# projectdiscovery.io

> AI-optimized mirror of projectdiscovery.io containing 50 pages totalling 25,288 words of clean markdown content, structured data, and semantic HTML. Original source: https://projectdiscovery.io/. Last updated: 2026-04-27T00:57:50.462Z.

Each page is available as HTML (with JSON-LD structured data) and Markdown (text-only, ideal for LLMs and RAG).

## Homepage

- [Security at engineering speed](/site-root.html): Neo applies reasoning, memory, and real execution across the delivery lifecycle—so security keeps up with continuously shipped software., Create enchanting WebGL effects, motion, and interactivity — in minutes, not hours. Unicorn Studio makes WebGL easy for designers to embed in Framer, Webflow, or any website., Create enchanting WebGL effects, motion, and interactivity — in minutes, not hours. Unicorn Studio makes WebGL easy for designers to embed in Framer, Webflow, or any website., Create enchanting WebGL effects, motion, and interactivity — in minutes, not hours. Unicorn Studio makes WebGL easy for designers to embed in Framer, Webflow, or any website., Create enchanting WebGL effects, motion, and interactivity — in minutes, not hours. Unicorn Studio makes WebGL easy for designers to embed in Framer, Webflow, or any website., Create enchanting WebGL effects, motion, and interactivity — in minutes, not hours. Unicorn Studio makes WebGL easy for designers to embed in Framer, Webflow, or any website., Create enchanting WebGL effects, motion, and interactivity — in minutes, not hours. Unicorn Studio makes WebGL easy for designers to embed in Framer, Webflow, or any website., Create enchanting WebGL effects, motion, and interactivity — in minutes, not hours. Unicorn Studio makes WebGL easy for designers to embed in Framer, Webflow, or any website., Create enchanting WebGL effects, motion, and interactivity — in minutes, not hours. Unicorn Studio makes WebGL easy for designers to embed in Framer, Webflow, or any website. (1,075 words)

## Articles & Blog Posts

- [blog/how-neo-found-an-ssrf-vulnerability-in-faraday-and-why-it-matters-for-every-team-that-ships-code.html](/blog/how-neo-found-an-ssrf-vulnerability-in-faraday-and-why-it-matters-for-every-team-that-ships-code.html) (1 words)
- [blog/ai-code-review-vs-neo/index.html](/blog/ai-code-review-vs-neo/index.html) (1 words)
- [blog/how-we-cut-llm-cost-with-prompt-caching/index.html](/blog/how-we-cut-llm-cost-with-prompt-caching/index.html) (1 words)
- [blog/authors/index.html](/blog/authors/index.html) (1 words)
- [blog/inside-the-benchmark-pp-architectures-finding-walkthroughs-and-what-each-scanner-actually-caught.html](/blog/inside-the-benchmark-pp-architectures-finding-walkthroughs-and-what-each-scanner-actually-caught.html) (1 words)
- [privacy/index.html](/privacy/index.html) (1 words)
- [terms/index.html](/terms/index.html) (1 words)
- [blog/how-to-research-web-vulnerabilities/index.html](/blog/how-to-research-web-vulnerabilities/index.html) (1 words)
- [blog/hacktober-2025-nuclei-templates/index.html](/blog/hacktober-2025-nuclei-templates/index.html) (1 words)
- [blog/from-detection-to-validation-fixing-broken-vulnerability-workflows.html](/blog/from-detection-to-validation-fixing-broken-vulnerability-workflows.html) (1 words)
- [blog/nuclei-templates-november-2025/index.html](/blog/nuclei-templates-november-2025/index.html) (1 words)
- [blog/everyone-is-finding-vulns-the-hard-part-is-proving-them.html](/blog/everyone-is-finding-vulns-the-hard-part-is-proving-them.html) (1 words)
- [New Research: 66% of security teams drown in manual work](/blog/why-current-vuln-scanners-fail-to-stop-breaches/index.html): First-generation scanners drown teams in noise. Only 6% of CVEs are ever exploited, yet attackers weaponize them in hours. ProjectDiscovery, the RSA Sandbox winner, delivers runtime validation and detections within hours so you can act fast, cut false positives, and close real risk. (1,216 words)
- [blog/discourse-backup-disclosure-rails-send_file-quirk/index.html](/blog/discourse-backup-disclosure-rails-send_file-quirk/index.html) (1 words)
- [nuclei/index.html](/nuclei/index.html) (1 words)
- [A Year of Real-World Exploitation](/blog/year-in-review-the-vulnerabilities-that-defined-2025.html): A Year of Real-World Exploitation

