Three sources
NVD records, the CISA KEV catalogue and exploit signals.
VULN NVD, CISA KEV and exploit signals
Vulnerability Intelligence
The CVE stream is fed by NVD, CISA KEV and exploit signals: a severity split, publications by year, the most common CWEs, the most affected vendors and matches against your technologies.
Screenshots are taken from a demo tenant; organisation names and data are entirely fictional.
Tens of thousands of CVEs are published every year; not all concern you. Vulnerability Intelligence intersects the technology versions found on your attack surface with the CVE stream. Those added to CISA KEV or carrying exploit signals move to the front; the "Vulnerability — critical CVE match" playbook opens a case on a CVSS 9.0+ match on a monitored asset.
What it does
Inventory matching
Detected versions are linked to CVEs — not the general stream, the list that touches you.
Trend view
Distributions by CWE, vendor and year.
What you get
- Patch order follows evidence of exploitation.
- A new critical CVE is reported with the server it affects.
- Vendor risk reads by manufacturer.
Scenarios featuring this module
Exposed admin panel on a forgotten subdomain
A subdomain left running after a marketing campaign ended stayed up on an outdated CMS version, with its panel exposed to the internet.
3 modules
Next step
What shows up on your own surface?
In a 30-minute session we run a live scan against your own domains.