# Nuclei

Nuclei declares [2 subprocessors](https://thirdpartyindex.com/vendors/nuclei#subprocessors) in [its subprocessor list](https://trust.nuclei.ai/subprocessors), which we last checked on 2026-10-23 ([evidence](https://thirdpartyindex.com/evidence/9577)). They are [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services) and [Microsoft](https://thirdpartyindex.com/vendors/microsoft). Our recent checks could not read the list; these entries are as of 2026-10-23. [1 tracked vendor](https://thirdpartyindex.com/vendors/nuclei#used-by), [Hadrius](https://thirdpartyindex.com/vendors/hadrius), names Nuclei as a subprocessor.

Nuclei (nuclei.ai): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/nuclei
- Documents last verified: 2026-11-11
- Transparency rating: 57/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 0/7 (partial); Data processing addendum 0/12 (not found); Trust center 8/8; Privacy policy 6/6; security.txt 0/6 (not found); Security page 0/5 (not found); Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 0/8 (some unreachable this week)
- Supply chain: relies on 2 tracked vendors directly, 24 within two hops, 121 within three; 1 tracked vendors rely on it directly, 1 within two hops, 1 within three
- Cite as: Nuclei, Third Party Index, https://thirdpartyindex.com/vendors/nuclei (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.nuclei.ai/ | 2026-11-11 | 2026-10-24 |
| Subprocessor list (currently unreachable) | https://trust.nuclei.ai/subprocessors | 2026-10-23 | 2026-09-27 |
| Privacy policy | https://nuclei.ai/privacy/index.html | 2026-11-11 | 2026-09-23 |
| Status page | https://status.nuclei.ai/ | 2026-11-11 | 2026-11-07 |

## Subprocessors (2)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services.md) | — | Infrastructure as a Service (IaaS) | 2026-10-01 |
| [Microsoft Azure](https://thirdpartyindex.com/vendors/microsoft.md) | — | Infrastructure as a Service (IaaS) | 2026-10-01 |

Read from ([evidence](https://thirdpartyindex.com/evidence/9577)). CSV: https://thirdpartyindex.com/vendors/nuclei/subprocessors.csv

## Compliance

As its trust center lists them.

- Audited: SOC 2 Type II, SOC 2 Type I ([evidence](https://thirdpartyindex.com/evidence/10854))

## Web Technologies

Nuclei's homepage made 9 requests to 1 domain. Loaded on 2026-11-10 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

### First party (1)

- Nuclei: 9 requests to nuclei.ai; Amazon CloudFront, Amazon S3, Amazon Web Services

## Subprocessor of (1)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [Hadrius](https://thirdpartyindex.com/vendors/hadrius.md): Discord and Zoom Chat Message Capture

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/nuclei

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api