Planned

In Progress

Completed

Main Roadmap

Self-managed Hosting (on prem)

hidden

Automatically generate templates for incoming reports and trigger scans based on the rules.

Integration

Bug Bounty Platform Integration (HackerOne, BugCrowd, Intigriti)

Streamline vulnerability templates to scan common cloud providers e.g. AWS, GCP, Azure, HashiCorp, etc to detect critical misconfigurations and policies.

Cloud Misconfigurations

Alert users when new assets are detected. Alerts should be sent via webhook, integrations, and email, providing timely notifications to users about new asset discoveries.

Asset Alerting for New Asset Detection

UI/UX

Light Mode

Ability to generate reporting for SOC II, ISO27001, HIPAA, OWASP reports from the dashboard.

Compliance Reporting

Today, we use standard technologies like wappalzer to do technology detection on assets, but we also have a whole library of nuclei templates that do expanded technology detection. We will add these templates to help enhance technology detection.

Asset Management

Expanded technology detection

Allow users to schedule scans using their local installation of nuclei, sync-ing both the schedule of scans and results between your local nuclei and ProjectDiscovery Cloud Platform

Scanning

Schedule Local Scans & Two-way Nuclei Scan

Define the asset and template conditions, SLA on identified and remediated vulnerabilities.

Policies

Hi,Is there any ways of doing negative search? For example, I want to remove results with a specific technology. (ex: Imperva). I’ve tried the AI, but couldn’t filter properly. It filters out only the one with just “Imperva” as technology but leaves the ones with Imperva and more technologies.Thanks.

Negative search

Discover and scan assets inside your perimeter that aren’t internet facing by connecting your networks via a secure tunnel to PDCP, allowing for scanned, scalable vulnerability scanning for internal assets and networks.

Internal Scanning

Enhance asset management by introducing the capability to add tags. This allows for efficient filtering and tracking of information such as:• Production and staging environments• Team ownership• Other internal tracking details

Asset Tagging/Labeling

Trigger scans based on the conditions of new templates and newly found assets.Also allow users to subscribe to alerts (slack, email) for newly discovered assets

Conditional Scans & New Asset scans

Enhance the technology detection capabilities by utilizing targeted nuclei templates. This approach will improve our ability to accurately identify and analyze the technologies present on various targets and assets. By leveraging these specialized templates, we can ensure a more precise and comprehensive detection process, enabling us to better understand the technological landscape of the discovered entities. This enhancement will not only increase the accuracy of our detection mechanisms but also streamline the process, making it more efficient and effective in identifying critical technologies.

Nuclei Enhanced Technology Detection

Automation vulnerability management &amp; regression testing by automatically updating the status of open vulnerabilities, which currently requires manual retests, and adding automatic regression testing. This enhancement will improve efficiency and reduce manual effort for ongoing vulnerability tracking and testing.

Security Regression Testing

Ability to update the status of vulnerabilities for connected JIRA tickets

Bidirectional JIRA Integration

Early access to the templates before they are released in public repository. This gives an immediate scanning capabilities as new templates are merged or written.

Early templates

Audit Logs (App)

Asset Discovery

The Technology Intelligence feature enhances asset management by providing a comprehensive overview of all technologies running across discovered and enriched assets. This feature eliminates the need to search technologies within each individual asset, allowing users to search and filter for technologies across all assets simultaneously. This streamlines workflows and improves efficiency in managing infrastructure.

Technology Intelligence

Ability to view the raw logs of scan results e.g. match status of a template on a given target with timestamp, errors if any, status of template. (match or not matched)

Scan logs

Ability to manage discovered assets with the context of their tech, endpoints associated vulnerabilities, labels, etc

14-Day Free Trial

Export (CSV, JSON, PDF)

Slack / Teams Notifications

Advanced Asset Discovery<ul class="tight" data-tight="true"><li>DNS Permutation: Enabled by default.</li><li>HTTP Screenshot: Disabled by default with an option to enable.</li></ul>Improved WebService Detection<ul class="tight" data-tight="true"><li>Redirects Handling: Enabled by default with an option to disable.</li><li>Technology Detection: Enhanced tech detection including redirects and headless fingerprinting.</li><li>Visibility of chained status codes.</li></ul>Additional Features<ul class="tight" data-tight="true"><li>Screenshot Visibility</li><li>Favicon Visibility</li></ul>

Asset Enrichment Improvements

See how your organization is:<ul><li>Seeing active vulnerabilities over time</li><li>Remediation pace</li><li>Ratio of exposed vulnerabilities</li><li>See breakdown of risk</li></ul>

Executive Reporting

Be able to see details of an asset, historical information, vulnerability correlation, and other metadata about a given asset.

Asset View

ServiceNow Integration

Integrate Vercel as an addition Cloud Service for importing assets from Vercel endpoints and preview deploys<a target="_blank" rel="noopener noreferrer nofollow" class="link" href="https://github.com/projectdiscovery/cloudlist/issues/566">https://github.com/projectdiscovery/cloudlist/issues/566</a>

Vercel Integration

Enable users and their team members to onboard successfully to the platform and understand how they can get value out of their time there.