ZeroThreat Expands Coverage with Built-in Custom and Open Attack Templates

Thousands of continuously updated Nuclei templates covering CVEs, misconfigurations, default credentials, and exposed services now run natively inside ZeroThreat. Templates execute without adaptation, and results land in the same findings view as the rest of your scan, correlated against the application context that reached them.

Run the templates your own team writes and the ones the community maintains. Point ZeroThreat at a GitHub repository holding your templates and import them directly, or upload a ZIP archive. Imported templates cover the internal frameworks, custom headers, endpoints, and organization-specific logic, and they stay in your library for reuse on every subsequent scan.

Each template is researched against multiple sources, including vendor advisories, public proof-of-concept write-ups, and community disclosures, then tested and validated inside ZeroThreat before it ever runs against your applications. Execution confirms real reachability and impact instead of matching a pattern.

Burp Suite support is currently in build. Once released, the community-maintained checks your team already relies on from PortSwigger will run inside ZeroThreat with the same validation layer and the same governance controls applied to Nuclei templates today, so Burp and Nuclei coverage lives in one attack library instead of two disconnected workflows.