Which CVEs need action now
- Scored
- 328,000+ CVEs, every one NVD publishes.
- Act now
- 900+ in the ACT band, 1,600+ on CISA KEV.
- Refresh
- Daily, plus a signed bundle every week.
- Cost
- Free with an account. Sign in with Google, GitHub, or email.
TRACK and MONITOR wait for new evidence. Your exposure and asset criticality move a CVE between bands.
Score any CVE by ID
Enrichment, the TRIS baseline, the actors seen using it, and what an attacker needs and gains. An actor appears only with documented use.
Free account, full board
Lookups and the full ACT board need a free TRIX Community account. Sign up with your email. You get 300 lookups a day in the browser, and the same account issues an API key.
Email sign-ups get a link to confirm the address before the account works. Creating an account accepts the TRIX API terms and adds you to the TRIX mailing list for new intel and product news. Every email has an unsubscribe link. Privacy policy.
Every CVE in the ACT band, ranked
Ranked by TRIS baseline, then EPSS. Filter it, or select a row for the full record.
| CVE | What it affects | TRIS | EPSS | Signals |
|---|---|---|---|---|
| Loading the board. | ||||
The signed bundle
The same intelligence as one file, published weekly and ED25519 signed. The CVEasy app imports it, including on air gapped machines.
Exploited and high severity CVEs with vendor and mechanism context, supply chain incidents, consolidated IOC sets, and public exploit availability mapped to CVE IDs.
The app checks each bundle's signature against its embedded key before importing. Outside the app, the signature and manifest ship in the package so you can verify provenance yourself.
Using this in a report or post? Cite it as "per CVEasy AI threat intel data" with a link here. No permission needed.
Weekly digest: This Week in Exposure. Chart breakdowns: CVEasy AI on LinkedIn.
Score it against your own network
Inside CVEasy, TRIS adds what only you know: what faces the internet, what it holds, and what compensates. CVE-2024-3094 scores 78 as a baseline and 86 on a critical, internet facing server.
Building on the data? The TRIX API reference has every endpoint, the limits, and examples in curl, Python and JavaScript.
CVE data from NVD. EPSS from FIRST. Known exploited status from CISA KEV. Actor names from MITRE ATT&CK and the MISP galaxy. TRIS scoring by CVEasy AI.