CERTCC / SSVC
Stakeholder-Specific Vulnerability Categorization
☆140Updated this week
Alternatives and similar repositories for SSVC:
Users that are interested in SSVC are comparing it to the libraries listed below
- A Risk-Based Prioritization Taxonomy for prioritizing CVEs (Common Vulnerabilities and Exposures).☆73Updated 10 months ago
- Enriching the NVD CVSS scores to include Temporal & Threat Metrics☆187Updated this week
- CISA CSAF Security Advisories☆66Updated this week
- ☆47Updated this week
- 🖇️ STRIDE vs. ASVS equivalence table☆76Updated 7 months ago
- The Open Threat Modeling Format (OTM) defines a platform independent way to define the threat model of any system.☆170Updated 4 months ago
- ☆16Updated last year
- ☆76Updated 5 months ago
- OWASP Foundation Web Respository☆30Updated 2 years ago
- A compilation of Software Supply Chain Security resources including initiatives, standards, regulations, organizations, vendors, tooling,…☆132Updated last year
- Documentation on the Cyber Defense Matrix☆24Updated last year
- Software Component Verification Standard (SCVS)☆142Updated 11 months ago
- A standard API specification for exchanging supply chain artifacts and intelligence☆74Updated 2 weeks ago
- ☆100Updated this week
- Mappings Explorer enables cyber defenders to understand how security controls and capabilities map onto the adversary behaviors catalogue…☆56Updated 3 weeks ago
- Exploit Prediction Scoring System (EPSS)☆25Updated 2 years ago
- Global Security Database Tools☆42Updated last year
- One Conference 2024☆108Updated 6 months ago
- Advisories, guidance, best practice documents and more issued by members of the EU CSIRTs network, a network composed of EU Member States…☆60Updated last week
- A repository containing OSCAL serializations of the CIS Critical Security Controls☆48Updated last week
- A comprehensive, systematic and actionable way to understand attacker behaviors and techniques with respect to the software supply chain☆91Updated last month
- ☆63Updated 2 years ago
- VINCE is the Vulnerability Information and Coordination Environment developed and used by the CERT Coordination Center to improve coordin…☆63Updated last week
- Mirror of cisa.gov/kev data files☆43Updated this week
- ☆86Updated 3 years ago
- Autoconfigured ELK Stack That Contains All EPSS and NVD CVE Data☆49Updated 8 months ago
- AI featured threat modeling and security review action☆43Updated 4 months ago
- These are files that a new CISO or someone introducing security to an organization can leverage to bridge the gap between security and th…☆71Updated 5 months ago
- Repository for the Open Information Security Risk Universe☆63Updated 2 years ago
- Cloud Analytics helps defenders detect attacks to their cloud infrastructure by developing behavioral analytics for cloud platforms as we…☆53Updated last year