TESIGN
SAVED

EN · KO

  1. TESIGN / RADAR
  2. 2026.09.21
  3. Nuclei

Nuclei

Scan your servers for known weak spots

WHO USES ITPeople running their own servers, security reviewers, and teams automating a pre-release check.

Install to use

A fast vulnerability scanner driven by simple, readable YAML templates.

★ 31.2k▲ +10 / 7dDaily star increases over 14 days. Hollow bars mean no data. The last day may be partial.2026-09-08 no data2026-09-09 no data2026-09-10 no data2026-09-11 no data2026-09-12 +22026-09-13 no data2026-09-14 +22026-09-15 +32026-09-16 +52026-09-17 no data2026-09-18 no data2026-09-19 no data2026-09-20 no data2026-09-21 no datalargest one-day increase in the 14 days+5last 14 days · stars per dayhollow = no data

31,225 stars · checked on GitHub GitHub check 127 h late · incl. +5 observed via GH Archive since then · 7-day +10 observed via GH Archive (as of )

RANKS All-time #236 SECURITY #2

An example Nuclei template: the check’s name, severity, description and CVSS score, with the actual HTTP request written out in YAML.
An example Nuclei template: the check’s name, severity, description and CVSS score, with the actual HTTP request written out in YAML.

TESIGN TAKE

Because a template is readable, you can check what a rule actually looks at and change it — which is what makes a scanner worth trusting.

INSTALL

AT A GLANCE

LICENSE
MIT
USAGE
Use, change and redistribute, commercially too. Keep the notice.
LANGUAGE
Go
PLATFORM
cli
ACTIVITY
last commit 5 days ago () · latest release [unconfirmed]
COMMUNITY
contributors [unconfirmed] · open issues [unconfirmed] · made by: [unconfirmed] Reference time unavailable
SOURCES
GitHub
OPEN SOURCE
YES
FIRST SEEN
CATEGORY
SECURITY · DEV TOOLS

A summary, not legal advice.

WHY IT MATTERS

A security check is only worth as much as the record of what it checked. Nuclei writes each check as one readable YAML template and verifies it by sending the real request, so findings carry their evidence and false positives stay low — with thousands of community templates to draw on.

BUILD FROM THIS

  • A Go CLI covering HTTP, TCP, DNS, SSL, WHOIS, JavaScript and more, clustering requests to scan fast in parallel. It fits into CI as a regression check and reports into Jira, Splunk, GitHub, Elastic or GitLab. The documentation includes Korean.

WHO IT'S FOR

People running their own servers, security reviewers, and teams automating a pre-release check.

START IN 5 MINUTES

# Install it and run it first against one address you administer.

CAVEATS

  • Only scan what you are authorised to scan — probing someone else’s server without permission is illegal. Beyond the free CLI there are paid Pro and Enterprise editions.

RECEIPT

FIRST SEEN
AT SOURCE
KEPT
CREATED → FIRST SEEN
2356d
WHEN FIRST SEEN
31,220 ★
SOURCES
GitHub

The same facts in machine-readable form — View as Markdown · JSON

SIMILAR TOOLS

Up to five from SECURITY by ★ total: edited entries first, then repository cards; this entry is highlighted. Drawn from the same stored snapshot as the rankings — a comparison, not a recommendation.

IMAGENAME★ TOTAL▲ 7dLICENSEPLATFORMLAST PUSH
The repository's own benchmark leaderboard: F1, precision, recall, time and tokens per model and review tool, in a dark table.
open-code-reviewAI code review for developers★ 37.5k▲ +1,252Apache-2.0permissivewindows · macos · linux · cli
An example Nuclei template: the check’s name, severity, description and CVSS score, with the actual HTTP request written out in YAML.
NucleiScan your servers for known weak spotsTHIS ENTRY★ 31.2k▲ +10MITpermissivecli
ente/enteCARD★ 28.9k▲ +5AGPL-3.0copyleft—
deskflow/deskflowCARD★ 28.8k—GPL-2.0copyleft—
zhishile/codex-auth-helperCARD★ 14.8k▲ +51Licence unconfirmedunconfirmed—

ALSO WORTH SEEING

outloudCheck if a PDF reads correctly aloudThe outloud window: findings on the left, the marked-up PDF page in the middle, and the screen-reader reading order on the right.Install to use
★ 7▲ 3 HN
A PDF accessibility checker that shows what a screen reader would actually say.ApeeyeSpin up mock REST endpoints fastThe Apeeye home screen: "Fake APIs. Real endpoints.", a button to open the Playground, and a row showing the workspace URL to copy.Use in the browser
★ 7▲ 2 HN
Mock REST endpoints in seconds — no login, no config, no database.AlidadeBuild and style maps in the browserThe Alidade editor: a camera and terrain panel on the left, and 3D mountainous terrain rendered under a night sky on the right.Use in the browser
★ 13▲ 2 HN
An open Web-GIS: drop in spatial data, style it, and fly over 3D terrain in the browser.txcriptContinue an AI session in another toolA terminal running txcript: the install finishes, then a continue command carries a session into another agent.Install to use
★ 125▲ +5 / 7d
Move an AI coding session from one agent to another and carry on where you left off.

TIMELINE

  1. Repository created
  2. FIRST SEEN BY TESIGN
  3. Published on TESIGN

SAME DAY

  1. 01

    Ruffle

    Play old Flash files again

    A Flash Player emulator that runs old SWF games and animations in today’s browser.

    Use in the browser
    ★ 18.6k▲ +5 / 7d
  2. 02

    SuperSplat

    Edit 3D Gaussian splats in a browser

    A browser editor for inspecting, cleaning up and publishing 3D Gaussian Splats.

    Use in the browser
    ★ 10.1k▲ +7 / 7d
  3. 03

    Acode

    Write and run code on an Android phone

    A code editor for Android with a built-in Linux terminal and instant preview.

    Install to use
    ★ 7k▲ +8 / 7d
  4. 04

    Monica

    Keep passwords on your own device

    A local-first password vault for Android that also holds your 2FA codes.

    Install to use
    ★ 1k▲ +6 / 7d
  5. 05

    miu

    Open very large text files fast

    A minimal text editor that opens very large files instantly and draws colour emoji.

    Install to use
    ★ 151▲ +6 / 7d
  6. 06

    Blurt

    Dictate into any Mac app

    Hold a key, talk, and polished text lands wherever you are typing on your Mac.

    Install to use
    ★ 30▲ +6 / 7d
  7. 07

    Inspo

    Give a coding agent design references

    A library of real production websites your coding agent can study before it writes UI.

    Install to use
    ★ 157▲ +26 / 7d
  8. 08

    Promptfoo

    Test what your AI app actually answers

    Test and compare what your prompts, agents and RAG apps actually answer.

    Install to use
    ★ 25.2k▲ +5 / 7d
  9. 10

    OpenSchool

    Run a school’s records in one system

    An open school platform: records, attendance, timetables, marks and reports in one place.

    Self-host
    ★ 26▲ +8 / 7d