ProjectDiscovery, a provider of vulnerability detection and autonomous security testing solutions, has announced the general availability of Neo Triage, a new capability within its Neo platform designed to validate security findings by safely reproducing them against live assets.
Rather than relying solely on static risk scores, Neo Triage evaluates findings from vulnerability scanners, bug bounty programs and AI-generated security reports to establish their validity and determine severity based on demonstrated impact. Each assessment includes the exact requests and responses supporting its verdict, allowing security teams to prioritize confirmed vulnerabilities and accelerate remediation.
The platform consolidates vulnerability triage across multiple sources and provides several key capabilities:
- Dynamic triage: Executes safe, non-destructive tests within an isolated sandbox to reproduce reported vulnerabilities against live assets.
- Verdicts with evidence: Classifies findings as valid, duplicate, needs more information, informative, not applicable or spam, with supporting requests and responses attached to each determination.
- Severity from proven impact: Determines vulnerability severity using verified impact and asset context, including associated data, exposure levels and connections to other systems.
- One queue for every source: Centralizes findings from HackerOne, GitHub security advisories, security mailboxes, Wiz, Qualys, Orca and other API-enabled security tools into a unified dashboard.
- Fix and retest: Recommends remediation steps, prepares responses to security researchers and automatically retests vulnerabilities after fixes are deployed.
- Insights: Provides visibility into outstanding vulnerabilities, SLA compliance, time to zero, weekly remediation progress and the quality of findings submitted by different sources.
“Today, AI has made finding vulnerabilities cheap, and security teams spend hours reproducing each finding by hand,” said Rishi Sharma, CEO and Co-founder of ProjectDiscovery. “In the next 6-12 months, triage and the bottleneck it causes will be the biggest problem security teams will face. Scanners, AI code review and AI-assisted bug hunting now generate findings faster than teams can review them, leaving most organizations with thousands – or even millions, of open findings. The hard part now is deciding which findings matter, and a score can’t make that decision. Proof can. Neo Triage tests every finding against the real asset and hands the team a verdict with the evidence attached, so teams spend their time on decisions instead of on reproducing reports.”
According to ProjectDiscovery, manually triaging a single security finding can require between 15 minutes and four hours. For organizations managing a backlog of 100,000 findings, the company estimates that Neo Triage could reduce approximately 50,000 hours of manual triage work, equivalent to 25 employees working for a year, to around 8,300 hours spent reviewing automated verdicts.
Neo Triage is available across all Neo subscription tiers, including the free community offering. Organizations can get started with Neo for free, with monthly usage included and no time limit.
Users can immediately run security testing workflows, including validating findings from existing vulnerability scanners or submitting prompts to determine whether their environments are exposed to newly disclosed vulnerabilities.
As security testing requirements expand, organizations can upgrade to Pro or Enterprise plans, which operate under zero data retention.
For more information about Neo Triage, visit: https://projectdiscovery.io/blog/introducing-neo-triage
_______
About ProjectDiscovery
ProjectDiscovery is an open source cybersecurity company that built the security toolchain trusted by more than 100,000 practitioners worldwide. The company created Nuclei, the most widely used open source vulnerability scanner with over 10 billion scans run, along with a suite of modular tools including Subfinder, httpx, and Naabu that security teams use to map attack surfaces and identify exploitable vulnerabilities. Building on that foundation, ProjectDiscovery offers Neo, an AI-powered security testing platform that unifies SAST, DAST, and automated penetration testing to help teams move from finding vulnerabilities to verifying and fixing them. ProjectDiscovery is a winner of the RSAC Innovation Sandbox 2025 and a Black Hat Asia 2025 award recipient. Learn more at projectdiscovery.io.
Join our LinkedIn group Information Security Community!
