Sign in

ProjectDiscovery

@projectdiscovery.bsky.social
51 followers 20 following 178 posts

Detect real, exploitable vulnerabilities. Harness the power of Nuclei for fast and accurate findings without false positives.

PostsRepliesMedia
ProjectDiscovery @projectdiscovery.bsky.social · 15/09/2026
Factorial's cloud footprint grew faster than their security team could track by hand. Neo now scans their full external surface daily, and their researchers spend time on novel findings instead of toil. New case study on how they got there → bit.ly/3SQydqq
000
ProjectDiscovery @projectdiscovery.bsky.social · 03/09/2026
Confirmed findings with a working proof of concept. That's what a good night's rest looks like for Emma Sleep's security team 😴
000
ProjectDiscovery @projectdiscovery.bsky.social · 31/08/2026
Benchmark scores are a false flag. We ran open and closed models against 54 black-box web targets with no hints or source code, then read every run by hand. We'll uncover findings live on Tuesday, September 8th at 10 AM PT / 1 PM ET. Register: bit.ly/3SCK6QC
000
ProjectDiscovery @projectdiscovery.bsky.social · 06/08/2026
Nuclei, httpx, and subfinder got you this far. Neo takes it further, same tools, same team, running at scale. For the hackers of the world. Try it yourself → neo.projectdiscovery.io/sign-up
000
ProjectDiscovery @projectdiscovery.bsky.social · 27/07/2026
Pipe your dependency list into depx before you run install. One shortlist, one command, a verdict on every package across npm, PyPI, Go, Cargo, and RubyGems in a single pass.
110
ProjectDiscovery @projectdiscovery.bsky.social · 25/07/2026
Neo reduces false positives by 90% and outperforms traditional scanners in speed, accuracy, and context awareness making it a much better choice over traditional tools. Try Neo → projectdiscovery.io/request-demo Check out the full video → www.youtube.com/watch?v=RsR7pPMDLEE
000
ProjectDiscovery @projectdiscovery.bsky.social · 23/07/2026
Check out our latest tool, depx! Seven days of malicious packages, pulled straight from OpenSSF's database and a live feed refreshed hourly. One command replaces manual advisory tracking. You see a compromised package the day it's flagged, not after it's already in a lockfile.
100
ProjectDiscovery @projectdiscovery.bsky.social · 22/07/2026
For Neo, we built a pipeline where multiple agents constantly test your attack surface. If an assessment comes up empty or hits a false positive, the loop automatically re-triggers to dig deeper. The results are incredible. projectdiscovery.io/request-demo youtu.be/RsR7pPMDLEE
000
ProjectDiscovery @projectdiscovery.bsky.social · 21/07/2026
Developing Neo from a single prototype into a multi-agent system taught us six core engineering truths: 1. Start with one agent. You learn the domain faster. Neo’s early months on a single sandbox agent taught us which tools and workflows mattered before we paid the "coordination tax."
100
ProjectDiscovery @projectdiscovery.bsky.social · 20/07/2026
Vegas is where we put Neo in front of the people who've shaped our work for years. We'll be at BSidesLV, Black Hat, and DEF CON Aug 2-7. 🤖 Booth 5108, AI Zone, Black Hat 📣 Two research talks, BSidesLV + DEF CON 🪩 NoiseFest with GreyNoise Thursday night Schedule: bit.ly/4vu4mkB
000
ProjectDiscovery @projectdiscovery.bsky.social · 17/07/2026
How accelerated exploitation HELPS⚡  The quicker you realize that your system is vulnerable (and can be exploited), the quicker you’ll be able to react and fix it. Our CEO shares exactly how we help companies detect vulnerabilities faster. Watch the full interview → youtu.be/798Sy04FM6c
000
ProjectDiscovery @projectdiscovery.bsky.social · 17/07/2026
If you've used an AI agent for recon or vulnerability scanning, there's a good chance LLMs ran our tools in the background. Neo is the harness we’ve built around LLMs and the tools you know and love. See it live at booth 5108, AI Zone, Black Hat. Save your spot with our team: bit.ly/4vu4mkB
100
ProjectDiscovery @projectdiscovery.bsky.social · 16/07/2026
You can build an AI security tool in a weekend. Getting it to prove findings are real at scale is the hard part. We wrote a breakdown of our research, including how prompt caching cut our own LLM costs by more than half. Check out our latest whitepaper to learn more: bit.ly/4bNNNcm
010
ProjectDiscovery @projectdiscovery.bsky.social · 15/07/2026
Exploitation speed has reached record highs, with the window between CVE announcement and attack shrinking from months to mere hours.
100
ProjectDiscovery @projectdiscovery.bsky.social · 04/07/2026
Neo as a Threat Hunter... We planted some test evidence of a compromise and asked Neo to check if the remote server is compromised, and it found it, along with more findings that we never considered👇
000
ProjectDiscovery @projectdiscovery.bsky.social · 26/06/2026
When we started building Neo, the product was a single agent with sandbox and a large toolset. Today, a typical task runs through optional planning, an Execution agent that delegates to parallel specialized subagents, and a verification loop that can re-run work before the user sees a final answer.
