San Francisco, October 26 /PRNewswire/ -- ProjectDiscovery, a company specializing in network vulnerability detection and automated security testing, today announced the general availability of Neo Triage within its Neo platform. This new feature securely reproduces each security finding entering the system on live assets to validate its validity. Each assessment includes the specific requests and responses that substantiate the results, enabling teams to directly address genuine issues.
Neo Triage provides a unified triage platform for various teams to receive findings from multiple sources, including:
- Dynamic segmentation: Run secure, non-destructive tests in an isolated sandbox and replicate each finding on live assets.
- Judgment with evidence: Mark each finding as valid, duplicate, requires more information, informative, not applicable, or spam, and include the specific request and response as evidence.
- Based on the severity of verified impact: Set the severity level according to the impact of the Neo proof and the asset context, including related data, exposure level, and other accessible content.
- Unified Queue: Aggregate findings from HackerOne, GitHub Security Advisories, security email, Wiz, Qualys, Orca, and any other tools with APIs into a single dashboard.
- Fix and retest: Provide repair recommendations, draft a response for researchers, and automatically retest after the fix is deployed.
- Insight Analysis: Track unprocessed backlog, SLA status, zeroing time, weekly resolution rates, and quality by source.
Rishi Sharma, CEO and co-founder of ProjectDiscovery, said: “Today, AI makes vulnerability discovery incredibly cheap, but security teams still spend hours manually reproducing each finding. Over the next 6 to 12 months, triage and the resulting backlog will become the biggest challenge for security teams. Scanners, AI code review, and AI-assisted vulnerability discovery are now generating findings faster than teams can review them, causing most organizations to accumulate tens of thousands—or even millions—of unaddressed findings. The hardest part now is determining which findings truly matter—and scores can’t make that decision for you; evidence can. Neo Triage tests each finding against real assets and delivers evidence-based judgments to the team, so they can focus their time on decision-making rather than reproducing reports.”
Manual triage of each finding typically requires 15 minutes to 4 hours. ProjectDiscovery estimates that for a backlog of 100,000 findings, Neo Triage can reduce approximately 50,000 hours of manual labor—equivalent to one year’s work for 25 employees—to about 8,300 hours of judgment-based review. Each Neo plan includes the full Triage product, including the free community edition.
Neo is free to start with, offering a monthly quota with no time limits. Anyone can sign up and immediately run useful workflows, whether to triage their own scan results or run a prompt to check if they’re exposed to newly disclosed vulnerabilities. As usage grows, teams can upgrade to Pro or Enterprise plans with zero data retention.
For more information about Neo Triage, visit: https://projectdiscovery.io/blog/introducing-neo-triage
About ProjectDiscovery
ProjectDiscovery is an open-source cybersecurity company whose security toolchain is trusted by over 100,000 professionals worldwide. The company developed Nuclei, the most widely used open-source vulnerability scanner, which has performed over 10 billion scans; it also offers a suite of modular tools, including Subfinder, httpx, and Naabu, enabling security teams to map attack surfaces and identify exploitable vulnerabilities. Building on this foundation, ProjectDiscovery launched Neo—an AI-powered security testing platform that integrates SAST, DAST, and automated penetration testing to help teams shift from vulnerability discovery to validation and remediation. ProjectDiscovery is the winner of the RSAC Innovation Sandbox 2025 and an award recipient at Black Hat Asia 2025. For more information, visit projectdiscovery.io.