If you work in security, you probably remember React2Shell. Shortly after public disclosure, scanning activity increased, and exploitation attempts began to surface.

That sequence showed up repeatedly across several of 2025’s most impactful vulnerabilities. Advisories were still circulating while attackers were already testing and operationalizing exploits.

This wasn’t true for the thousands of CVEs published quietly throughout the year. But for a smaller set (1,481 words)
- [Introduction](/blog/remote-code-execution-in-delmia-apriso/index.html): Introduction

DELMIA Apriso is a manufacturing execution and operations orchestration platform used by large manufacturers, service providers, and critical infrastructure operators. Because the product exposes multiple integration points (SOAP, file uploads, provisioning feeds) that are often reachable from internal networks, we performed a focused black-box assessment to surface integration and surface-area weaknesses.

Our testing uncovered two chained, high-impact issues: an unauthenticated S (1,143 words)
- [What are ASNs?](/blog/asnmap/index.html): If you're into hacking, there's a good chance that at least one of ProjectDiscovery's tools has been added to your toolbox over the last couple of years. In all honesty, ProjectDiscovery's tools now make up the majority of my toolbox. For this reason, I get excited when they release something new, and ASNMap is no exception.


What are ASNs?

An Autonomous System (AS) is one or more IP prefixes, typically run by one network operator, with a clearly defined routing policy. An Autonomous System Nu (1,176 words)
- [A suite of open source tools tailored for offensive security](/open-source/index.html): A suite of open source tools tailored for offensive security engineers, bug bounty hunters, and red teams, Create enchanting WebGL effects, motion, and interactivity — in minutes, not hours. Unicorn Studio makes WebGL easy for designers to embed in Framer, Webflow, or any website. (315 words)
- [Security in DevOps](/blog/implementing-nuclei-into-your-gitlab-ci-cd-pipeline-for-scanning-live-web-applications.html): Security is a fundamental requirement for businesses of all sizes. In recent years, DevOps has evolved into DevSecOps, which emphasizes the integration of security at every stage of the development process. As previously discussed, it is critical to incorporate security into the DevOps cycle to detect and mitigate potential security risks early on. This approach enables organizations to identify and address security vulnerabilities and misconfigurations before they escalate into significant issu (1,764 words)
- [The Hidden Threat: Malware-Stolen Credentials](/blog/leaked-credential-monitoring/index.html): Imagine discovering that your company's login credentials are sitting in plain sight on the internet, accessible to anyone who knows where to look. Unfortunately, this isn't hypothetical – it's happening right now to organizations worldwide through malware-stolen credentials.


