Suggestions appear as you type. Use the up and down arrows to choose one and Enter to open it.

This page's audience our own tag's counts — open to see them
–Visits
–Page views
–Clicks to vendors
–Time on page
–Reading now
Clicks to vendors, by tool
  • –
Top countries
  • –
Devices
  • –

– · visits, page views and clicks counted by our own tag, which counts more than our checked analytics; every figure rounded down · how we count

Nuclei

Free#22 of 29 in Web Application Security ScannersVulnerability Scanner SoftwareNetwork Vulnerability ScannersVulnerability Scanning Software

Nuclei: A flexible, free scanner for teams that want control over templates and execution. Ranked #22 of 29 in Web Application Security Scanners by our editors (7.3/10); pricing: Free plan; best for security engineers needing customizable templates.

7.3/10Editor score
Visit Nuclei
Nuclei7.3 Visit Nuclei

At a glance

  • Editor score
    7.3 / 10
  • Pricing
    Free plan
  • Best for
    Security engineers needing customizable templates
  • Free plan
    Yes
  • Paid from
    Free
  • Authenticated scans
    Yes
  • Facts checked
    19 Sep 2026
Nuclei screenshot

  • Where it wins

    • Custom YAML templates and an automatically updated community library
    • Authenticated scans, API specification testing, and parallel processing
    • CI/CD support, broad protocols, and JSON, SARIF, PDF, and other outputs

  • Where it doesn't

    • Primarily a standalone self-hosted CLI rather than a managed application
    • Template-driven coverage provides less verified application-crawling depth
    • ProjectDiscovery cloud editions are separate from the open-source scanner

Our verdict on Nuclei

Nuclei is a high-performance, open-source vulnerability scanner from ProjectDiscovery. It is designed for security engineers who need customizable detection across web applications, APIs, networks, DNS, SSL, JavaScript, code, WebSocket, and other supported targets. The standalone CLI accepts targets from files, standard input, or direct arguments, while YAML templates let teams run community checks or define their own. Authenticated testing supports secret files, headers, cookies, tokens, and login templates, making the scanner suitable for controlled testing of applications and infrastructure.

The core product is free and open source, with a self-hosted deployment model. ProjectDiscovery also documents Pro and Enterprise cloud editions built on Nuclei OSS for team-based scanning and reporting. The scanner fits delivery workflows through CI/CD integration and connects with Jira, Splunk, GitHub, Elastic, and GitLab. OpenAPI and Swagger specification testing extends its API coverage, while JSON, JSONL, Markdown, SARIF, and PDF outputs support different reporting and pipeline needs. Parallel processing and request clustering are useful for teams that need to run template-driven checks across larger target sets.

Nuclei’s main strength is breadth combined with control: teams can tune detection through YAML, use authenticated scans, and cover multiple protocols from one command-line tool. Its main trade-off is that the experience is centered on templates and self-hosted execution, not verified application crawling. JavaScript template execution is documented, while JavaScript crawling is not part of the documented scope here. Choose Nuclei when customizable checks, automation, and integration flexibility matter most. Teams seeking a managed scanner focused on deeper application-crawling workflows should consider a different product.

Your product? Our editors can test Nuclei in depth and publish a review, labelled as paid · from $149/mo →

Nuclei pricing

Plans Free planFree Free to use — no paid tier required for the core job.
See plans on nuclei.projectdiscovery.io

Nuclei fact sheet

Free planYes
Paid fromFree
DeploymentOn-premise
Authenticated scansYes
JavaScript crawlingNot verified
Scheduled scansYes
Compliance reportsYes
API scanningYes
Target limitNot verified
DeploymentSelf-hosted
Integrations5 integrations: Jira, Splunk, GitHub, Elastic, GitLab
PricingFree plan
Websitenuclei.projectdiscovery.io
Facts checked19 Sep 2026

Nuclei integrations

Nuclei lists 5 integrations on its own site.

  • Jira
  • Splunk
  • GitHub
  • Elastic
  • GitLab

Alternatives to Nuclei

See all Nuclei alternatives →

Also Ranked In

Nuclei is ranked in 4 of our directories.

Used Nuclei? Be the first to review it

The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Nuclei for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.

Write a reviewTwo minutes · verified accounts only · read by an editor before it appears

Reviews come only from verified accounts. Sign in or create an account first — your e-mail is never shown.

Your rating

0 characters · at least 80, up to 3,000

Posted from your verified account. Reviews appear after an editor reads them, usually within two working days.

Featured on iTechGuides

Featured on iTechGuides — Nuclei 7.3/10

Nuclei is listed in our Web Application Security Scanners directory. Add the badge to your site — it links back to this page.

<a href="https://www.itechguides.com/products/nuclei/"><img src="https://www.itechguides.com/best/badge/nuclei.svg" alt="Featured on iTechGuides" width="230" height="46"></a>

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated · How we research and update