Custom Rules
Your own Semgrep and Nuclei rules, including generating a Nuclei rule with AI.
ScanSuite supports your own scanning rules for both static analysis (Semgrep) and dynamic analysis (Nuclei).
Creating a rule
Select the rule type — Nuclei or Semgrep — paste the rule text, and click Upload:
Viewing and editing
Select an existing rule from the drop-down menu:
Generating a Nuclei rule with AI
A Nuclei rule can be generated from a vulnerability proof-of-concept description. Paste the description, including the parts of the HTTP request and response used for detection, and click Gen with AI:
The rule is generated and pasted into the same field. Review it, amend if necessary, and click Upload:
Review generated rules before uploading. A rule that matches too broadly turns into noise on every subsequent scan, and a rule that matches nothing fails silently.
An AI provider must be configured for this — see AI providers and cost.
Semgrep rules
Semgrep rules are managed the same way, but AI rule generation is not yet supported for them:
Running the rules
To run a scan against your saved rules, choose the Custom Rules scanner in the relevant scan section — it is available for static, web and infrastructure scans.
Last reviewed 2026-08-16