Interactive app

Vulnerability Intelligence

Scan a container image, see exploit priority vs patch today vs defer — with policy rules and per-row reasons in Studio.

For: Security and platform engineers triaging container scans in chat

Local Trivy via Desktop — pass target, skip paste-JSON
Three buckets: exploit priority, patch today, defer
bucket_reason on every row — tunable policy presets
NVD + CISA KEV + EPSS enrichment in one tool call
Compare CVSS scanner rank vs composite exploit priority

Open the app Use from Claude / Cursor

Also listed on

Open-source MCP server (GitHub)

Vulnerability Intelligence scan triage workspace showing permissive_patches policy, bucket counts, and CRITICAL-in-defer explanations

python:3.13-slim under permissive_patches: 2 patch today, 101 defer, each CRITICAL defer row explained.

Try these examples

Each example opens the app pre-loaded with this query.

Scan node:20-slim (balanced)

Runs a local Trivy scan on a real Debian-based Node image and shows HIGH-tier fixes in patch_today.

Python base — permissive patches

Contrasts policy presets on a slim API base — MEDIUM pip CVEs surface only under permissive_patches.

Why is CRITICAL in defer?

Shows EPSS + fix-available gating — high CVSS does not auto-page.

Analyze one CVE

Single-CVE cross-source analysis for the regreSSHion case study.

Other ways to use Vulnerability Intelligence

Same data, different audiences.

Chat & MCP

Use the same data from Claude, Cursor or ChatGPT. AI agents can call every tool the app uses.

Open Chat & MCP

About this app

Container CVE triage and cross-source vulnerability intelligence: local Trivy scans via Desktop, NIST NVD + CISA KEV + EPSS enrichment, and explainable exploit_priority / patch_today / defer bucketing.