Guide · Open source
How to use nuclei-templates: clone, run with nuclei and tips
Updated · written with AI from the project's own documentation and checked against our catalogue data
nuclei-templates is a community-curated collection of templates that the nuclei scanner uses to check applications for security vulnerabilities, misconfigurations and exposed panels. This guide covers what the repository contains, how to get it, how to point the nuclei scanner at it, and how to read the results. It is written for people who already have some security testing background and want ready-made checks.
Nucleiprojectdiscovery/nuclei-templates · ★ 13.3k · MIT Install options & downloads Quick start
- 1Install the nuclei scanner. nuclei-templates needs the nuclei scanner, which is a separate project at github.com/projectdiscovery/nuclei. Install it following that project's instructions.
- 2Clone the templates repository. Run git clone https://github.com/projectdiscovery/nuclei-templates to download the templates to your machine.
- 3Pick your scope. Confirm you have permission to test each target before running any checks.
- 4Select templates by tag. Use tags such as kev and vkev to limit the run to actively exploited vulnerability checks.
- 5Run nuclei against targets. Run the nuclei scanner with your tag selection and the targets you are authorised to test.
- 6Review and verify results. Check each finding by hand, using the severity and template details, before you report it.
What nuclei-templates is and what it is not
The repository holds templates for the nuclei scanner, which is a separate project from the same team. Each template describes a check for a known vulnerability, misconfiguration, or exposed panel, and nuclei runs those checks against web applications and other targets.
The repository on its own does not scan anything. You need the nuclei scanner installed to use it.
- Templates: the checks, stored in this repository
- Scanner: nuclei, a separate project at github.com/projectdiscovery/nuclei
- Licence of this repository: MIT
Get the templates: clone the repository
The README's install method is to clone the templates repository. Run the following command in a terminal to download a local copy.
git clone https://github.com/projectdiscovery/nuclei-templatesTag and filter templates for known exploited vulnerabilities
The README reports coverage of vulnerabilities in two catalogues: the CISA Known Exploited Vulnerabilities Catalog and VulnCheck KEV. Templates are labelled with tags, so you can narrow a scan to these checks instead of running everything.
The README suggests the following command to scan for actively exploited vulnerabilities using the kev and vkev tags.
- kev: templates covering CISA KEV entries
- vkev: templates covering VulnCheck KEV entries
- The README lists both catalogues together and notes some templates appear in both
nuclei -tags kev,vkevUnderstand what the template directories contain
The repository is organised into directories by protocol or topic, such as http, dns, network, file, ssl, cloud, code, dast, javascript and workflows. Each template file is tagged and carries a severity level, which the README's statistics table groups as info, low, medium, high, critical and unknown.
Use the severity and tags to decide what to run and how to read the output. Results still need a human to interpret them.
- Directories group templates by target type
- Severity levels help you prioritise findings
- Tags such as vuln, cve, panel and exposure describe what a check looks for
Write your own template
The repository is also a set of examples for people who want to build their own checks. The README points to the nuclei documentation for building new or custom templates and says the repository includes templates to help you understand how things work.
Read a few templates in the directory that matches your target before writing one, and keep your custom templates separate from the cloned repository.
- Full documentation: https://nuclei.projectdiscovery.io
- Introduction and FAQ are linked from the README at docs.projectdiscovery.io
Use it only where you are allowed to test
These templates actively probe targets. Only run them against systems you own or have explicit written permission to test. Scanning other people's systems without permission can be illegal and can disrupt services.
- Confirm scope before scanning, including bug bounty program rules
- Treat findings as leads to verify manually, not as confirmed issues
What people use it for
- Security testers running known-issue checks against web applications they are authorised to test
- Bug bounty hunters looking for known issues across many web targets within program scope
- Security teams scanning for actively exploited vulnerabilities using the kev and vkev tags
- Developers reading template files as examples of how nuclei checks are written
Frequently asked questions
Is nuclei-templates free to use?
The repository is licensed under MIT, as stated in its listing. The MIT licence permits use under its terms, and you should read the licence file in the repository for the full conditions.
Do I need to install nuclei to use nuclei-templates?
Yes. The README says templates are the core of the nuclei scanner, and the scanner is a separate project at github.com/projectdiscovery/nuclei. The templates on their own do not perform scans.
How do I install nuclei-templates?
Clone the repository with git clone https://github.com/projectdiscovery/nuclei-templates. Install the nuclei scanner separately, then point it at the templates you need.
How do I scan only for actively exploited vulnerabilities?
The README suggests running nuclei -tags kev,vkev. These tags select templates covering CISA KEV and VulnCheck KEV entries.
What are the alternatives to nuclei-templates?
The comparable projects listed for this item are Nikto, OpenVAS, OWASP ZAP and Nuclei. Each has a different approach, so choose based on whether you need template-based checks, a full web proxy, or network vulnerability scanning.
Is it safe to run these templates on any website?
No. The templates actively probe targets, so only run them against systems you own or have explicit permission to test. Unauthorised scanning can be illegal.
New agent skills, repos and AI tools — every week
The best new skills and open-source projects, the fastest-growing repos, and one free prompt. Five minutes to read. Unsubscribe anytime.
Our verdict
nuclei-templates is a good fit for security testers and bug bounty hunters who already use the nuclei scanner and want ready-made, tag-filtered checks. It is not a standalone app, and beginners without a security background will struggle to interpret results. If you need a complete tool with its own interface or a general web proxy, consider OWASP ZAP or another listed alternative.
Install options & downloads