ProjectDiscovery
ProjectDiscovery's mission is to democratize cybersecurity by building the tools, infrastructure, and data that empower anyone defending the modern internet. It develops open-source security tooling and enterprise infrastructure to discover assets, detect exploitable vulnerabilities and misconfigurations, and verify remediation.
At a Glance
- Enterprise security teams
- Application-security and product-security teams
- Cloud and infrastructure teams
- Security engineers and penetration testers
- +3 more
AI Tools by ProjectDiscovery
(1)
Katana
Open Source Go Web Crawler CLI
Discussions
No discussions yet
Be the first to start a discussion about ProjectDiscovery
Latest News
ProjectDiscovery published a Neo-led supply-chain security analysis of the 9.5-million-install Markdown Preview Enhanced VS Code extension, identifying five CVEs.
Neo v1 became generally available with pay-as-you-go pricing for individual practitioners, startups, and enterprises.
ProjectDiscovery introduced Internal Network Scanning to discover reachable internal assets and validate exploitable services from an attacker's perspective.
ProjectDiscovery introduced Continuous PR Security Review, combining code-change review with testing of the running application to reduce false positives.
Products & Services
An autonomous AI security platform that continuously tests applications and APIs, maps attack surfaces, reviews code and pull requests, red teams internal networks, triages vulnerability backlogs, and produces reproducible exploit evidence in an isolated sandbox or customer network.
A hosted enterprise platform built on ProjectDiscovery's open-source tools for asset management, scalable scanning, vulnerability detection, cloud security, reporting, integrations, and remediation workflows.
A fast, customizable vulnerability scanner powered by a YAML-based DSL and community templates, used across applications, APIs, networks, DNS, and cloud configurations.
A community-curated template library that powers Nuclei detection of vulnerabilities, misconfigurations, CVEs, and other security issues across multiple protocols.
Market Position
ProjectDiscovery positions itself as an open-source-powered alternative to proprietary, black-box vulnerability-management and scanning suites: its community-built tools are modular, transparent, customizable, and designed for rapid response to new vulnerabilities. PDCP and Neo extend that stack into enterprise-scale, continuous and evidence-backed testing. In internal-network and vulnerability-management use cases, its stated alternatives include Tenable, Qualys, Rapid7, BitSight, and SecurityScorecard; Neo also competes with traditional SAST/DAST tools and emerging AI security-testing products.
Leadership
Founders
Rishiraj Sharma
Co-founder and CEO; a security engineer who helped create ProjectDiscovery's open-source tools and later led the company.
Sandeep Singh
Co-founder and CTO; previously a security analyst at HackerOne and a security engineer who co-created ProjectDiscovery's open-source tooling.
Nizamul Rana
Co-founder and developer; collaborated with the founding team on ProjectDiscovery's open-source security tools.
Marco Rivoli
Co-founder and cybersecurity engineer; part of the four-engineer collaboration that created ProjectDiscovery's initial open-source security solutions.
Executive Team
Rishiraj Sharma
Co-founder and Chief Executive Officer
Security engineer and founding open-source contributor who leads ProjectDiscovery and its mission to democratize cybersecurity.
Sandeep Singh
Co-founder and Chief Technology Officer
Former HackerOne security analyst and founding engineer responsible for the company's technology and open-source security stack.
Board of Directors
Founding Story
The founders met while collaborating in the subfinder GitHub repository and were frustrated that conventional security tools were slow to adapt, difficult to customize, and produced too many false positives. They began building open-source tools to automate asset discovery and vulnerability scanning; after roughly two years as a side project and a growing community, the team went full-time in January 2021 and began commercializing the stack for enterprises.
Business Model
Revenue Model
Open-source tools are distributed freely, while ProjectDiscovery monetizes hosted enterprise security services through ProjectDiscovery Cloud Platform and Neo subscriptions or usage-based access. Neo also offers enterprise contracts, dedicated infrastructure, private-network deployment, and support.
Pricing Tiers
Free for everyone; one seat, every Neo workflow and custom automations, with limited one-time usage and standard models.
Includes the Free capabilities plus recurring weekly usage allowance and frontier-model access; $400 and $800 per-seat monthly options provide 2x and 5x the base allowance. Annual prices are $2,100, $4,200, and $8,400 per seat.
For more than five seats or requirements such as SSO/SAML, dedicated infrastructure, private environments, organization-level usage controls, BYOK, volume discounts, and dedicated support.
Target Markets
- Enterprise security teams
- Application-security and product-security teams
- Cloud and infrastructure teams
- Security engineers and penetration testers
- Bug bounty hunters and vulnerability researchers
- MSSPs, consultants, and VARs
- External attack-surface discovery and continuous exposure monitoring
- Vulnerability management and exploitability validation
- Web application and API security testing
- Cloud configuration and infrastructure security
- Internal network scanning and red teaming
- Secure code and pull-request review with runtime validation
- Elastic
- ConnectWise