criticality_score

Open Source Project Criticality Score Beta This project is maintained by members of the Securing Critical Projects WG. Goals 1. Generate a criticality score for every open source project. 2. Create a list of critical projects that the open source community depends on. 3. Use this data to...

CVE_Prioritizer

CVE Prioritizer CVE Prioritizer is a powerful tool that helps you prioritize vulnerability patching by combining CVSS, EPSS, CISA's Known Exploited Vulnerabilities and VulnCheck's community resources NVD++, KEV. It provides valuable insights into the likelihood of exploitation and the potential...

ache

ACHE Focused Crawler ACHE is a focused web crawler. It collects web pages that satisfy some specific criteria, e.g., pages that belong to a given domain or that contain a user-specified pattern. ACHE differs from generic crawlers in sense that it uses page classifiers to distinguish between...

ZeusCloud

Secure your cloud. ZeusCloud is an open source cloud security platform. Discover, prioritize, and remediate your risks in the cloud. Build an asset inventory of your AWS accounts. Discover attack paths based on public exposure, IAM, vulnerabilities, and more. Prioritize findings with graphical...

metahub

MetaHub is an automated contextual security findings enrichment and impact evaluation tool for vulnerability management. You can use it with AWS Security Hub or any ASFF-compatible security scanner. Stop relying on useless severities and switch to impact scoring definitions based on YOUR context...

tugarecon

TugaRecon TugaRecon is an advanced reconnaissance and intelligence framework that goes beyond enumeration. It observes, interprets, remembers, and reacts — transforming subdomains into architectural intelligence. 🧭 Philosophy TugaRecon is inspired by Portuguese explorers. During the 15th and 16th...

AIP

Attacker IP Prioritization AIP Tool The Attacker IP Prioritization AIP is a tool to generate efficient and economic IP blocklists based on network traffic captured from honeypot networks. With the advent of 5G, IoT devices are directly connected often without firewall protection. Therefore we nee...

vPrioritizer

Overview | How it works | Quickstart | Roadmap | Contact Me Overview As indicated by sources like vulndb & cve, on a daily basis, approximately 50 new vulnerabilities become known to industry and it’s safe to assume that count is going to increase furthermore. It’s a huge number of vulnerabilitie...

ThreatSentry-AI

ThreatSentry AI: AI-Powered Threat Hunting Tool Automate external asset discovery, intelligently enrich with multi-source data, and leverage ensemble machine learning to predict and prioritize risk. Transform alert fatigue into actionable intelligence. 🚀 Mission Statement ThreatSentry AI eliminat...

eyeballer

Eyeballer Échale un vistazo rápido a esas capturas de pantalla. Eyeballer está diseñado para pruebas de penetración de red de gran alcance donde necesitas encontrar objetivos "interesantes" de un gran conjunto de hosts basados en web. Utiliza tu herramienta de captura de pantalla favorita como...

linux-kernel-codex-harness

Kernel Codex Harness 한국어 | English Strumento di Ricerca · Importazione Originale: 3 Aprile 2026 · Revisione Documentazione: 11 Luglio 2026 Filosofia Fondamentale — Segnale Esterno Lascia che osservazioni riproducibili al di fuori dell'inferenza del modello guidino l'attenzione; non scambiare mai ...

Polar: LLM-Powered Synthesis of Real-World Cyber Evidence for Prioritization and Mitigation

Cyber threat analysis increasingly depends on evidence distributed across vendor advisories, vulnerability databases, and threat intelligence sources. Turning these fragmented observations into timely decisions requires models to connect technical severity with evolving exploitation evidence and...

CLEANSTART-2024-IW99789 Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service

Security vulnerability affects the nghttp2 package. Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service...

Autonomous Remediation Is Already Running at Enterprise Scale

The following is a guest blog by ITSPmagazine, based on their interview of Qualys President & CEO Sumedh Thakar at Black Hat USA 2026. Sumedh Thakar has watched the same clock compress for 23 years. He joined Qualys as an early software engineer on the scanner, when organizations scanned once eve...

GitHub Engagement Signals for CVE Prioritization: The GitHub Popularity Metric (GPM)

Whitepaper called GitHub Engagement Signals For CVE Prioritization: The GitHub Popularity Metric GPM...

vulntriage

VulnTriage A self-hosted correlation layer that turns raw v...

tawasolpay-risk-assistant

TawasolPay — AI-Powered Cyber Risk Assistant Takes TawasolPay...

AI Changed the Exposure Problem. Validation Needs to Change With It.

There's a lot of noise around AI and cybersecurity right now. What’s actually important is far simpler, if often lost in the hubbub. Vulnerability discovery is getting faster and happening at a much greater scale, while defenders still have to work out which findings actually deserve their action...

Vulnerability-and-Exploit-Analysis

🛡️ Vulnerability and Exploit Analysis Ethical Hacking labor...

Your Critical Vulnerabilities Might Not Be Your Biggest Risk

Security teams have become exceptionally talented at finding vulnerabilities. Now, it’s time to turn our attention to optimizing the process for determining which of those vulnerabilities actually create a path to compromise. A critical vulnerability may look alarming on a scanner report, but if ...