Transparency
Sources
99 enabled sources across 6 groups, polled on their own schedules. 1 degraded right now. Health is the live state of the ingestion pipeline, not a snapshot. Subscribe to everything yourself with the OPML export, or read the JSON.
| Source | Kind | Interval | Last success | 7 days | Status | ||
|---|---|---|---|---|---|---|---|
| Government & CERTs | |||||||
| CERT Polska English feed; CNA disclosures for software common in Europe. cert.pl |
CERT Polska | 6h | 9 | Healthy | |||
| CERT-EU Cyber Briefs cert.europa.eu |
CERT-EU brief | 1d | 0 | Healthy | |||
| CERT-EU Security Advisories cert.europa.eu |
CERT-EU advisory | 4h | 0 | Healthy | |||
| CERT/CC Vulnerability Notes Carnegie Mellon SEI coordinated disclosures (VU# notes). kb.cert.org |
CERT/CC note | 2h | 2 | Healthy | |||
| CIS / MS-ISAC Cybersecurity Advisories cisecurity.org |
MS-ISAC advisory | 4h | 5 | Healthy | |||
| CISA Alerts KEV additions, ICS advisory releases and emergency directives announcements. cisa.gov |
CISA alert | 30m | 5 | Healthy | |||
| CISA Cybersecurity Advisories Joint cybersecurity advisories (AA-series). Replaces the former 5.7 MB all.xml feed, which was too large to parse reliably within the Worker budget. cisa.gov |
CISA advisory | 1h | 0 | Healthy | |||
| CISA ICS Advisories Full advisory text per entry (feed is ~6 MB); body capped at 3 MB, newest entries first. Mitigation boilerplate is stripped before analysis. cisa.gov |
ICS advisory | 2h | 5 | Healthy | |||
| CISA ICS Medical Advisories cisa.gov |
ICS medical advisory | 4h | 0 | Healthy | |||
| CISA Known Exploited Vulnerabilities catalog Authoritative confirmed-exploitation signal. Additions from the past 45 days are ingested; they merge with the NVD record for the same CVE. |
KEV | 30m | 4 | Healthy | |||
| CISA Malware Analysis Reports cisa.gov |
Malware analysis report | 12h | 0 | Healthy | |||
| CISA News cisa.gov |
CISA news | 4h | 1 | Healthy | |||
| Canadian Centre for Cyber Security Alerts & Advisories Republishes vendor advisories (Citrix, Ivanti, VMware, Arista ...) for vendors that offer no feed of their own. cyber.gc.ca |
CCCS advisory | 1h | 32 | Healthy | |||
| FBI IC3 Public Service Announcements ic3.gov |
FBI PSA | 6h | 0 | Healthy | |||
| JPCERT/CC Alerts jpcert.or.jp |
JPCERT alert | 6h | 0 | Healthy | |||
| NCSC UK News ncsc.gov.uk |
NCSC UK | 4h | 0 | Healthy | |||
| Vulnerability databases | |||||||
| FIRST EPSS (Exploit Prediction Scoring System) Enrichment only, produces no items. Scores recent high-signal CVEs (KEV, CVSS >= 7, exploitation reported) once per 24 hours. |
EPSS | 1h | 0 | Healthy | |||
| NIST National Vulnerability Database (CVE API 2.0) Publication-window pagination with durable continuation. Supplies CVSS (vector and version), CWE, CNA affected data, CPE, CISA SSVC and KEV fields. Rejected CVEs are skipped. |
CVE | 1h | 3,461 | Healthy | |||
| Zero Day Initiative published advisories zerodayinitiative.com |
ZDI advisory | 2h | 57 | Healthy | |||
| Vendor advisories | |||||||
| AWS Security Bulletins aws.amazon.com |
AWS bulletin | 2h | 10 | Healthy | |||
| Apple security releases Apple has no security feed; the releases table is parsed. Only releases with published security content are kept. Replaces the developer releases RSS, which listed Xcode and TestFlight builds. |
Apple security release | 3h | 11 | Healthy | |||
| Cisco PSIRT Security Advisories sec.cloudapps.cisco.com |
Cisco advisory | 1h | 4 | Healthy | |||
| Debian Security Advisories debian.org |
Debian advisory | 3h | 15 | Healthy | |||
| Docker security blog docker.com |
Docker security | 6h | 0 | Healthy | |||
| FortiGuard Outbreak Alerts Cross-vendor alerts for vulnerabilities seen exploited at scale. filestore.fortinet.com |
Outbreak alert | 2h | 1 | Healthy | |||
| Fortinet PSIRT Advisories filestore.fortinet.com |
Fortinet PSIRT | 1h | 1 | Healthy | |||
| GitLab patch and security releases about.gitlab.com |
GitLab release | 4h | 1 | Healthy | |||
| Google Chrome Releases Dev, Beta and Canary channel posts are excluded; stable channel posts carry the security fix lists. chromereleases.googleblog.com |
