ProjectDiscovery Introduces Neo Triage, Replacing Static Risk Scores with Proven Exploitability

ProjectDiscovery has introduced Neo Triage, now generally available on its Neo platform, aiming to replace static vulnerability risk scores with exploitability validated against real assets. The system reproduces each incoming finding by safely running tests from an isolated sandbox, then issues a verdict backed by the exact requests and responses. Neo Triage consolidates triage from multiple sources—including HackerOne, GitHub security advisories, security mailboxes, Wiz and Qualys—into one queue. It assigns severity based on proven impact and the asset’s context, supports fix suggestions and automatic retesting, and tracks backlog and SLA metrics. ProjectDiscovery says it reduces manual triage time dramatically for large backlogs.