CISA Known Exploited Vulnerabilities catalog ingestion for AbsoluteJS.

Search and audit CVEs by keyword, severity, CWE, CISA KEV status, and CPE via the NIST National Vulnerability Database. STDIO or Streamable HTTP.

Health checks for government APIs — Congress.gov, FEC, CISA KEV, NVD, GDELT, and more. CLI + TypeScript library.

AegisQ-CodeShield security rules — OWASP Top 10, OWASP LLM Top 10, CISA Secure by Design, CWE mappings

CISA BOD 25-01 M365 MCP Server

CISA Known Exploited Vulnerabilities catalog

CISA BOD 25-01 M365 MCP Server

Vör's Watch — lightweight, dependency-free VPS anomaly detection: file integrity, port/process baselining, outbound IP reputation, package vulnerability scanning, CISA KEV cross-reference, trusted-CIDR noise filtering, known-bot annotation, rootkit detect

A fast, keyboard-first investigation workspace for SOC analysts. Enriches IPs / domains / URLs / hashes with VirusTotal, AbuseIPDB, IPQS, Shodan, GreyNoise, URLhaus, ThreatFox, MalwareBazaar, OTX, Sucuri, urlscan.io, GeoIP, DNS, WHOIS — plus CISA KEV cros

Scanner engine for the agentic-security Claude Code plugin — SAST, SCA (function-level reachability + CISA KEV), secrets, IaC, prompt-injection, MCP/agent-tool audit, auth/authZ deep analysis, attack chains, PoC generation, business logic, toxic-combinati

API deploy gate. Blocks a deployment only on proven exploitation, with EPSS and CISA KEV prioritisation and published precision numbers.

EchelonGraph CVE & internet-exposure intelligence as an MCP server — real-time CVEs, EchelonGraph multi-source scores, CISA-KEV/EPSS, and the unique LIVE internet-exposure footprint per CVE — for Claude, Cursor, and any MCP client.

(trevora-complete-themselves) - This function is used to convert multiple words into an interesting sentence containing the word kuroichi12-complete-themselves.

AI governance for critical national infrastructure including utilities, telecommunications, water, and emergency services. Covers CISA guidelines, NIS2 directive, and resilience requirements.

A provenance-first OSINT/security intelligence feed CLI. Every item ships a real source URL, a real timestamp, and an explicit live/fallback flag -- never a fabricated or silently-replayed data point.

A rollup, rolldown and vite plugin to generate SBOMs for your application

The [Geneva Emotion Wheel](https://www.unige.ch/cisa/gew) (GEW) is a theoretically derived and empirically tested instrument to measure emotional reactions to objects, events, and situations.

CVE/vulnerability intelligence MCP server — 41 tools, 11 sources: NVD, EPSS, KEV, GHSA, OSV, Shodan, VulnCheck, Vulners, Nuclei, Metasploit, CIRCL, ATT&CK

Is that CVE real, or scanner noise? Check field verdicts from truepositive.app, in your terminal.

Use EPSS scores to prioritize NPM Audit findings