The Hidden Threat: Malware-Stolen Credentials

Every day, cybercriminals deploy malicious software that quietly steals passwords from infected computers. These "stealer" programs harvest credentials from browsers and appl (922 words)
- [Making cybersecurity accessible, simple, and community driven.](/about-us/index.html): Making cybersecurity accessible, simple, and community driven. We are a small remote-first company with a diverse set of team members., Create enchanting WebGL effects, motion, and interactivity — in minutes, not hours. Unicorn Studio makes WebGL easy for designers to embed in Framer, Webflow, or any website. (298 words)
- [Software has changed faster than the security model designed to protect it.](/blog/new-report-state-of-appsec-2026-security-at-engineering-speed.html): In 2026, most organizations aren’t shipping “applications” so much as they’re shipping continuous change; across APIs and services, infrastructure and configuration, identity and permissions, feature flags, and AI-assisted code. (1,076 words)
- [Intro](/blog/open-by-design-trusted-by-enterprises-how-we-keep-nuclei-templates-reliable-at-scale.html): At ProjectDiscovery, our greatest strength is our community. Thousands of security researchers, bug bounty hunters, and vulnerability analysts who identify zero‑day vulnerabilities, trending CVEs, and actively exploited vulnerabilities (including those listed in CISA KEV). (1,222 words)
- [Neo v. DIY: The gap between a single finding and a mature security program](/blog/index.html): Discover stories, research, and the latest updates from the ProjectDiscovery team on our official blog., Create enchanting WebGL effects, motion, and interactivity — in minutes, not hours. Unicorn Studio makes WebGL easy for designers to embed in Framer, Webflow, or any website. (1,606 words)
- [Resource hub](/resources/index.html): Explore ProjectDiscovery's library of blogs, whitepapers, webinars, events, and reports on vulnerability management and AppSec., Create enchanting WebGL effects, motion, and interactivity — in minutes, not hours. Unicorn Studio makes WebGL easy for designers to embed in Framer, Webflow, or any website., Create enchanting WebGL effects, motion, and interactivity — in minutes, not hours. Unicorn Studio makes WebGL easy for designers to embed in Framer, Webflow, or any website. (786 words)
- [Welcome to a 5 part series on Recon with ProjectDiscovery!](/blog/recon-series-2/index.html): Welcome to a 5 part series on Recon with ProjectDiscovery! * Part 1 * Part 2 * Part 3 * Part 4 * Part 5 *

Subdomain enumeration is an essential reconnaissance technique in the fields of penetration testing and bug bounty hunting. In this part of our series on reconnaissance, we will explore the importance of this technique, how it works, and which tools can be used to conduct subdomain enumeration. We will also discuss best practices and common pitfalls to avoid when performing this type of rec (884 words)
- [Pentest every pull request before it ships](/solutions/pr-security-review/index.html): Every PR gets pentested before it ships. Neo combines code analysis, AI reasoning, and runtime exploitation to post verified proof directly in your pull requests., Create enchanting WebGL effects, motion, and interactivity — in minutes, not hours. Unicorn Studio makes WebGL easy for designers to embed in Framer, Webflow, or any website., Create enchanting WebGL effects, motion, and interactivity — in minutes, not hours. Unicorn Studio makes WebGL easy for designers to embed in Framer, Webflow, or any website. (561 words)
- [Your Questions, answered live](/blog/neo-vs-diy/index.html): In our latest webinar, our Founding Solutions Engineer, Davis Franklin, addressed the massive gap between finding a vulnerability with an LLM and running a mature security program. That gap is what Neo is built to close.

With the release of Opus 4.6 and the announcement of Mythos, the question we hear constantly has gotten louder: Can I just build this with Claude Code? The short answer is yes. You can spin up a working PoC in about half an hour, find a real vulnerability, and feel genuinely co (1,426 words)
- [Democratizing Security, One Contribution at a Time](/blog/announcing-the-projectdiscovery-oss-bounty-program/index.html): Democratizing Security, One Contribution at a Time

Today, we're excited to announce the launch of the ProjectDiscovery OSS Bounty Program, a new initiative to reward meaningful contributions to our open-source security tools.


