{
  "id": 16613681,
  "title": "ProjectDiscovery adds Neo Triage to confirm which vulnerabilities are exploitable",
  "url": "https://urgent.news/2026/10/26/projectdiscovery-adds-neo-triage-to-confirm-which-vulnerabilities-are",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-26T14:00:17.000Z",
  "source": {
    "name": "SiliconANGLE",
    "slug": "siliconangle",
    "url": "https://siliconangle.com/2026/10/26/projectdiscovery-adds-neo-triage-to-confirm-which-vulnerabilities-are-exploitable/"
  },
  "original_language": "en",
  "account": "Cybersecurity firm ProjectDiscovery has integrated Neo Triage into its Neo security testing platform. The new feature aims to determine which reported vulnerabilities can actually be exploited before teams start addressing them. Triage backlog issues are attributed to artificial intelligence tools like scanners, AI code review, and AI-assisted bug hunting, which produce findings faster than security teams can validate them. Each validation requires manual reproduction and can take up to four hours. Neo Triage attempts to replicate every incoming finding on a live asset in an isolated sandbox, without causing damage. The tests culminate in a verdict of valid, duplicate, or spam, with evidence provided to the reviewer. The severity is determined by the impact of the test and the asset's exposure, data behind it, and potential attacker reach. Sources for findings include HackerOne, GitHub security advisories, security mailboxes, and scanners like Qualys and Orca Security. Neo Triage suggests fixes and drafts replies to researchers after confirmation. An insights dashboard tracks the open backlog, service-level agreement status, and grades sources based on the quality of their submissions. ProjectDiscovery's CEO, Rishi Sharma, anticipates triage to be the main challenge for security teams in the next six to 12 months, as organizations often have thousands to millions of open findings. Manually addressing a 100,000 finding backlog would require 50,000 hours, or about 25 people for a year. Re-evaluating Neo's verdicts on the same backlog would take roughly 8,300 hours. Neo, built on ProjectDiscovery's toolset, launched in March and went fully operational in August. The free tier is available with no data retention limit, while Pro and Enterprise plans are available for heavier users. ProjectDiscovery, a venture-backed startup that raised $25 million in a 2023 Series A round led by CRV, is best known for its open-source scanner Nuclei, which has executed over 10 billion scans. Neo Triage is accessible across all Neo tiers.",
  "summary": "Open-source cybersecurity company ProjectDiscovery Inc. today added Neo Triage to its Neo security testing platform to confirm which reported vulnerabilities can actually be exploited before teams start fixing them. The new capability goes after the triage backlog, which ProjectDiscovery blames on artificial intelligence. Scanners, AI code review and AI-assisted bug hunting now turn up findings…",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}