PAGES
← all tools
◆ Attack Surface & Exposure Management

ProjectDiscovery Cloud

Introducing Internal Network Scanning: see your network the way an attacker inside it would (2026-07-21) commercial

ProjectDiscovery Cloud is a platform providing cloud-based security scanning and reconnaissance tools for identifying vulnerabilities and assets in applications.

Summary

ProjectDiscovery Cloud is a commercial vulnerability management platform that discovers assets and validates which vulnerabilities are actually exploitable, running as a cloud service with a free sign-up tier and a demo path for enterprise-scale coverage. It inventories internet-exposed, internal, and cloud assets—VMs, load balancers, Kubernetes ingresses, subdomains—and tracks changes continuously, while an internal network scanning capability reaches assets and exposures external scanners cannot see. Findings are confirmed through runtime attack simulation rather than CVE matching alone, which cuts triage work, and detection logic is kept current through a community-contributed, internally vetted template feed. It suits security teams and developers who need a prioritized, noise-free view of real risk rather than a raw vulnerability list, sitting in the exposure-management space alongside attack-surface monitoring tools.

ProjectDiscovery Cloud is a platform providing cloud-based security scanning and reconnaissance tools for identifying vulnerabilities and assets in applications.

How ProjectDiscovery Cloud helps

Which internet-facing and internal assets do I actually have, and has anything changed since last time?

continuously enumerates VMs, load balancers, Kubernetes ingresses, sub-domains and cloud resources and records a changelog per asset, so new hosts or configuration drift show up instead of going unnoticed

Of everything flagged, which vulnerabilities can an attacker actually use against me right now?

runs a safe, real-world attack simulation against each finding at runtime and only surfaces the ones proven exploitable, instead of relying on CVE version matching alone

What is exposed on my internal network that nobody scanning from outside would ever see?

scans from inside the network itself, reaching hosts and misconfigurations that an external, internet-facing scanner cannot reach

Am I about to spend my week chasing findings that don't matter?

strips out unconfirmed matches before they reach the team, which is reported to cut manual triage effort by up to 97 percent

Is my detection coverage keeping up with newly emerging exploits and CVEs?

pulls in new vulnerability templates from a community feed that ProjectDiscovery's internal security team vets before release, so new attack techniques get added without waiting on a private research cycle

Did the fix I shipped for a finding actually hold, or did it regress?

supports automated retesting of previously found vulnerabilities to verify remediation and catch regressions

all 16 features, with the evidence for each →

Languages

Not documented

Features

16 capabilities across 2 capability groups · 1 backed by code, an API document or a real run

Built from ProjectDiscovery Cloud's releases, docs, README and our own runs. “Seen” marks the month we first spotted a release the vendor didn't date. Group names and tags are our labels.

Compare with peers →

  • ProjectDiscovery Cloud covers 2 of the 13 network discovery and scanning capabilities we track.

What ProjectDiscovery Cloud offers you

  • Scheduled jobs2
  • Natural-language query1
  • REST API1
  • Ticketing integration1
Attack surface inventory 3 features Network discovery and scanning since 2024
Asset Inventory and Technologies shipped Catalogs discovered assets, tracks their associated technologies, supports natural language search, and defines First/Last Seen timestamps for lifecycle tracking. 27 releases · first seen Feb 2024

Shared capability: Attack surface inventory

Also counts toward: Natural-language query

release 27 total

  • Assets section now includes Associated Domain Discovery with grouping by acquisition history, certificate history (CT logs), and WHOIS history. 1.6.0 · Jan 2026 · source · release history
  • Adds Credential Monitoring experience to surface exposed credentials associated with your organization 1.4.0 · Aug 2025 · source · release history
  • Adds source visibility details to the Asset → Drawer details panel 1.4.0 · Aug 2025 · source · release history
  • Adds contextual cloud provider metadata (instance identity, traffic path, versioning) to asset drawers 1.4.0 · Aug 2025 · source · release history
  • Adds contains and not contains operators for custom filters supporting multiple values 1.3 · Jun 2025 · source · release history
  • Adds a drawer view for the vulnerability visualization interface 1.3 · Jun 2025 · source · release history
Cloud Asset Discovery Expansion shipped Extends discovery coverage to new cloud services, private domains via the Chaos Project, and provides detailed infrastructure metadata. 4 releases · first seen Feb 2025

