Stay ahead of every exploit

Exploit your own cloud, internal network, code, and endpoints first, so your team remediates faster and catches regressions.

Get StartedBook a demo
Built by the team behind
nucleisubfinderhttpx20+ open-source tools
Trusted by security teams
CommunityThe most-used offensive security stack on the internet.
100K+Security professionals
RSA Conference Innovation Sandbox Winner 2025Black Hat Startup Spotlight Winner 2025
Award winning
CISACentre for Cybersecurity BelgiumNSM, Norwegian National Security AuthorityCanadian Centre for Cyber Security
National cyber agencies

Stop wiring up scanners.
Run one connected security system.

Bugs a scanner never reaches

Agents authenticate like a real user, chain findings across code and runtime, and surface business-logic flaws no template can match.

Learn about AppSec testing
“This is the best security tool released in probably 10 years. Maybe longer. It’s Nessus, except transparent and automatable, and for AppSec as well.”
Daniel Miessler
Daniel Miessler
Author, Unsupervised Learning

See everything you own. External, internal and code, discovered continuously and connected in one living context.

Assets
Search assets…
12,480 assets
Exposed · 37No hostname · 57New this week · 214
s3://acme-support-uploads · public10.20.4.17 · no hostnamecheckout.acme.comacme/checkout
Grafanagrafana.ops.internal
Exposed

Ops dashboards for the payments stack, admin panel open to the internet without SSO.

Know what’s exploitable. Every finding replays against the live target and lands with proof, or not at all.

Issues
Triaging2
ISSUE-2048ML
Grafana admin reachable without SSO
High1,521Reasoning
ISSUE-2044AC
IDOR on invoice download for org members
Low340Reasoning
Validated3
ISSUE-2041PR
Race condition in coupon redemption
High2,122
ISSUE-2033SO
Password reset token reusable after use
Medium870
ISSUE-2027JP
Public S3 bucket serving support uploads
Low109
Fixed · Retesting3
ISSUE-2019ML
Team invite links valid after revocation
Medium1,120Retesting
ISSUE-2011SO
Session cookie missing SameSite on SSO
Low891Retesting
ISSUE-1998AC
Verification emails leak tenant names
Low64

Close the loop, not just the ticket. Every finding gets a pull request for the fix and a regression test.

IssuesRace condition in coupon redemption
Subscribed···
ISSUE-2041

Race condition in coupon redemption

Concurrent apply-coupon requests all pass the single-use check before any of them marks the code redeemed, so one code discounts the same order several times.

TitleRace condition in coupon redemption
SeverityHigh
AssigneePRPriya Raman
StatusValidated
Targetcheckout.acme.com/api/cart/apply-coupon
RegressionYes
First seen36 minutes ago
Last seenJust now
Evidence3 exchanges
Affected assets14
H-2H-1NowFixH+1
ActivityEvidenceAssets
  1. Vulnerability discovered

    Neo found a race in /api/cart/apply-coupon on checkout.acme.com during the scheduled scan: concurrent requests each read a single-use code as unused before the first redeem lands.

    checkout.acme.com·apply-coupon · 3 parallel requestsOpen
    1POST /api/cart/apply-coupon HTTP/2
    2{ "code": "WELCOME20", "cart_token": "ct_9f2…41a" } // sent ×3, same instant
    3
    4HTTP/2 200 OK
    5{ "applied": ["WELCOME20", "WELCOME20", "WELCOME20"] }
  2. Drafting a fix…

    Making the redeem an atomic compare-and-set on the coupon_codes row, and adding a regression test in acme/checkout that fires the request in parallel and expects one redemption. Opening a pull request.

Enterprise-grade controls. Scoped, logged, inside your own network, and reviewable after the fact.

Agent logs

Every action an agent takes is logged: queryable, filterable, and exportable to your SIEM.

VPC deployments

Run in our managed cloud, or a dedicated VPC with static egress IPs your team can allowlist.

Authenticated testing

Neo signs in like a real user with SSO and TOTP MFA, and tests every role.

Scope guardrails

Sandboxed runs stop at the edge of the boundary you draw.

Model controls

Choose which frontier models power your runs, or bring your own key.

Integration library

Fires on PRs, triages findings, routes them to Jira and Slack.

The Latest

Probably Not Exploitable

Probably Not Exploitable

The assumption we've all made If you've worked in security for any length of time, you've definitely turned to a colleague and said some version of "this probably isn't exploitable" and moved on. Usually late in the day, with a few dozen other findings waiting and a release going out in the morning. But nobody says it because they don't care. They say it because there are only so many man hours in the week, and the queue keeps refilling. We wanted to know how common that assumption really is,

Nov 10, 2026
Supply Chain Security Analysis of a 9.5M-Install VS Code Extension

Supply Chain Security Analysis of a 9.5M-Install VS Code Extension

Your code editor extensions auto-update and run with your privileges on the machine that holds your source code, your SSH keys, and your publishing credentials, but they rarely show up in a software bill of materials. Using Neo we audited one of the most popular ones, Markdown Preview Enhanced has roughly 9.5 million installs. The neo found five CVEs across two attack surfaces. A WaveDrom rendering bug turned an ordinary Markdown file into JavaScript execution inside the preview, then into arb

Aug 16, 2026
Watching Agents Work: A Behavioral Audit of Offensive-Security LLM Runs

Watching Agents Work: A Behavioral Audit of Offensive-Security LLM Runs

What closed and open models actually do when you tell them to hack a website Summary The cybersecurity capability of a model is currently measured by a solve rate, a percentage, and that number tells you almost nothing worth knowing. It doesn't tell you how the model behaved. It doesn't tell you what it is actually capable of, or where it is lacking, or how far it still is from doing the job end to end. And when you put an agent next to a human practitioner, the entire comparison collapses in

Aug 3, 2026
Oh My Rogue Agent

Oh My Rogue Agent

Yesterday, Hugging Face came out saying they'd detected an AI autonomous-agent-powered cyberattack and that they had to use open-source models to actually investigate and remediate it. Later we heard from OpenAI that their agent was responsible; it happened during an ExploitGym eval, and the agent just drifted off the goal. It escaped the sandbox, reached OpenAI Research Environment, got access to internet, and hacked Hugging Face production environment trying to find the solution for the benchm

Jul 22, 2026
Introducing Internal Network Scanning: see your network the way an attacker inside it would

Introducing Internal Network Scanning: see your network the way an attacker inside it would

Most breaches don't begin with a zero-day but with something ordinary like a forgotten server, an unmanaged network device, a service reachable across a segment that was supposed to be isolated. Internal scanning was supposed to catch exactly that but most scanners match a host's banner and version against a CVE list and flag everything potentially affected, so the few reachable exposures sit lost among thousands that were never exploitable. That noise is expensive now that the window to respon

Jul 21, 2026
Community Spotlight: Rishi (@rxerium)

Community Spotlight: Rishi (@rxerium)

“Open source isn’t about perfection; it’s about putting an idea forward and improving it together as a community.” Rishi (@rxerium) If you’ve spent any time in the Nuclei Templates repository, you’ve almost certainly run something Rishi engineered. With over 500 templates merged, picked up by the likes of the UK’s National Cyber Security Center (NCSC), California Cybersecurity Integration Center, CERT Polska, Spain’s national security agency, and many others, he’s one of the most prolific con

Jul 13, 2026
See more on the blog