Wait, this is sick. Which model did you guys end up using under the hood to do all the classification for this? How did you guys think about false positive rates?
It's actually a deterministic classification system that combines classifications assigned by each of our upstream data providers. We decided that deterministic classifications based on well-defined criteria was safer and more reliable for users than yolo'ing it with AI. The summaries, however, are written by AI
cve.now is a free feed of the security vulnerabilities for agents. It merges the CVE list, CISA KEV, EPSS and OSV into one entry per CVE, explains each one in plain English, and filters down to the ones that need action. Get it as RSS, JSON, an API, or an MCP server for your coding agent. No login, no signup, no API key required.
Wait, this is sick. Which model did you guys end up using under the hood to do all the classification for this? How did you guys think about false positive rates?
It's actually a deterministic classification system that combines classifications assigned by each of our upstream data providers. We decided that deterministic classifications based on well-defined criteria was safer and more reliable for users than yolo'ing it with AI. The summaries, however, are written by AI
This is huge, love it
+ RSS feed and MCP server, super useful
MCP is essential, haha
cve.now is a free feed of the security vulnerabilities for agents. It merges the CVE list, CISA KEV, EPSS and OSV into one entry per CVE, explains each one in plain English, and filters down to the ones that need action. Get it as RSS, JSON, an API, or an MCP server for your coding agent. No login, no signup, no API key required.