100
ProjectDiscovery @projectdiscovery.bsky.social · 24/06/2026
Building your own AI security tool feels easy until the bill arrives. Token burn climbs with every guarantee you add: validation, dedup, memory. June 30th we run the build vs. buy math live and take one finding from suspicion to verified. 10 AM PT / 1 PM ET → bit.ly/3SjaJcT
000
ProjectDiscovery @projectdiscovery.bsky.social · 24/06/2026
Why is Nuclei so popular? It's simple. Here’s our CEO, Rishi, elaborating on how Nuclei’s simplicity solves crucial exploitation problems Watch the full video → youtu.be/798Sy04FM6c?si=vZg59NBOajq…
000
ProjectDiscovery @projectdiscovery.bsky.social · 23/06/2026
SSH into your server with Neo to further your capabilities 👇 Neo can use remote connection and the commands will now run in the remote device instead of Neo sandbox.
010
ProjectDiscovery @projectdiscovery.bsky.social · 22/06/2026
Is there an existential threat to ProjectDiscovery? We aren’t buying into the AI "psychosis" or "apocalypse" narrative. Instead, our focus remains on ensuring we consistently deliver high value to the security community. Staying ahead means moving faster.
100
ProjectDiscovery @projectdiscovery.bsky.social · 28/05/2026
Stop drowning in massive vulnerability backlogs filled with false positives. Neo integrates with tracking programs like Jira, Linear or Slack to ingest findings and triage them by thinking like a real attacker. projectdiscovery.io/request-demo #Neo #AISecurityEngineer
000
ProjectDiscovery @projectdiscovery.bsky.social · 20/05/2026
Using Neo, you can perform granular tasks like attack surface mapping or vulnerability identification which leads to deeper, high-quality findings. projectdiscovery.io/request-demo
010
ProjectDiscovery @projectdiscovery.bsky.social · 19/05/2026
Tomorrow, our CEO and Founding SE are live from San Francisco. Nuclei's origin story, how Neo handles evals and long-running workflows, plus the practitioner questions we never have enough time to answer. ⏳ Grab your spot → 10 AM PT / 1 PM ET. Register: bit.ly/48ZQI0t
000
ProjectDiscovery @projectdiscovery.bsky.social · 13/05/2026
Nuclei started as a tool built to solve a problem we lived every day in security. It became the most widely used vulnerability scanner in the world. On May 20th, we're going live to talk about how that happened and where the industry is heading. 10 AM PT / 1 PM ET. bit.ly/48ZQI0t
011
ProjectDiscovery @projectdiscovery.bsky.social · 12/05/2026
ProjectDiscovery has been named to @NotableCap's Rising in Cyber 2026 — 30 companies, voted by 150 CISOs. Humbled to stand alongside this year's honorees and the alumni who came before us. To our community: this one's yours. 🧡 www.notablecap.com/risingincyber
000
ProjectDiscovery @projectdiscovery.bsky.social · 27/04/2026
We surveyed 200 security practitioners and found that 66% spend the majority of their week validating findings rather than fixing them. AI is shipping code faster. Security is not keeping up. Full report here: projectdiscovery.io/research/ai-...
000
ProjectDiscovery @projectdiscovery.bsky.social · 22/04/2026
New research. 200 cybersecurity practitioners. North America and Western Europe. All using AI-assisted coding. 100% say engineering is shipping faster. 49% credit AI-assisted coding. Only 38% feel their security team is keeping up. Full findings: projectdiscovery.io/research/ai-...
010
ProjectDiscovery @projectdiscovery.bsky.social · 08/04/2026
Everyone in security is asking, "Can't we just use Claude Code?" We tried so you don't have to. Join us April 16th at 1 PM EST to see where the execution gap shows up, and what it takes to close it. Register 👉 bit.ly/4cm1QFQ
000
ProjectDiscovery @projectdiscovery.bsky.social · 03/04/2026
Last month, we shipped: ▪️ Prompt Library with public, private, and team-scoped prompts ▪️ A community Showcase of popular security tasks ▪️ BYOK model gateway for Anthropic, OpenAI, Google, xAI, and Openrouter ▪️ New model support ▪️ Runtime skills discovery Try Neo here: bit.ly/4bZfhuO
000
ProjectDiscovery @projectdiscovery.bsky.social · 11/03/2026
We benchmarked Neo, Claude Code, Invicti, and Snyk against 3 AI-generated apps (banking, healthcare, insurance) — 74 confirmed vulns total. Full walkthroughs, results + open-source benchmark data 👇 projectdiscovery.io/blog/inside-...
000
ProjectDiscovery @projectdiscovery.bsky.social · 05/03/2026
This is absolutely insane. The prompt: "Set up a lab for Log4Shell at localhost:8080 and find all nuclei templates for this vulnerability. Use OAST detection to demonstrate the JNDI injection exploit with live callback verification." Sign up for Neo today 👇 projectdiscovery.io/request-demo
010
ProjectDiscovery @projectdiscovery.bsky.social · 01/03/2026
Neo Security Engineer is like having a pro hacker in your pocket. Just ask it what you want, it will download and use the necessary tools to achieve it. In this video, I just asked Neo to find all subdomains and check which are live. And, it did.