The Vision

At ProjectDiscovery, we've always believed that security should be accessible to everyone. Our tools are used by researchers, defenders, and builders worldwide. From Fortune 500 security teams to independent bug bounty hunters, from government agencies to ope (919 words)
- [Pentesting that gets smarter with every run](/solutions/ai-pentesting/index.html): Pentesting that proves exploitability, retests your fixes, and gets sharper with every engagement. Your security posture compounds instead of resetting., Create enchanting WebGL effects, motion, and interactivity — in minutes, not hours. Unicorn Studio makes WebGL easy for designers to embed in Framer, Webflow, or any website., Create enchanting WebGL effects, motion, and interactivity — in minutes, not hours. Unicorn Studio makes WebGL easy for designers to embed in Framer, Webflow, or any website. (422 words)
- [Introduction](/blog/surfacing-the-real-attack-surface-advances-in-asset-discovery.html): Introduction

Accurate external asset discovery remains a moving target for security teams at scale. What’s actually exposed is hard to pin down, regardless of how many inventories or spreadsheets an organization maintains. Release cycles move faster, new domains and endpoints are added constantly, and the attack surface continues to shift, leaving static processes and visibility tools struggling to keep up.

Traditional discovery tools are effective at identifying well-known or easily indexed a (676 words)
- [Democratize security](/community/index.html): Our community is a space for security engineers and developers to learn how to manage vulnerability workflows faster and better., Create enchanting WebGL effects, motion, and interactivity — in minutes, not hours. Unicorn Studio makes WebGL easy for designers to embed in Framer, Webflow, or any website. (547 words)
- [Exposure analysis for your real attack surface](/solutions/exposure-analysis/index.html): Continuous exposure analysis for your real attack surface. Neo discovers what's exposed, tracks changes, and makes findings actionable with evidence and ownership routing., Create enchanting WebGL effects, motion, and interactivity — in minutes, not hours. Unicorn Studio makes WebGL easy for designers to embed in Framer, Webflow, or any website., Create enchanting WebGL effects, motion, and interactivity — in minutes, not hours. Unicorn Studio makes WebGL easy for designers to embed in Framer, Webflow, or any website. (422 words)
- [Scale security services without scaling manual work](/use-cases/neo-for-mssps/index.html): Neo helps MSSPs deliver continuous attack surface monitoring and vulnerability management at scale across all client environments., Create enchanting WebGL effects, motion, and interactivity — in minutes, not hours. Unicorn Studio makes WebGL easy for designers to embed in Framer, Webflow, or any website. (532 words)
- [Build living threat models from design to deployment](/solutions/threat-modeling/index.html): Build living threat models from design to deployment. Neo learns your architecture, keeps threat models current as your system evolves, and validates threats at runtime., Create enchanting WebGL effects, motion, and interactivity — in minutes, not hours. Unicorn Studio makes WebGL easy for designers to embed in Framer, Webflow, or any website., Create enchanting WebGL effects, motion, and interactivity — in minutes, not hours. Unicorn Studio makes WebGL easy for designers to embed in Framer, Webflow, or any website. (334 words)
- [The 2026 State of Attack Surface Management](/whitepapers/attack-surface-management-2025/index.html): Download the 2026 State of Attack Surface Management report. Discover why legacy ASM tools fail against machine-speed AI attacks and what defenders must do next. (336 words)
- [Neo: AI Security Engineer Overview](/blog/introducing-neo/index.html): Neo is a cloud-based AI security engineer that works alongside your team and takes on real security tasks like a true co-engineer. As it operates, it continuously learns your systems and processes, improving over time just like an engineer ramping up on your team.

Neo is built as a framework, not as a black box. It combines the reasoning of large language models with purpose-built execution tools, isolated sandboxes, a memory layer that learns your code, architecture and naming, and deep integr (1,694 words)
- [Try Neo at RSAC 2026](/events/rsac-2026/index.html): Join ProjectDiscovery at RSAC 2026 to experience Neo in action. Discover live demos, real workflows, and how to uncover and fix exposures at scale. (232 words)
- [Interactsh v1.0.0 Overview](/blog/interactsh-v1/index.html): Interactsh v1.0.0 brings more stability, new protocols support, and a slew of other improvements and security fixes.