Chrome release | 2h | 6 | Healthy | |||
| Google Cloud Security Bulletins cloud.google.com |
Google Cloud bulletin | 2h | 0 | Healthy | |||
| Ivanti security advisories (blog) Ivanti's forums have no feed; the corporate blog is filtered to security and patch posts. ivanti.com |
Ivanti advisory | 4h | 0 | Healthy | |||
| Jenkins Security Advisories jenkins.io |
Jenkins advisory | 6h | 1 | Healthy | |||
| Microsoft Security Response Center Feed carries ~5,000 entries (2.8 MB); the newest 200 are parsed. Revision notes update the existing record for the CVE. api.msrc.microsoft.com |
MSRC | 1h | 72 | Healthy | |||
| Mozilla Security Blog Mozilla Foundation Security Advisories have no feed; the security blog covers Firefox incidents and CA trust changes. blog.mozilla.org |
Mozilla security | 6h | 0 | Healthy | |||
| Node.js security releases nodejs.org |
Node.js security release | 6h | 0 | Healthy | |||
| PHP releases php.net |
PHP release | 6h | 0 | Healthy | |||
| Palo Alto Networks Security Advisories security.paloaltonetworks.com |
Palo Alto advisory | 1h | 1 | Healthy | |||
| Red Hat Security Advisories access.redhat.com |
Red Hat advisory | 2h | 288 | Healthy | |||
| Ubuntu Security Notices ubuntu.com |
Ubuntu notice | 2h | 5 | Healthy | |||
| Research & threat intelligence | |||||||
| Binarly REsearch binarly.io |
Binarly | 12h | 0 | Healthy | |||
| Censys research censys.com |
Censys | 12h | 3 | Healthy | |||
| Check Point Research research.checkpoint.com |
Check Point Research | 6h | 3 | Healthy | |||
| Cisco Talos Intelligence blog.talosintelligence.com |
Talos research | 4h | 6 | Healthy | |||
| Cloudflare blog (security) blog.cloudflare.com |
Cloudflare | 12h | 4 | Healthy | |||
| CrowdStrike blog Product posts are filtered by rule. crowdstrike.com |
CrowdStrike | 6h | 6 | Healthy | |||
| Datadog Security Labs securitylabs.datadoghq.com |
Datadog Security Labs | 12h | 2 | Healthy | |||
| ESET Research (WeLiveSecurity) welivesecurity.com |
ESET research | 6h | 5 | Healthy | |||
| Eclypsium eclypsium.com |
Eclypsium | 12h | 7 | Healthy | |||
| Elastic Security Labs Feed is ~8 MB with full post bodies; capped at 2.5 MB. elastic.co |
Elastic Security Labs | 12h | 1 | Healthy | |||
| FortiGuard Labs threat research feeds.fortinet.com |
FortiGuard Labs | 12h | 0 | Healthy | |||
| FortiGuard Threat Signal reports filestore.fortinet.com |
Threat signal | 6h | 1 | Healthy | |||
| GitHub Security Lab / blog github.blog |
GitHub Security | 12h | 0 | Healthy | |||
| Google Project Zero Feed carries full post bodies (~11 MB); capped at 2 MB. googleprojectzero.blogspot.com |
Project Zero | 12h | 1 | Healthy | |||
| Google Security Blog security.googleblog.com |
Research | 6h | 0 | Healthy | |||
| Google Threat Intelligence Group (Mandiant) cloudblog.withgoogle.com |
Threat intelligence | 4h | 0 | Healthy | |||
| GreyNoise Labs Internet-wide scanning telemetry; often the earliest exploitation signal. greynoise.io |
GreyNoise | 6h | 0 | Healthy | |||
| Horizon3.ai Attack Team horizon3.ai |
Horizon3 | 6h | 3 | Healthy | |||
| Huntress huntress.com |
Huntress | 6h | 5 | Healthy | |||
| Microsoft Threat Intelligence microsoft.com |
Threat intelligence | 4h | 3 | Healthy | |||
| Palo Alto Networks Unit 42 unit42.paloaltonetworks.com |
Unit 42 | 4h | 1 | Healthy | |||
| Qualys Threat Research Unit blog.qualys.com |
Qualys TRU | 6h | 3 | Healthy | |||
| Rapid7 research Metasploit release wrap-ups are excluded by rule. rapid7.com |
Rapid7 | 4h | 4 | Healthy | |||
| Recorded Future Insikt Group recordedfuture.com |
Insikt Group | 6h | 1 | Healthy | |||
| Red Canary redcanary.com |
Red Canary | 12h | 0 | Healthy | |||
| SANS Internet Storm Center isc.sans.edu |
ISC diary | 1h | 12 | Healthy | |||
| Securelist (Kaspersky GReAT) securelist.com |
Securelist | 6h | 5 | Healthy | |||
| Sekoia TDR blog.sekoia.io |
Sekoia TDR | 12h | 1 | Healthy | |||
| SentinelLABS sentinelone.com |
SentinelLABS | 12h | 1 | Healthy | |||
| Sophos X-Ops threat research news.sophos.com |
Sophos X-Ops | 6h | 3 | Healthy | |||
| Tenable Research tenable.com |
Tenable research | 6h | 4 | Healthy | |||
