ProjectDiscovery Stories

Enhancing Asset Discovery: ProjectDiscovery Cloud Platform (v0.8.8)

We're excited to announce the release of version 0.8.8 of the ProjectDiscovery Cloud Platform. This update brings significant enhancements to our asset discovery capabilities, introduces new features for Basic Tier (Free) users, and resolves several critical issues. Our primary focus remains on improving the visibility and analysis of discovered assets and refining the insights available to our users. Empowering Basic Tier (Free) Users Our mission at ProjectDiscovery is to make advanced secur

Vulnerability Management

June 2024 Newsletter

Welcome to the June edition of the ProjectDiscovery Community Newsletter. We’re well into the summer months now, but our team are still hard at work adding improvements and new features to our powerful suite of tools. Some important updates have been made to several of our tools this month, as well as an exciting release for Nuclei Templates related to Kubernetes environments! We also celebrated the very first of our monthly developer livestreams. With a great audience turnout and some interes

Announcements

Kubernetes Cluster Security - Nuclei Templates v9.9.0 🎉

We're excited to tell you about Nuclei Templates release v9.9.0! This new version includes newly added Kubernetes Cluster Security templates. In this blog post, we'll discuss automating Kubernetes security review, creating custom k8s security checks, and sharing results on the PDCP Cloud for review. Kubernetes is often discussed for its complexity and steep learning curve. Its challenging nature has made it a frequent topic for memes in the developer community Hence, we've opted to simplify th

Nuclei & Templates

ProjectDiscovery achieves SOC 2 Type 2 Certification

We are excited to announce that ProjectDiscovery Inc. has successfully achieved SOC 2 Type 2 certification, in accordance with the American Institute of Certified Public Accountants (AICPA) standards for SOC 2 for Service Organizations, also known as SSAE 18. This certification serves as external validation, confirming that ProjectDiscovery Inc. ensures enterprise-level security regarding customer data within ProjectDiscovery Cloud Platform (PDCP). This is a noteworthy stage for our team; it a

Enhanced Team Management, 2FA, and Asset Filtering - PDCP (v0.8.7)

We are pleased to unveil our latest release of ProjectDiscovey Cloud Platform, v0.8.7, packed with features that streamline team management, enhance security, and improve asset operations—particularly for enterprise security engineers. Read on to learn what's new. Multi-Team Creation & Member Segregation We've introduced the ability to create multiple teams, providing greater flexibility and control over project management. Create multiple teams Segment users and teams, centralize b

Announcements

May 2024 Newsletter

Welcome to the May edition of the ProjectDiscovery Community Newsletter. With Summer fast approaching, the PD team has already been heating up with work behind the scenes - especially when it comes to building out our cloud platform. This month we’ve released a few tool updates and fixes, had some amazing contributions to our templates from the community, and seen ourselves featured in articles and videos across the web. Read on to discover more about what we’ve been up to over the last few we

Announcements

Understand the cloud security attack surface

The cloud is large and everywhere and presents a nearly irresistible attack surface to those looking for a way in. Much has been written broadly about cloud security (including lots of books) and with good reason: It’s impossible to pursue organizational security without coming to terms with what’s going on in the cloud. But the concept of “cloud security” is rather like a shapeshifter, with different meanings, implementations, and outcomes depending on the organizational culture. Here’s our (v

What is vulnerability management? And how can ProjectDiscovery help?

If top notch cybersecurity is the goal, effective vulnerability management can help a company get there. Don’t believe us? Then take the word of the US Cybersecurity & Infrastructure Security Agency (CISA): It is reasonable to say that vulnerability management is central to cyber resilience. In this post we’re we want to help you with a better understanding around vulnerability management including how it works, the key best practices, and how ProjectDiscovery should be part of your solution.

What is attack surface management?

It’s 2024, and by now it’s clear that nearly everything can be the object of a cyber attack. But knowing that doesn’t mean organizations are strategically managing and controlling their risks. In fact, a survey of over 6200 security decision makers from Trend Micro and Sapio Research found 73% described their attack surface as “constantly evolving and messy” while 43% said it’s simply “out of control.” Enter attack surface management (ASM), a systematic way for companies to find, track, and man

Hardly Strictly Security: An Event Recap

Insightful talks from 21 speakers spread across 5 countries, representing 19 different companies. 6 live speaker roundtable discussions - some led by our very own PD developers - covering exciting topics and thought leadership in the world of cybersecurity, not to mention the perfect place for attendees to have their questions answered live. And, of course, the excitement of our very own growing community coming together to share their experiences as we hosted the first and only open source cybe

Hacking Apple - SQL Injection to Remote Code Execution

Introduction In our last blog post, we delved into the inner workings of Lucee and took a look at the source code of Masa/Mura CMS, and the vastness of the potential attack surface struck us. It became evident that investing time in understanding the code could pay off. After dedicating a week to our exploration, we stumbled upon several entry points for exploitation, including a critical SQL injection flaw that we were able to exploit within Apple's Book Travel portal. In this blog post, we a

Vulnerability Research Nuclei & Templates

April 2024 Newsletter

Welcome to the April edition of the ProjectDiscovery Community Newsletter. Spring is already in full swing, and with the season of new growth comes plenty of new updates from the PD team. This month has seen exciting additions to Nuclei and its templates, as well as our first ever virtual live event, Hardly Strictly Security, where some of the most important minds in the field of cybersecurity gathered to not only give insightful talks, but interact with our community and answer burning questio

Announcements

ProjectDiscovery Stories

Enhancing Asset Discovery: ProjectDiscovery Cloud Platform (v0.8.8)

June 2024 Newsletter

Kubernetes Cluster Security - Nuclei Templates v9.9.0 🎉

ProjectDiscovery achieves SOC 2 Type 2 Certification

Enhanced Team Management, 2FA, and Asset Filtering - PDCP (v0.8.7)

May 2024 Newsletter

Understand the cloud security attack surface

What is vulnerability management? And how can ProjectDiscovery help?

What is attack surface management?

Hardly Strictly Security: An Event Recap

Hacking Apple - SQL Injection to Remote Code Execution

April 2024 Newsletter

Monitor your infrastructure

Talk to sales

Platform

Open Source

Resources

Company