ProjectDiscovery Nuclei · JSON or JSONL
Nuclei scanner reports: from JSON output to a client report
Nuclei is fast and precise, but its output is a stream of JSON. Upload it to Varaxon Scan Hub and get a ranked, plain-language report, with each finding traced to the template and host that matched.
What Scan Hub reads from Nuclei
JSON array or JSON Lines.
Both of Nuclei's export styles work. In JSON Lines, a broken line is counted as one unreadable record instead of failing the whole file.
Template, host and port.
Each finding keeps its template ID, name and severity, and the host, IP and port Nuclei states. Matched URLs stay as evidence.
CVEs from the template.
CVEs come only from the template's classification, never guessed from its ID, tags or name.
How to export from Nuclei
- Run Nuclei with JSON Lines output, for example
nuclei -l targets.txt -jsonl -o results.jsonl, or write a JSON array with-json-export results.json. - To show which checks ran but did not match, add
-matcher-status. Scan Hub then reports those as checked, not as findings. - Run the free pre-flight check on the file.
- Upload it to the client in Scan Hub and build the report.
What the report states explicitly
- Results with an error, or with matcher-status false, are counted as checks, never as findings.
- Repeated matches that disagree on a fact (a different port or CVE) are set aside for review instead of being merged silently.
- An empty export is refused, never presented as a clean result.
Common questions
- Does Scan Hub run Nuclei for me?
- No. Run Nuclei as you do now. Scan Hub reads its JSON or JSONL output and writes the report.
- How are Nuclei severities used?
- Nuclei's info, low, medium, high and critical labels are kept as stated. Scan Hub's priority puts known exploited CVEs (CISA KEV) first, then orders the rest by EPSS and CVSS.
- Can I combine Nuclei with a network scanner?
- Yes. Upload a Nuclei export and, for example, a Nessus or OpenVAS export to the same client. Each report says which scanner and file it came from.
Guide
Internal vs external vulnerability scansWhere an external template scanner like Nuclei fits next to internal scans.Read the guide