Automatically generate templates for incoming reports and trigger scans based on the rules.

Planned

Integration

Bug Bounty Platform Integration (HackerOne, BugCrowd, Intigriti)

hidden

Self-managed Hosting (on prem)

UI/UX

Light Mode

Streamline vulnerability templates to scan common cloud providers e.g. AWS, GCP, Azure, HashiCorp, etc to detect critical misconfigurations and policies.

Cloud Misconfigurations

Audit Logs (App)

PDCP is designed to work best with Chromium-based browsers, but we want to be able to support other browsers like Safari and Firefox.

Additional Browser Support

Today, we use standard technologies like wappalzer to do technology detection on assets, but we also have a whole library of nuclei templates that do expanded technology detection. We will add these templates to help enhance technology detection.

Asset Management

Expanded technology detection

Allow users to schedule scans using their local installation of nuclei, sync-ing both the schedule of scans and results between your local nuclei and ProjectDiscovery Cloud Platform

Scanning

Schedule Local Scans & Two-way Nuclei Scan

Alert users when new assets are detected. Alerts should be sent via webhook, integrations, and email, providing timely notifications to users about new asset discoveries.

Asset Alerting for New Asset Detection

Hi,Is there any ways of doing negative search? For example, I want to remove results with a specific technology. (ex: Imperva). I’ve tried the AI, but couldn’t filter properly. It filters out only the one with just “Imperva” as technology but leaves the ones with Imperva and more technologies.Thanks.

Negative search

Enhance asset management by introducing the capability to add tags. This allows for efficient filtering and tracking of information such as:• Production and staging environments• Team ownership• Other internal tracking details

In Progress

Asset Tagging/Labeling

Trigger scans based on the conditions of new templates and newly found assets.Also allow users to subscribe to alerts (slack, email) for newly discovered assets

Conditional Scans & New Asset scans

Discover and scan assets inside your perimeter that aren’t internet facing by connecting your networks via a secure tunnel to PDCP, allowing for scanned, scalable vulnerability scanning for internal assets and networks.

Internal Scanning

Enhance the technology detection capabilities by utilizing targeted nuclei templates. This approach will improve our ability to accurately identify and analyze the technologies present on various targets and assets. By leveraging these specialized templates, we can ensure a more precise and comprehensive detection process, enabling us to better understand the technological landscape of the discovered entities. This enhancement will not only increase the accuracy of our detection mechanisms but also streamline the process, making it more efficient and effective in identifying critical technologies.

Nuclei Enhanced Technology Detection

Automation vulnerability management &amp; regression testing by automatically updating the status of open vulnerabilities, which currently requires manual retests, and adding automatic regression testing. This enhancement will improve efficiency and reduce manual effort for ongoing vulnerability tracking and testing.

Security Regression Testing

Ability to update the status of vulnerabilities for connected JIRA tickets

Bidirectional JIRA Integration

Early access to the templates before they are released in public repository. This gives an immediate scanning capabilities as new templates are merged or written.

Completed

Early templates

Ability to manage discovered assets with the context of their tech, endpoints associated vulnerabilities, labels, etc

The Technology Intelligence feature enhances asset management by providing a comprehensive overview of all technologies running across discovered and enriched assets. This feature eliminates the need to search technologies within each individual asset, allowing users to search and filter for technologies across all assets simultaneously. This streamlines workflows and improves efficiency in managing infrastructure.

Technology Intelligence

Ability to view the raw logs of scan results e.g. match status of a template on a given target with timestamp, errors if any, status of template. (match or not matched)

Scan logs

Asset Discovery

14-Day Free Trial

Support API schemas e.g. OpenAPI to automatically generate templates to run API specific fuzzing, misconfiguration and authorization related vulnerabilities.

API Security

Templates Leaderboard

Connect with cloud services (e.g. AWS, GCP, Cloudflare, Vercel, etc) to continuously monitor what developers are deploying on the internet. This data will be used as a source pipeline for the vulnerability detections.

Discover Cloud Assets

Export (CSV, JSON, PDF)

ServiceNow Integration

See how your organization is:<ul><li>Seeing active vulnerabilities over time</li><li>Remediation pace</li><li>Ratio of exposed vulnerabilities</li><li>See breakdown of risk</li></ul>

Executive Reporting

Integrate Vercel as an addition Cloud Service for importing assets from Vercel endpoints and preview deploys<a target="_blank" rel="noopener noreferrer nofollow" class="link" href="https://github.com/projectdiscovery/cloudlist/issues/566">https://github.com/projectdiscovery/cloudlist/issues/566</a>

Vercel Integration

Be able to see details of an asset, historical information, vulnerability correlation, and other metadata about a given asset.

Asset View

Enable users and their team members to onboard successfully to the platform and understand how they can get value out of their time there.