Server Pool Support + random selection

With new vulnerabilities being released recently which relied on DNS interactions (log4j), interactsh servers started receiving lot more load from nuclei scans than they could withstand.

With the new interactsh release, the client has been modified to support a list of interactsh servers from which a server is randomly selected for use. T (421 words)
- [Authors](/blog/projectdiscovery-v1-3-new-navigation-dashboard-and-improvements.html): We're excited to announce ProjectDiscovery v1.3.0, a significant milestone that transforms how security teams discover, analyze, and respond to vulnerabilities across their attack surface.

These improvements represent months of engineering effort informed by our community's feedback and real-world deployment scenarios. We can’t wait for security teams to get their hands on v1.3.0 and put these new capabilities to work in their own environments.

Redesigned for Speed and Clarity

The new v1.3.0  (402 words)
- [State of AppSec 2026: Security at Engineering Speed](/whitepapers/application-security-report-2026/index.html): AI accelerated delivery. AppSec architecture didn't. Download the State of AppSec 2026 report to learn why scan-and-report hit a ceiling; and what comes next. (315 words)
- [Vulnerability remediation   that actually closes](/solutions/vulnerability-remediation/index.html): Vulnerability and remediation tracking that actually closes. Neo turns findings into evidence-backed tickets, retests fixes automatically, and keeps risk trending down., Create enchanting WebGL effects, motion, and interactivity — in minutes, not hours. Unicorn Studio makes WebGL easy for designers to embed in Framer, Webflow, or any website., Create enchanting WebGL effects, motion, and interactivity — in minutes, not hours. Unicorn Studio makes WebGL easy for designers to embed in Framer, Webflow, or any website. (226 words)
- [Connect with our team](/request-demo/index.html): Request a demo to learn more about ProjectDiscovery and how it can help your organization. (122 words)
- [Your pentest report is outdated.   Neo can replace it](/webinars/continuous-pentesting-verified-proof/index.html): See how Neo continuously combines code understanding and runtime exploitation to find business logic flaws, complex IDORs, and auth bypasses that black-box tools miss. (197 words)
- [Can't we do this with Claude Code?](/webinars/neo-vs-claude-code/index.html): Tune in to watch Neo go head-to-head with Claude Code on the same codebase, live, to settle the debate every security team is having about what AI can actually do beyond static analysis. (155 words)
- [ProjectDiscovery Categories](/blog/categories/index.html): Explore a variety of categories featuring stories, research, and updates from the ProjectDiscovery team on our official blog. (168 words)
- [Contact us](/contact/index.html): Fill out the form below or reach out to us on social media. We are here to help you with any questions you may have., Create enchanting WebGL effects, motion, and interactivity — in minutes, not hours. Unicorn Studio makes WebGL easy for designers to embed in Framer, Webflow, or any website. (50 words)
- [Hardly Strictly Security](/hardly-strictly-security/2024/hardening-your-perimeter-with-open-source-tooling/index.html): In this session, we will explore practical methods for improving your organization's security using open source tools. Learn how to map your attack surface, discover domains and subdomains, and identify potential vulnerabilities. We'll showcase the power of nuclei, a favored tool among security experts, for mapping technologies and detecting common misconfigurations. Discover how custom scripts and nuclei can be used for regression testing, and why this approach is essential for maintaining a strong security posture. By the end of this presentation, you'll have a clear understanding of how open source tools can help assess and enhance your company's security., Create enchanting WebGL effects, motion, and interactivity — in minutes, not hours. Unicorn Studio makes WebGL easy for designers to embed in Framer, Webflow, or any website. (153 words)

## Resources

- [Full Page Index](/index.html): Browse all cached pages with rich metadata
- [About This Cache](/content/about.html): Methodology, technical details, and usage guidelines
- [XML Sitemap](/content/sitemap.xml): Machine-readable sitemap for crawler discovery
- [Robots.txt](/content/robots.txt): Crawler directives