Shared capability: Attack surface inventory

release

  • Extends Azure integration coverage to 10+ additional services 1.5.0 · Dec 2025 · source · release history
  • Adds contextual cloud provider metadata (instance identity, traffic path, versioning) to asset drawers 1.4.0 · Aug 2025 · source · release history
  • Adds Assets → Integrations → AWS navigation for AWS ARN integration to enhance cloud asset discovery 1.0.1 · Mar 2025 · source · release history
  • Adds automated TLS certificate probing via tlsx, ASN metadata integration via asnmap, and exposed IP discovery via uncover during onboarding and all discoveries. 1.0.0 · Feb 2025 · source · release history
Dynamic Asset Grouping shipped Organizes discovered assets into dynamic groups from saved filter selections for better management and correlation. 2 releases · first seen Feb 2025

Shared capability: Attack surface inventory

release

  • Adds grouped asset view to correlate multiple data points across infrastructure 1.2 · Apr 2025 · source · release history
  • Enables creation of dynamic asset groups from saved filter selections to organize discovered assets. 1.0.0 · Feb 2025 · source · release history
Active network scanning 1 feature Network discovery and scanning since 2023
Internal network scanning verified Scans assets from inside the network to surface reachable exposures that external scanners miss. 11 releases · 1 other source · first seen Nov 2023

Shared capability: Active network scanning

release 11 total

  • New Internal Network Scanning capability scans assets from inside the network to surface reachable exposures that external scanners miss. Introducing Internal Network Scanning: see your network the way an attacker inside it would (2026-07-21) · Jul 2026 · source · release history
  • Adds TunnelX secure tunneling solution for continuous internal vulnerability assessments in beta 0.9.3 · Dec 2024 · source · release history
  • Adds custom port range configuration under Advanced settings to define specific ports during discovery. 0.8.4 · May 2024 · source · release history
  • Asset Discovery (early preview) allows finding subdomains, ports, and endpoints integrated with scanning. 0.7 · Feb 2024 · source · release history
  • Enables scanning a single template across one or many asset lists directly from the template editor view 0.4 · Dec 2023 · source · release history
  • Adds STOP option in dropdown menu to interrupt running scans 0.3.3 · Dec 2023 · source · release history

api

Other / not yet classified 12 features Features we have not matched to a capability yet. A suggested match is marked.
Cloud API vulnerability scanning shipped suggested Executes vulnerability scans via the cloud API and manages their lifecycle including scheduling, result viewing, and cleanup. 26 releases · first seen Nov 2023

Suggested capability: Web vulnerability scanning. This is our guess, not confirmed.

Also counts toward: Scheduled jobs

release 26 total

  • Adds support for short-lived tokens (API only) in GCP integration 1.5.0 · Dec 2025 · source · release history
  • Extends Azure integration coverage to 10+ additional services 1.5.0 · Dec 2025 · source · release history
  • Adds a category filter (e.g. SSRF, Misconfig, RCE) to single-click filtering across vulnerability data 1.3 · Jun 2025 · source · release history
  • Adds a new card-driven dashboard highlighting total assets and open vulnerabilities with contextual charts 1.3 · Jun 2025 · source · release history
  • Adds custom severity levels for templates and vulnerabilities to adapt to organizational risk tolerance 1.2 · Apr 2025 · source · release history
  • Introduces a new triaged status for vulnerabilities to mark issues reviewed but not yet remediated 1.2 · Apr 2025 · source · release history
Scan Configuration and Optimization shipped suggested Allows fine-tuning of scans with technology-specific filters, custom port ranges, Interactsh server configuration, and advanced scan log filtering. 11 releases · first seen May 2024

Suggested capability: Active network scanning. This is our guess, not confirmed.

