ssvc

An open-source, single-script CVE scanner for RMM-managed fleets. Pure PowerShell 7 — joins your RMM software inventory against NVD, CISA KEV, EPSS and SSVC to answer: is this version vulnerable, and how urgent is it?

SSVC Ore Miner - www.rapticore.com

Open-source vulnerability management orchestrator — aggregate, deduplicate, and prioritize findings from every scanner using CVSS, KEV, EPSS, SSVC, and exploit availability

A thin, read-only MCP server that brings PatrowlIntel CVE, EPSS, CISA KEV, exploit, and trending-attack data into Claude and any MCP client.

Riesgo real de un CVE, no el nominal: correlaciona CVSS, EPSS, CISA KEV y exploits públicos en una puntuación 0-100, calcula la decisión SSVC (qué hacer y en cuánto tiempo) y añade un analista LLM que investiga en internet y atribuye los actores. Todo en tu máquina, sin telemetría.

Threat-informed CVE prioritisation: from every CVE in the world to the few that matter to your organisation. Explainable CTI pipeline with KEV, EPSS, MITRE ATT&CK and STIX 2.1.

Type-safe LLM vulnerability triage on Pydantic AI + MCP. Ten typed tools (NVD, OSV, KEV, EPSS, Exploit-DB, ATT&CK, SBOM, Nmap) ground a validated TriageReport with a deterministic SSVC verdict. Red-team battery (MITRE ATLAS), reproducible scorecard, OWASP LLM + ISO 42001 mapping. Next.js frontend.

CISA Known Exploited Vulnerabilities with BOD 26-04 deadlines, SSVC prioritization, and the full ICS advisory corpus (CSAF) via MCP. Keyless. STDIO & Streamable HTTP.

Correlates every NVD CVE with CWE, CAPEC, ATT&CK, D3FEND, OWASP, CISA KEV, Vulnrichment SSVC, and EPSS, with APT links only where MITRE ATT&CK cites the CVE. Search-first web app, MCP server, daily fail-closed updates via GitHub Actions.

Agent-native CVE + bug-bounty-mechanic intelligence as a hosted MCP: ~365k CVEs fused (NVD/KEV/EPSS/OSV/SSVC) ranked exploitation-first, a fact-checker for hallucinated CVEs, and attack-mechanic transfer from ~14k disclosed reports — a memory of real mechanics to borrow and run.

Agent skill for Claude Code and OpenAI Codex that triages one CVE/GHSA/OSV id against a Python repo using RBVM: CVSS, EPSS, KEV, reachability and exposure → SSVC Deployer decision → CycloneDX/OpenVEX record Dependency-Track can ingest.

This master's thesis proposes a multidimensional vulnerability classification and remediation framework for the Software Composition Analysis (SCA) Tool at FAU, integrating CVSS, EPSS, and SSVC to prioritize vulnerabilities effectively.

Threat Intel Arbiter — org-context-aware threat prioritization. SSVC actions, ATT&CK tagging, MISP+KEV, single Go binary.

Gestión y priorización de vulnerabilidades desde SBOM CycloneDX: OSV, CISA KEV/SSVC, EPSS y NVD, plazos BOD 26-04 y VEX con justificación. .NET 10 + Blazor + PostgreSQL.

Perl extension for SSVC (Stakeholder-Specific Vulnerability Categorization)

Only verified, relevant, actionable vulnerability notices, written for the person who has to act on them. KEV replay + SSVC policy tree, proof of concept.