Cve.now: A free CVE feed for agents

6 pointsposted 5 hours ago
by shcallaway

6 Comments

aurielws

4 hours ago

Wait, this is sick. Which model did you guys end up using under the hood to do all the classification for this? How did you guys think about false positive rates?

shcallaway

an hour ago

It's actually a deterministic classification system that combines classifications assigned by each of our upstream data providers. We decided that deterministic classifications based on well-defined criteria was safer and more reliable for users than yolo'ing it with AI. The summaries, however, are written by AI

ryanb

3 hours ago

This is huge, love it

cmpaul

3 hours ago

+ RSS feed and MCP server, super useful

shcallaway

5 hours ago

cve.now is a free feed of the security vulnerabilities for agents. It merges the CVE list, CISA KEV, EPSS and OSV into one entry per CVE, explains each one in plain English, and filters down to the ones that need action. Get it as RSS, JSON, an API, or an MCP server for your coding agent. No login, no signup, no API key required.