release 11 total

  • Adds asset_inclusion filters to per-scan and per-discovery configuration to explicitly include assets 1.5.0 · Dec 2025 · source · release history
  • Enables Static IP selection automatically when Static Scan is enabled in scan configuration 1.5.0 · Dec 2025 · source · release history
  • Adds Rate limit per host scan configuration option to control requests per second per host 1.4.0 · Aug 2025 · source · release history
  • Adds cleanhttp-powered HTTP-based wildcard detection and exclusion to skip false positives by default 1.3 · Jun 2025 · source · release history
  • Adds option to download current and historical invoices from Settings → Billing 1.0.1 · Mar 2025 · source · release history
  • Displays last active time for each team member in the list view under Settings → Teams 1.0.1 · Mar 2025 · source · release history
Asset Discovery Data Enrichment shipped suggested Enhances asset discovery by integrating with the Chaos Project and multiple third-party APIs to retrieve data for public domains. 8 releases · first seen Oct 2024

Suggested capability: Attack surface inventory. This is our guess, not confirmed.

Also counts toward: REST API

release 8 total

  • Enables PDF report generation via the Reporting page and API endpoints 1.5.0 · Dec 2025 · source · release history
  • Adds WAF-focused summary to scan logs in the Scan → Logs details panel 1.4.0 · Aug 2025 · source · release history
  • Adds AI-powered auto-complete suggestions for template fields in the editor 1.2 · Apr 2025 · source · release history
  • Adds ability to test templates against multiple targets simultaneously 1.2 · Apr 2025 · source · release history
  • Adds template sharing with restricted access and custom expiration dates 1.2 · Apr 2025 · source · release history
  • Adds multi-tab editing with local cache for unsaved templates 1.2 · Apr 2025 · source · release history
Vulnerability retesting shipped suggested Retests identified vulnerabilities directly from the interface to validate fixes. 7 releases · first seen Dec 2023

Suggested capability: Web vulnerability scanning. This is our guess, not confirmed.

release 7 total

  • Adds detailed exploit pages with technical breakdowns and remediation steps 1.2 · Apr 2025 · source · release history
  • Adds custom reporting link reference to connect findings to external resources like ticketing or documentation 1.2 · Apr 2025 · source · release history
  • Adds new vulnerability library page for browsing CVEs and Nuclei templates (early version) 1.2 · Apr 2025 · source · release history
  • Adds filter-based export functionality for all results sections in vulnerability management. 0.9.0 · Sep 2024 · source · release history
  • Adds Vulnerability Status Filter allowing users to update statuses (open/closed/false positive) and auto-mark false matcher results as fixed. 0.5 · Jan 2024 · source · release history
  • Endpoint updates for vulnerability retest and scan rescan. 0.4.1 · Dec 2023 · source · release history
Integration with External Ticketing Systems shipped Integrates with third-party ticketing systems like Jira and Linear to automatically or manually create tickets from vulnerability detections. 4 releases · first seen Sep 2024

Also counts toward: Ticketing integration

release

  • Jira Integration supports OAuth-based authentication and configurable field mapping for vulnerability/asset data. 1.6.0 · Jan 2026 · source · release history
  • Adds self-hosted Jira integration for vulnerability tracking via automatic ticket creation 1.2 · Apr 2025 · source · release history
  • Adds Linear ticketing integration for automatically or manually creating tickets from vulnerability detections 0.9.1 · Sep 2024 · source · release history
  • Supports interactive selection of Jira project, issue type, and status during setup. 0.9.0 · Sep 2024 · source · release history
Asset and Vulnerability Alerting shipped Provides configurable alerts for detecting new assets, vulnerabilities, and monitoring events. 4 releases · first seen Oct 2024

