epss 开源项目推荐（291 个）

mukul975 /cve-mcp-server

Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK, Shodan, VirusTotal, and more.

0xMarcio /pocindex

Search public CVE proof-of-concept exploits from GitHub, Nuclei, ExploitDB, Metasploit and Vulhub, with CVSS, EPSS and CISA KEV context.

TURROKS /CVE_Prioritizer

Streamline vulnerability patching with CVSS, EPSS, and CISA's Known Exploited Vulnerabilities. Prioritize actions based on real-time threat information, gain a competitive advantage, and stay informed about the latest trends.

devops-kung-fu /bomber

Scans Software Bill of Materials (SBOMs) for security vulnerabilities

vulnersCom /api

Official Python SDK for the Vulners vulnerability-intelligence API — search CVEs, exploits and advisories (CVSS/EPSS/KEV), audit software, Linux/Windows hosts and SBOMs, and stream the whole graph. Typed sync + async clients, 100% v3-compatible, with a built-in MCP server for AI agents.

ARPSyndicate /cve-scores

EPSS & VEDAS Score Aggregator for CVEs

fatihtokus /scan2html

A Trivy plugin that scans and outputs the results (vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more) to an interactive html file.

Fazmin /cve-intel

Local security intelligence for CVE triage - 40 data sources and 41 tools, risk scores and an MCP server for AI agents, all in native Rust. Private by default.

ozanunal0 /viper

🛡️ VIPER: Stay ahead of threats with AI-driven vulnerability intelligence. Prioritize CVEs effectively using NVD, EPSS, CISA KEV, and Google Gemini insights, all on an interactive dashboard

jgamblin /CVElk

Elasticsearch and Kibana stack loaded with CVE List V5, NVD, EPSS and CISA KEV data, re-synced every 15 minutes

binareio /FastCVE

FastCVE: A Dockerized CVE search tool with API and CLI support for security vulnerability queries.

RogoLabs /VulnRadar

Hourly CVE watchlist on GitHub Actions. Put your vendors and products in watchlist.yaml and a match opens an issue with KEV and EPSS context.

mez-0 /vulnify

CVE ingestion + enrichment pipeline with an MCP server for AI agents.

jgamblin /KEV_EPSS

CISA Known Exploited Vulnerabilities catalog enriched with EPSS scores and NVD CVSS data

san3ncrypt3d /vulnometry

Measure what a vulnerability is worth to your business, not how severe it is in the abstract. Business Exposure Index scoring over NVD, EPSS, CISA KEV, OSV and GHSA.

RogoLabs /patchthisapp

The patch-first list behind patchthis.app, built from CISA KEV, Metasploit and Nuclei coverage plus high EPSS scores. Refreshed every six hours.

badchars /cve-mcp

23-tool MCP server for CVE & vulnerability intelligence. NVD, EPSS, CISA KEV, GitHub Advisory, OSV — unified in one server. Risk scoring, bulk triage, exploit search. 2 dependencies, runs with npx.

r3volved /CVEAggregate

Build a CVE library with aggregated CISA, EPSS and CVSS data

kannkyo /epss-api

EPSS(Exploit Prediction Scoring System) API client

echelongraph /echelongraph-mcp

MCP server for CVE intelligence: 16 read-only tools for CVE records, CISA KEV, EPSS history, exploits, fix guidance as sources state it, version, SBOM and lockfile checks, vendor advisories, and per-CVE exposure from Shodan data (© Shodan). Free and keyless.