010
ProjectDiscovery @projectdiscovery.bsky.social · 23/02/2026
Did you know Subfinder has a "Deep Mode"? 🕵️‍♂️ By adding -recursive, you aren't just looking for subdomains; you're looking for subdomains of subdomains. Give it a try today!👇
010
ProjectDiscovery @projectdiscovery.bsky.social · 16/02/2026
Don't just find subdomains, find out where they came from. Use the -cs flag to identify the specific source behind every lead and prioritize your targets.👇
000
ProjectDiscovery @projectdiscovery.bsky.social · 06/02/2026
We just leveled up Neo. Claude Opus 4.6 is officially here! Ready to build? projectdiscovery.io/request-demo
000
ProjectDiscovery @projectdiscovery.bsky.social · 05/02/2026
Stop inspecting every active host manually. Let httpx automate visual checks and capture screenshots, enabling rapid review and deeper analysis at scale.
110
ProjectDiscovery @projectdiscovery.bsky.social · 04/02/2026
Ever feel like you're missing something when researching domains? 🌀 You might be! Private TLDs are often overlooked and #tldfinder will help you discover them! github.com/projectdiscovery/tldfind…
000
ProjectDiscovery @projectdiscovery.bsky.social · 02/02/2026
Tired of manually managing your security tools? Meet PDTM the tool that lets you install, update, and uninstall all your project discovery tools with a single command. ✅ Get started here: github.com/projectdiscovery/pdtm
000
ProjectDiscovery @projectdiscovery.bsky.social · 28/01/2026
🚀 The State of AppSec Report | Security at Engineering Speed is live: projectdiscovery.io/whitepapers/... Trying to improve AppSec without slowing dev teams down? This is for you: • trends shaping modern AppSec • what’s driving noise + delays • practical moves to improve adoption + remediation
000
ProjectDiscovery @projectdiscovery.bsky.social · 27/01/2026
Maximize your endpoint discovery by digging into JavaScript files. Using the -jc flag allows you to parse and crawl JS files to find hidden paths and APIs that standard crawls might miss Use this command👇 katana -jc -u target(.)com
010
ProjectDiscovery @projectdiscovery.bsky.social · 26/01/2026
Move beyond simple discovery. Pair Subfinder with httpx to instantly profile your attack surface by extracting tech stacks, status codes, and page titles at scale. Command👉 subfinder -d target(.)com | httpx -sc -td -title
011
ProjectDiscovery @projectdiscovery.bsky.social · 23/01/2026
Reply with your answer! 👇
000
ProjectDiscovery @projectdiscovery.bsky.social · 22/01/2026
ShuffleDNS is a fast Go tool for finding subdomains. It uses brute-force to identify valid targets and automatically filters out messy wildcard results Command👉 shuffledns -d example(.)com -list wordlist(.)txt -r resolvers(.)txt -r: Your list of DNS resolvers. -list: Your subdomain wordlist.
000
ProjectDiscovery @projectdiscovery.bsky.social · 20/01/2026
Stop just finding subdomains. Start finding endpoints. 🕸️ Recon doesn't end with a list of domains. By piping subfinder and httpx into katana, you can automatically crawl and map out the entire attack surface of a target in seconds.👇 #Recon #Katana #Subfinder
000
ProjectDiscovery @projectdiscovery.bsky.social · 19/01/2026
Security work doesn’t fit in a 15‑minute coding loop. Neo is an AI security copilot that plans + executes long‑running security tasks (recon, threat modeling, testing, triage) with real tools (browser, terminal, APIs.) See Neo in action: projectdiscovery.io
000
ProjectDiscovery @projectdiscovery.bsky.social · 03/01/2026
🌀Naabu + Nmap = Port scan faster and inspect deeper. Stop wasting time with slow, full-range scans! Scan a host for open ports and use Nmap to detect the service versions. Use this 👇 naabu -host projectdiscovery(.)io -nmap-cli ‘nmap -sV’ #naabu #hackwithautomation #portscan
010
ProjectDiscovery @projectdiscovery.bsky.social · 01/01/2026
Welcome, 2026! We look forward to building more great things with you in the new year! With AI-driven threats emerging as the major challenge, our focus is clear: to bring you the defense you'll need for cutting-edge Attack Surface Management. #HappyNewYear #Infosec #2026
000
ProjectDiscovery @projectdiscovery.bsky.social · 30/12/2025
For 2026, the next generation of Attack Surface Management isn't just about seeing more; it's about knowing what's real. Want to learn why your security strategy needs proof? ➡️ Get our latest report now: projectdiscovery.io/whitepapers/att…
000
ProjectDiscovery @projectdiscovery.bsky.social · 25/12/2025
🌀Happy Holidays to everyone in our community who is celebrating! We hope you all have a wonderful time recharging and connecting with loved ones. [+] Santa_v2025.zip 🎅 — The ProjectDiscovery Team
000
ProjectDiscovery @projectdiscovery.bsky.social · 21/12/2025
Need to isolate common ports on a single host? Use Naabu to target specific, common ports and save the results for your next step.👇
000