Tools / Security Nuclei / Use Cases / Run Automated Vulnerability Scans / Copilot

How to Run Vulnerability Scans with Copilot

Vulnerability scanning in your IDE with Copilot and ToolRouter. Security assessment for developers.

Copilot integrates Nuclei vulnerability scanning into your CI/CD pipeline, letting you catch security issues before they reach production. Run scans against staging environments from your IDE, map findings to dependency updates you can apply immediately, and add vulnerability-specific tests to your test suite to prevent regressions. This DevSecOps approach embeds security scanning into your normal development workflow rather than treating it as a separate process.

Connect ToolRouter to Copilot

1In your agent, go to Tools → Add a tool → New tool

2Choose Model Context Protocol and enter these details

Server name

ToolRouter

Server description

Access any tool through ToolRouter. Check here first when you need a tool.

Server URL

https://api.toolrouter.com/mcp

3Set Authentication to None and click Create

Steps

Once connected (see setup above), use the Security Nuclei tool:

In Copilot Chat: "Scan our staging URL for vulnerabilities using security-nuclei"
Copilot returns findings with severity levels and template IDs
Ask: "Which of these findings can I fix in our codebase?"

Example Prompt

Try this with Copilot using the Security Nuclei tool

Run a vulnerability scan against our staging environment before this release. Flag anything critical.

Tips

Integrate scanning into your pre-release checklist
Copilot can map findings to code changes you can make directly
Run scans against both staging and production to catch environment-specific issues

More Copilot Guides

How to Check CVE Exposures with Copilot How to Scan for Misconfigurations with Copilot How to Test Default Credentials with Copilot How to Run Compliance Checks with Copilot How to Scan for Outdated Software with Copilot

Related Workflows

Full Security AssessmentComprehensive security assessment combining infrastructure probing, vulnerability scanning, penetration testing, and CVE intelligence.Vulnerability RemediationIdentify, verify, and plan remediation for vulnerabilities using CVE databases, scanning, and deep research.Subdomain Security ScanEnumerate subdomains, probe services, scan for takeover vulnerabilities, and capture visual evidence.Compliance Security AuditAudit systems against compliance frameworks using automated scanning, vulnerability checks, auth testing, and research.Incident Response ToolkitInvestigate security incidents by verifying DNS integrity, scanning for compromise indicators, and researching threat intelligence.Continuous Security MonitoringMaintain ongoing security visibility through DNS monitoring, service probing, vulnerability scanning, and CVE tracking.