# Companies using Nuclei

420 companies in our data use Nuclei, and 260 of them name it in job posts they wrote. From October 2025 to August 2026, 225 job posts named it. Penetration Tester is the role that names it most often.

Data as of November 9, 2026. Source: Sumble.

## Which companies name Nuclei in the most job posts?

Among the companies with the most job posts naming Nuclei are Palo Alto Networks (40), Check Point Software (16) and FIS (15). FIS has named it in job posts the longest of the five companies in the table, since February 2024.

| Company | Job posts | Recent job post |
|---|---:|---|
| [Palo Alto Networks](https://sumble.com/orgs/palo-alto-networks) | 40 | "Vulnerability Expertise: Enhance scanner intelligence by developing features like path/CPE surfacing for findings and ensuring compatibility with industry-standard detection tools (OpenVAS, Nuclei)." (Sr Staff Software Engineer (Xpanse), Aug 25, 2026) |
| [Check Point Software](https://sumble.com/orgs/check-point-software-technologies) | 16 | "Experience with template-based or automated scanning frameworks (for example, Nuclei)" (Offensive Security Researcher, Nov 1, 2026) |
| [FIS](https://sumble.com/orgs/fis-9) | 15 | "Experience with open-source tools like Nuclei along with writing custom vulnerability signature templates" (IT Security Analyst II (Vulnerability Management Operations), Apr 22, 2026) |
| [Recorded Future](https://sumble.com/orgs/recorded-future) | 15 | "Extensive experience with tools such as Tenable, Rapid7, Qualys, or Nuclei for creating and validating network vulnerability checks." (Senior Engineering Manager, (Python, Pen-testing, Nuclei), Dec 14, 2024) |
| [Target](https://sumble.com/orgs/target) | 14 | "Advanced knowledge of Burp Suite and other security tools (nmap, nuclei, etc)" (sr. engineer, May 28, 2026) |

## Is hiring for Nuclei growing?

0.14 in every 10,000 job posts named Nuclei from June to August 2026, against 0.10 from March to May. These are small numbers of job posts, so a few companies can move them.

| Month | Job posts naming it | All job posts | Per 10,000 job posts |
|---|---:|---:|---:|
| Oct 2025 | 17 | 1,413,673 | 0.12 |
| Nov 2025 | 16 | 1,822,119 | 0.09 |
| Dec 2025 | 16 | 1,236,103 | 0.13 |
| Jan 2026 | 13 | 1,828,002 | 0.07 |
| Feb 2026 | 27 | 1,856,647 | 0.15 |
| Mar 2026 | 18 | 1,850,711 | 0.10 |
| Apr 2026 | 18 | 1,728,886 | 0.10 |
| May 2026 | 20 | 1,821,509 | 0.11 |
| Jun 2026 | 24 | 1,909,496 | 0.13 |
| Jul 2026 | 27 | 1,815,180 | 0.15 |
| Aug 2026 | 29 | 1,835,698 | 0.16 |

## How many companies named Nuclei in a job post for the first time in recent months?

Nuclei showed up in job posts at 47 companies for the first time from June to August 2026, and 22 in the three months before. From October 2025 to August 2026, 108 companies named it in a job post for the first time.

| Period | Companies naming it in a job post for the first time |
|---|---:|
| March to May 2026 | 22 |
| June to August 2026 | 47 |
| October 2025 to August 2026 | 108 |

Companies whose first job post naming it appeared in that period. Recruiters, staffing firms and job boards are left out.

## How do we know which companies use Nuclei?

260 of the 420 companies name Nuclei in their own job posts. 9 show up in both job posts and employees' profiles.

| How we know | Companies | Share |
|---|---:|---:|
| Job posts name Nuclei | 260 | 62% |
| Employees' profiles list Nuclei | 160 | 38% |

## What size are the companies that use Nuclei?

By size, Nuclei users are close to the typical tech page; companies with 50 to 999 employees are the largest group (42%). 75 of its companies have fewer than 50 employees.

| Size | Share | Typical tech page |
|---|---:|---:|
| Under 50 employees | 18% | 22% |
| 50 to 999 | 42% | 38% |
| 1,000 to 5,000 | 14% | 17% |
| Over 5,000 | 26% | 23% |

## Where are Nuclei companies based?

Beyond the United States (35%), Nuclei is unusually common in Brazil, at 7.1% of its companies. The United Kingdom is less common than usual, at 4.1% against 6.4% on the typical tech page.

| Country | Companies | Share | Typical tech page |
|---|---:|---:|---:|
| United States | 143 | 35% | 43% |
| India | 52 | 13% | 6.9% |
| Brazil | 29 | 7.1% | 2.8% |
| France | 20 | 4.9% | 4.6% |
| United Kingdom | 17 | 4.1% | 6.4% |
| Canada | 11 | 2.7% | 3.6% |

