Vulnerability intelligence, self-hosted
CVERadar
Vulnerability Intelligence Platform
Real-Time CVE Monitoring.
Actionable Vulnerability Intelligence.
CVERadar is a cybersecurity platform that tracks, analyzes, and prioritizes CVE vulnerabilities and emerging threats in real time.
Look up a CVE
Or browse the latest security alerts: new KEV entries, critical CVEs and fresh public exploits.
- Vulnerabilities tracked
- 213,367
- Known exploited (CISA KEV)
- 614
Platform
From disclosure to remediation, in one place
More than a CVE feed: CVERadar connects public vulnerability data to your assets and tells you what to fix first, and why.
-
Continuous CVE ingestion
Incremental, deduplicated sync from CVE.org, NVD, CISA KEV, FIRST EPSS and OSV, with vendor advisories layered on top.
-
Exploit intelligence
Public PoC references are tracked separately from confirmed in-the-wild exploitation, so "a PoC exists" is never confused with "attackers are using it".
Public PoC Exploited in the wild -
Asset-aware matching
Products, packages and version ranges are matched against your own inventory, so you see the vulnerabilities that actually affect you.
-
Explainable risk P0–P4
Priority combines CVSS, EPSS, KEV status, exploit maturity and asset exposure, and every score shows the factors behind it.
-
AI analysis with evidence
Local or hosted models draft analyses, mitigations and patch proposals, each citing its evidence and waiting for human approval.
-
Alerts where you work
Rule-based notifications by email, Telegram or signed webhooks when a new CVE, KEV listing or exploit hits your stack.
How it works
A pipeline you can audit end to end
Each stage records where its data came from, so every priority and recommendation can be traced back to a source.
-
01
Sources
CVE.org · NVD · KEV · EPSS · OSV
-
02
Normalize
Deduplicate & merge records
-
03
Classify
Vendors, products, versions
-
04
Exploit intel
PoC vs. exploited ITW
-
05
Risk
Explainable P0–P4
-
06
Remediate
Patch, mitigate, verify
Product
Your vulnerability intelligence dashboard
A focused, dark workspace for triage: critical CVEs, active alerts, risk and the live threat feed at a glance.
Critical CVEs
Active Alerts
Risk Score
Threat Feed
CVE Activity (last 7 days)
Top Critical CVEs
Principles
Built to be trusted by defenders
-
Free, official data sources
Core ingestion relies only on free public feeds. No paid intelligence subscription is required.
-
Self-hosted
Runs on your own server with your own database. Your inventory never leaves your infrastructure.
-
No auto-deploy of AI changes
AI output is treated as untrusted. Patches and mitigations are proposals that a human reviews and applies.
-
No exploit execution
Exploit discovery is separated from execution. CVERadar records references; it never runs downloaded exploit code.
Ready to see what affects you?
Sign in to your CVERadar instance to review today's priorities.