltiies for your most critcal assets. Get started for free and upgrade if needed to enable cloud scanning and other features.
- Documentation where you can learn all about ProjectDiscovery and our tools
- Run a Nuclei scan now with just a few steps
- Learn more about templates, the cornerstone of the Nuclei scanning engine. Nuclei templates enable precise and rapid scanning across various protocols like TCP, DNS, HTTP, and more.
- Need help? We're available on GitHub and Discord - feel free to reach out and join our community!
ProjectDiscovery produces a suite of open source tools tailored for offensive security: security engineers, bug bounty hunters, and red teamers. Our toolkit is structured around three distinct layers to optimize your security assessment and penetration testing processes. We also provide utilities and libraries as building blocks for an offensive security or bug bounty hunting program.
To learn about all of the tools, see our tools documentation or check out this video. You can also find the tools in our various GitHub repositories. A few of our most popular projects include:
- nuclei: A fast and customizable vulnerability scanner based on simple YAML based DSL.
- nuclei-templates: Community curated list of templates for the nuclei engine to find security vulnerabilities.
- subfinder: A fast passive subdomain enumeration tool leveraging dozens of APIs.
- httpx: A fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.
- cvemap: A CLI to Navigate the CVE jungle with ease.
- katana: A next-generation crawling and spidering framework.
- naabu: A fast port scanner written in go with a focus on reliability and simplicity.
Our community is a dedicated space for security engineers and developers to collaborate, share knowledge, and learn how to manage vulnerability workflows more efficiently and effectively. By participating, you gain access to a wealth of resources, including tutorials, best practices, and the collective expertise of industry professionals, all aimed at enhancing your skills and improving your ability to handle security challenges.
- Create issues across our tools (bugs, enhancements, feature ideas)
- Contribute to community driven database of vulnerability templates
- Pull request review
Write us to hello@projectdiscovery.io for any other questions you might have.
Pinned Loading
Repositories
- nuclei-templates Public
Community curated list of templates for the nuclei engine to find security vulnerabilities.
- ipranger Public
IP/FQDN data structure helper with randomization of hosts and ports based on masscan internal logic
- shuffledns Public
MassDNS wrapper written in go to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard filtering and easy input-output support.
- asnmap Public
Go CLI and Library for quickly mapping organization network ranges using ASN information.
- retryablehttp-go Public
Package retryablehttp provides a familiar HTTP client interface with automatic retries and exponential backoff
- naabu Public
A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests
- httpx Public
httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.
Top languages
Loading…
Most used topics
Loading…