Vulnerability exploitability exchange.

Machine-readable advisories stating whether a known vulnerability affects a product.

Standards

  • OASIS CSAF 2.0 (including VEX profile)

OT security and software supply chain