Collection operations

Source health

Collection status, provenance tier, configured cadence, and redistribution notes for every feed.

Latest run: 2026-07-18T06:54:38.000Z+0 added · 0 changed →

cisa-kev

CISA Known Exploited Vulnerabilities

Status: ok
Cadence: 6 hr
Provenance: authoritative
Failures: 0 / last 10
Last attempt: 2026-07-18T04:38:41Z

US Government public data

nvd-cves

NVD CVE API

Status: error
Cadence: 6 hr
Provenance: authoritative
Failures: 1 / last 10
Last attempt: 2026-07-18T04:38:41Z

US Government public data; optional API key increases quota

first-epss

FIRST EPSS

Status: ok
Cadence: 1 day
Provenance: authoritative
Failures: 0 / last 10
Last attempt: 2026-07-18T05:43:41Z

FIRST EPSS public API

mitre-enterprise

MITRE ATT&CK Enterprise STIX

Status: ok
Cadence: 1 day
Provenance: authoritative
Failures: 0 / last 10
Last attempt: 2026-07-18T04:42:11Z

MITRE ATT&CK Terms of Use

cisa-advisories

CISA Cybersecurity Advisories

Status: error
Cadence: 1 hr
Provenance: authoritative
Failures: 1 / last 10
Last attempt: 2026-07-18T04:42:13Z

US Government public information; endpoint may reject automated clients

cert-eu

CERT-EU Threat Intelligence

Status: ok
Cadence: 2 hr
Provenance: trusted
Failures: 0 / last 10
Last attempt: 2026-07-18T04:42:15Z

Review publisher terms before redistribution

otx-subscribed

AlienVault OTX Subscribed Pulses

Status: ok
Cadence: 2 hr
Provenance: community
Failures: 0 / last 10
Last attempt: 2026-07-18T04:42:18Z

Requires an OTX account; review OTX terms before redistributing pulse content

Professional integrations

STIX 2.1 TAXII discovery MISP feed Sigma Suricata YARA OpenIOC

Research exports

Events JSON Events CSV Indicators JSON Bibliography JSON RIS citations Daily RSS

The TAXII directory is a static read-only publication for simple HTTP clients; negotiated TAXII behavior requires a server runtime. Detection artifacts remain empty unless reviewed evidence meets publication thresholds.

Open analyst curation queue →