release

  • Adds Mattermost as an alerting destination for notifications 1.5.0 · Dec 2025 · source · release history
  • Adds support for custom vulnerability alerting on Slack, Teams, and email based on severity 1.2 · Apr 2025 · source · release history
  • Adds configurable alerts for detecting new assets and vulnerabilities 0.9.3 · Dec 2024 · source · release history
  • Introduces configurable alerting for asset discovery and monitoring events 0.9.2 · Oct 2024 · source · release history
Template Library and Collaboration shipped Allows browsing, creating, and sharing community or custom templates with enhanced editing features and version control. 4 releases · first seen Apr 2025

release

  • Adds support for private/custom Nuclei templates in scan template profiles 1.5.0 · Dec 2025 · source · release history
  • Adds cleanhttp-powered HTTP-based wildcard detection and exclusion to skip false positives by default 1.3 · Jun 2025 · source · release history
  • Adds template sharing with restricted access and custom expiration dates 1.2 · Apr 2025 · source · release history
  • Adds new vulnerability library page for browsing CVEs and Nuclei templates (early version) 1.2 · Apr 2025 · source · release history
Advanced Search and Filtering shipped Enhances the discovery of assets and vulnerabilities with multi-tab, negative, category, and domain-specific filters. 4 releases · first seen Feb 2025

release

  • Adds a category filter (e.g. SSRF, Misconfig, RCE) to single-click filtering across vulnerability data 1.3 · Jun 2025 · source · release history
  • Adds contains and not contains operators for custom filters supporting multiple values 1.3 · Jun 2025 · source · release history
  • Adds Assets → Inventory → Filters → Domain filter to allow filtering vulnerabilities and results by domain 1.0.1 · Mar 2025 · source · release history
  • Introduces new multi-select filters for assets and support for negative search parameters in the platform UI. 1.0.0 · Feb 2025 · source · release history
Automated Scan Scheduling and Triggers shipped suggested Supports automated vulnerability scanning, including real-time triggers upon template updates, weekly data refreshes, and pre-scan automation workflows. 4 releases · first seen Oct 2024

Suggested capability: Active network scanning. This is our guess, not confirmed.

Also counts toward: Scheduled jobs

release

  • Adds interactive chat assistant with diff view for template creation and modification 1.2 · Apr 2025 · source · release history
  • Adds automatic real-time vulnerability scans that trigger when new Nuclei templates are added (Enterprise only) 0.9.2 · Oct 2024 · source · release history
  • Automates weekly refresh of discovery data for public domains available to free-tier users 0.9.2 · Oct 2024 · source · release history
  • Enables configurable discovery and scan automation to run asset discovery before scanning or initiate a scan immediately after 0.9.2 · Oct 2024 · source · release history
Operational Dashboard and Reporting shipped Provides a dashboard for tracking assets and vulnerabilities, along with PDF reporting and billing history access. 3 releases · first seen Mar 2025

release

  • Enables PDF report generation via the Reporting page and API endpoints 1.5.0 · Dec 2025 · source · release history
  • Adds a new card-driven dashboard highlighting total assets and open vulnerabilities with contextual charts 1.3 · Jun 2025 · source · release history
  • Adds option to download current and historical invoices from Settings → Billing 1.0.1 · Mar 2025 · source · release history
Vulnerability Triaging and Management shipped Provides status tracking for reviewed issues, detailed exploit context, and external resource linking to manage the remediation workflow. 3 releases · first seen Apr 2025

release

  • Adds detailed exploit pages with technical breakdowns and remediation steps 1.2 · Apr 2025 · source · release history
  • Introduces a new triaged status for vulnerabilities to mark issues reviewed but not yet remediated 1.2 · Apr 2025 · source · release history
  • Adds custom reporting link reference to connect findings to external resources like ticketing or documentation 1.2 · Apr 2025 · source · release history
Credential Monitoring shipped Surfaces exposed credentials associated with the organization. 2 releases · first seen Aug 2025

release

  • Export API for Credential Monitoring returns unmasked passwords for bulk analysis and external tool integration. 1.6.0 · Jan 2026 · source · release history
  • Adds Credential Monitoring experience to surface exposed credentials associated with your organization 1.4.0 · Aug 2025 · source · release history

Lines in monospace are the tool's own words: help text parsed from its source, or an endpoint from its API document. Under release, a line is our summary of a dated release. Under docs, it is quoted from the tool's own documentation or website. Each links back to the source it came from.