| The Citizen Lab citizenlab.ca |
Citizen Lab | 12h | 2 | Healthy | |||
| The DFIR Report thedfirreport.com |
The DFIR Report | 12h | 0 | Healthy | |||
| Wiz Research Product posts are filtered by rule. wiz.io |
Wiz Research | 12h | 8 | Healthy | |||
| Zero Day Initiative blog Monthly Patch Tuesday reviews and bug analyses. zerodayinitiative.com |
ZDI | 12h | 1 | Degraded: HTTP 502 | |||
| Zscaler ThreatLabz zscaler.com |
ThreatLabz | 6h | 1 | Healthy | |||
| watchTowr Labs labs.watchtowr.com |
watchTowr Labs | 6h | 0 | Healthy | |||
| News | |||||||
| Ars Technica (security) arstechnica.com |
Ars Technica | 4h | 4 | Healthy | |||
| CyberScoop cyberscoop.com |
CyberScoop | 4h | 20 | Healthy | |||
| Cybersecurity Dive cybersecuritydive.com |
Cybersecurity Dive | 4h | 12 | Healthy | |||
| Dark Reading darkreading.com |
Dark Reading | 4h | 26 | Healthy | |||
| DataBreaches.net databreaches.net |
DataBreaches.net | 6h | 27 | Healthy | |||
| Have I Been Pwned: latest breaches feeds.feedburner.com |
Breach notification | 4h | 1 | Healthy | |||
| KrebsOnSecurity krebsonsecurity.com |
KrebsOnSecurity | 2h | 0 | Healthy | |||
| Malwarebytes Labs malwarebytes.com |
Malwarebytes Labs | 6h | 16 | Healthy | |||
| Risky Business News risky.biz |
Risky Bulletin | 4h | 4 | Healthy | |||
| Schneier on Security schneier.com |
Schneier on Security | 12h | 4 | Healthy | |||
| SecurityWeek securityweek.com |
SecurityWeek | 2h | 52 | Healthy | |||
| TechCrunch Security techcrunch.com |
TechCrunch | 6h | 12 | Healthy | |||
| The Record (Recorded Future News) therecord.media |
The Record | 1h | 37 | Healthy | |||
| The Register (security) theregister.com |
The Register | 4h | 32 | Healthy | |||
| WIRED Security wired.com |
WIRED | 6h | 10 | Healthy | |||
| BleepingComputer Paused 2026-10-25: the publisher has answered every fetch from Cloudflare Worker egress with HTTP 403 since 2026-07-06. We do not route around upstream access controls. Re-enable if the publisher's policy changes. bleepingcomputer.com |
BleepingComputer | 1h | 0 | Paused | |||
| Standards & policy | |||||||
| CVE Program blog medium.com |
CVE Program | 12h | 0 | Healthy | |||
| Federal Register: cyber rules and presidential documents Rules, proposed rules and presidential documents matching "cyber". Keyword search; some entries are only tangentially about security. federalregister.gov |
Federal Register | 12h | 1 | Healthy | |||
| IETF RFC Editor Only security-relevant RFCs are kept (filter in rules.ts). rfc-editor.org |
RFC | 6h | 0 | Healthy | |||
| MITRE ATT&CK medium.com |
ATT&CK | 12h | 0 | Healthy | |||
| NCSC UK Guidance ncsc.gov.uk |
NCSC guidance | 12h | 0 | Healthy | |||
| NIST CSRC drafts open for comment Replaces the retired csrc-news.xml feed (404 since 2026-07). Final publications have no feed; drafts carry comment deadlines. csrc.nist.gov |
NIST draft open for comment | 12h | 0 | Healthy | |||
| NIST Cybersecurity Insights blog nist.gov |
NIST | 12h | 1 | Healthy | |||
| Open Source Security Foundation openssf.org |
OpenSSF | 1d | 2 | Healthy | |||
| PCI Security Standards Council Training and event posts are filtered by rule. blog.pcisecuritystandards.org |
PCI SSC | 1d | 1 | Healthy | |||
| IETF Datatracker (new drafts) Disabled: the document-changes feed is gone (404) and per-group feeds are administrative noise. Needs a working-group draft feed. datatracker.ietf.org |
Internet-Draft | 6h | never | 0 | Disabled | ||
How sources are handled
- Only official feeds, APIs and publisher pages are read, with conditional requests and the publisher's rate limits. The crawler identifies itself as
TheSecurityStandardand links here. - When a publisher blocks automated access, the source is paused and that is said plainly. Nothing is proxied or scraped around a refusal.
- Repeated failures back the source off exponentially, up to a day. HTTP 403, 404 and 410 pause polling for at least twelve hours.
- Degraded means the last fetch failed; items from earlier successful fetches remain in the archive.
- Suggest a source by opening an issue on the operator's GitHub, or send a note via the address on the about page.