## Which teams work with Nuclei?

Nuclei work is spread across teams. Security leads, at 10 companies. Cybersecurity and security engineering teams come next, at 7 and 6 companies.

| Team | Companies |
|---|---:|
| Security | 10 |
| Cybersecurity | 7 |
| Security engineering | 6 |
| Red team | 5 |
| Purple team | 4 |
| Attack & hunt | 3 |

## Which roles mention Nuclei most?

No single role dominates for Nuclei; Penetration Tester leads with 23% of the job posts. The top four roles cover 57% of these job posts.

| Role | Share | Oct 2025 to Aug 2026 | Mar to May 2026 | Jun to Aug 2026 |
|---|---:|---:|---:|---:|
| Penetration Tester | 23% | 52 | 16 | 15 |
| Security Engineer | 18% | 40 | 10 | 16 |
| Security Analyst | 12% | 26 | 2 | 11 |
| Customer Engineer | 4.4% | 10 | 4 | 4 |
| Researcher | 4.4% | 10 | 2 | 2 |
| Consultant | 3.6% | 8 | 1 | 2 |

## Which companies started naming Nuclei in job posts recently?

From April to August 2026, 48 companies with 50 or more employees posted their first job naming Nuclei: 29 commercial, 3 mid-market and 16 enterprise. Among the new commercial companies, Offchain posted the most jobs naming it: 4.

| Group | Company | Job posts, April to August 2026 |
|---|---|---:|
| Commercial | [Offchain](https://sumble.com/orgs/offchain-labs) | 4 |
| Commercial | [Whatfix](https://sumble.com/orgs/whatfix) | 3 |
| Commercial | [VitalEdge Technologies](https://sumble.com/orgs/vitaledge-technologies) | 2 |
| Commercial | [Safe Security](https://sumble.com/orgs/safe-securities) | 2 |
| Commercial | [Peraton Labs](https://sumble.com/orgs/peraton-labs) | 2 |
| Mid-market | [Interactive Brokers](https://sumble.com/orgs/interactive-brokers) | 2 |
| Mid-market | [Caja Los Andes](https://sumble.com/orgs/caja-de-compensacion-de-asignacion-familiar-los-andes) | 1 |
| Mid-market | [FIAP](https://sumble.com/orgs/fiap) | 1 |
| Enterprise | [Citi](https://sumble.com/orgs/citi) | 3 |
| Enterprise | [S&P Global](https://sumble.com/orgs/s&p-global) | 3 |
| Enterprise | [Elsevier](https://sumble.com/orgs/elsevier) | 3 |
| Enterprise | [Deloitte](https://sumble.com/orgs/deloitte) | 2 |
| Enterprise | [EY](https://sumble.com/orgs/ey) | 1 |

Companies that named Nuclei in a job post for the first time between April and August 2026, ranked by their job posts in those months. AI-native companies get a group of their own, whatever their size. Recruiters and job boards are left out.

## What else do Nuclei companies use?

The tool most tied to Nuclei is sqlmap. 23% of Nuclei companies use it, 121 times the usual rate for their size. Next is Nikto: 10% of these companies use it, against 0.1% of similar ones.

| Tool | Companies | Also name it | Typical | Times as common |
|---|---:|---:|---:|---:|
| sqlmap | 43 | 23% | 0.19% | 121 times |
| Nikto | 19 | 10% | 0.1% | 101 times |
| Semgrep | 32 | 17% | 0.17% | 100 times |
| Shodan | 12 | 6.5% | 0.11% | 61 times |
| Acunetix | 19 | 10% | 0.21% | 50 times |
| Ghidra | 16 | 8.6% | 0.2% | 43 times |
| Nmap | 108 | 58% | 1.4% | 42 times |
| OWASP ZAP | 54 | 29% | 0.79% | 37 times |

Shares are out of the 186 companies whose job posts name Nuclei, not counting firms whose job posts name almost every technology.

## About this data

Sumble built this page. Sumble gives sales, marketing and other GTM teams technographics and hiring signals for the companies they sell to: the technologies each company uses, which teams are hiring and for what, and who reports to whom. That helps a team know who to contact, why now, and what to say.

Sumble covers more than 3.6 million companies, 93 million job posts collected since 2022 and 194 million employee profiles, and tracks more than 37,000 technologies. It finds which technologies a company uses by reading its job posts and its employees' public profiles.

Sumble has a free plan, and the same data is available through its API and MCP server.

A company counts when its own job posts or its employees' public profiles name the technology. Hiring is that technology's share of all job posts collected each month. Quotes are copied word for word from the companies' job posts.

Every figure on this page comes from Sumble's own analysis, and you won't find it outside Sumble.