Score card

  1. Shipping velocity releases a month, last 12 months
  2. Documentation quality release-notes rubric, 0–100
  3. Breaking-change discipline how rarely a release breaks users, and notice given
  4. Maintenance risk quiet time against its own cadence, maintainers
  5. Innovation & surface new capabilities, API and MCP surface

Five scores for ProjectDiscovery Cloud, each built from the releases, notes and API history this site tracks — and, on Researcher and Business, where it stands among every measured tool in its category and how that has moved.

Score cards are part of every paid plan.

See plans →

Each score is 0–100 on a published rubric, derived from data this site already shows. A dimension we cannot measure says so — it is never scored 0 and never enters a rank.

How this is scored
  • Shipping velocity — releases a month over the last 12 months, on a log scale where 16 a month scores 100. Needs 3 releases in the window.
  • Documentation quality — the release-notes rubric published on the analytics page, unchanged.
  • Breaking-change discipline — the share of releases carrying a breaking change (none scores 100, half or more scores 0). Only projects that label breaking changes are measured: a clean record cannot be told from an unlabelled one.
  • Maintenance risk — quiet time measured against the tool's own release cadence (quiet longer than 90 days and three typical gaps scores 0), plus the number of active maintainers and whether contributors are growing, where known. Higher is lower risk.
  • Innovation & surface — new capabilities in the feature ledger this year, API and MCP operations added, and the share of commits that are features: the mean of whichever we hold.
  • Community health (open-source tools only) — each is a direction, not a size: contributors this year against last, the bus factor now against a year ago, and issues closed per issue opened, where steady scores 50, doubled 100 and halved 0; plus the median time to a maintainer's first reply (an hour scores about 100, a month or more 0). A commercial card has no repository and carries none of the four.
  • Documented delivery (commercial tools) — when a vendor's documented new capabilities have slowed against its own baseline, that counts against the overall standing as heavily as two low dimensions. Steady delivery, or too little history to judge, leaves the standing alone; it is never a sixth score.
  • Open-source tools are scored on repository signals; commercial tools on their published changelog. Ranks compare tools within one category and one profile and need at least five measured peers; the overall standing needs three ranked dimensions. Best-in-breed or consolidator is a shape, not a quality, and is never scored.

Release-note detail over time

See how much detail ProjectDiscovery Cloud puts in its release notes, quarter by quarter, and compare it with tracked tools in the same category. This history uses up to ten retained, reviewed notes per tool; sparse or blank older quarters may reflect that limit.

Checking release-note history…

Explore the full chart →

Commercials

pricing & packaging history · ProjectDiscovery vendor page

23 readings of ProjectDiscovery's pricing page since Feb 2024, with 7 relaunches of its plan lineup and 4 changes to what its plans include — each one dated, compared with the reading before it, and explained for someone buying the tool.

Pricing and packaging history is included with Researcher and Business. See how every vendor we track sells, and how that has changed over time, using data we don't publish anywhere else.

See plans →

Website history

projectdiscovery.io, every change

ProjectDiscovery's home page and 3 more pages as they looked each month from August 2021 to October 2026: 18 renders, 4 changes of tagline or palette. Step through them, play them, or put any two months side by side.

Website history is included with Researcher and Business.

See plans →

Releases

Show

30 entries

  1. July 20261
  2. January 20261
  3. December 20251
  4. August 20251
  5. June 20251
  6. April 20251
  7. March 20251
  8. February 20251
  9. December 20241
  10. October 20241
  11. September 20242
  12. August 20241
  13. June 20241
  14. May 20242
  15. April 20242
  16. March 20241
  17. February 20242
  18. January 20242
  19. December 20234
  20. November 20233
    Show

    30 entries

    Add the badge to your README

    Maintain this project? The badge links readers straight to this page, so they can follow every release here.

    Tracked by Cyber Toolchain Choose a badge style and copy the code →
    browse all tools → score card for your toolchain →