What Security Workflows Can I Learn on ProjectDiscovery Documentation?

Updated

ProjectDiscovery Documentation is the central learning hub for ProjectDiscovery's open-source tools, cloud platform, and APIs. It covers four main security workflow areas: advanced exposure discovery (mapping internet-facing assets), custom vulnerability template automation, real-time vulnerability intelligence, and cloud/internal network monitoring. If you want to understand attack surface mapping, build custom detection templates, track trending exploits, or connect cloud accounts for continuous security assessment, this documentation is organized around those tasks.

Advanced Exposure Discovery

This workflow focuses on mapping your internet-exposed assets and understanding your attack surface.

What you can learn:

  • How to discover and inventory externally visible hosts, services, and endpoints
  • How to organize findings into a coherent view of your external attack surface
  • How exposure discovery fits into a broader security operations process

This is the starting point if your goal is external reconnaissance or continuous attack surface monitoring.

Automate Custom Vulnerability

This workflow covers creating and automating custom security templates to detect vulnerabilities at scale.

What you can learn:

  • How to author custom templates for vulnerability detection
  • How to run those templates across many targets automatically
  • How to scale detection without manually checking each asset

Use this section when built-in checks don't cover your specific stack, internal conventions, or custom applications.

Vulnerability Feed

This workflow keeps you updated with trending vulnerabilities and security exploits in real time.

What you can learn:

  • How to follow newly disclosed or trending vulnerabilities
  • How to use feed data to prioritize what to check or patch
  • How real-time intelligence connects to the rest of your scanning workflow

This is relevant if you need situational awareness rather than a one-time scan.

Cloud Monitoring and Internal Network Security

These workflows extend beyond external assets.

Cloud Monitoring

  • Connect and monitor AWS, GCP, Cloudflare, and Azure accounts for security vulnerabilities
  • Learn how to link cloud accounts and interpret findings

Internal Network Security

  • Secure internal networks with automated vulnerability assessment and monitoring
  • Apply assessment workflows to assets that aren't internet-facing

Platform, Team, and API Workflows

Beyond detection, the documentation covers operational integration:

Area What it covers
Team Integrations Connecting with existing ticketing and alerting tools
API Integration Building and automating custom security workflows via REST APIs
Enterprise Security Setup SAML SSO, IP whitelisting, custom headers, and related org controls

These matter if you're moving from individual tooling to organization-wide automation.

How to Choose Where to Start

  • External attack surface focus → start with Advanced Exposure Discovery
  • Custom detection needs → start with Automate Custom Vulnerability
  • Staying current on threats → start with Vulnerability Feed
  • Cloud or internal assets → start with Cloud Monitoring or Internal Network Security
  • Team or org rollout → review Team Integrations, API Integration, and Enterprise Security Setup

The documentation also provides a search/ask interface (⌘K) and a "Talk to Our Security Experts" option for personalized guidance on implementing these workflows.