TypeScript 55.4%
Python 43.2%
SQL 1.2%
1# config/coverage/42-cyber.yaml — Cybersecurity coverage universe (2026-09-13).2# Denominator of the coverage score for the `cyber` sector: national agencies & CERTs, vulnerability databases and3# standards bodies, vendor PSIRTs, security research / threat-intel teams, bug-bounty platforms. Every domain was4# resolved on 2026-09-13; every `hints.urls` entry was fetched with curl the same day (HTTP 200, feed with items or5# HTML page containing the advisory list). Organizations whose advisory pages are blocked or JS-only (Cloudflare/Akamai6# 403, Salesforce/Angular shells, geo-blocks) are listed without hints and carry a `note` — the universe is the7# denominator, not the registry. Already monitored (config/sources.yaml + sources.d/42-cybersecurity.yaml):8# cisa nvd nist cert-cc mitre first-org ic3 circl microsoft-security apple-security android chromium cisco-security9# palo-alto-networks fortinet sentinelone sophos trend-micro zero-day-initiative tenable rapid7 crowdstrike mandiant10# ivanti broadcom atlassian yubico jamf hashicorp gitlab github kubernetes docker red-hat suse gentoo linux-kernel11# openssl wordpress osv sigstore chainguard cyclonedx spdx owasp exploit-db ransomware-live abuse-ch ncsc-uk cccs12# cert-fr cert-bund cert-eu enisa europol jpcert jvn ipa-japan ncsc-nl incibe cert-pl cert-at ccb-belgium cert-se13# si-cert cert-hr csirt-sk dnsc-romania cert-ua kisa-krcert cert-br cert-ae traficom-ncsc-fi kaspersky eset check-point14# recorded-future greynoise huntress qualys bitdefender censys shodan intel471 flashpoint socradar … and the media block.15sector: cyber16label: Cybersecurity17description: National cybersecurity agencies and CERTs, vulnerability databases and standards bodies, vendor product-security teams (PSIRT), threat-intelligence and research teams, and bug-bounty platforms whose publications move the security posture of the Web.18weight: 1.419categories: [cyber, technology]20tier: B21universes:22 - key: national-agencies-and-certs23 label: National cybersecurity agencies & CERTs/CSIRTs24 description: Government cybersecurity agencies, national CERT/CSIRT teams, EU and international bodies, sector ISACs.25 provenance: "FIRST member directory https://www.first.org/members/teams/ + ENISA CSIRTs inventory https://www.enisa.europa.eu/topics/incident-response/csirt-inventory + Wikipedia 'List of computer security incident response teams' (retrieved 2026-09-13); feeds verified with curl 2026-09-13"26 members:27 # ── North America ──28 - { name: Cybersecurity and Infrastructure Security Agency, domain: cisa.gov, country: US, importance: 3, aliases: [cisa, us-cert, ics-cert, kev, known exploited vulnerabilities, vulnrichment], hints: { github_org: cisagov, urls: [{ url: "https://www.cisa.gov/cybersecurity-advisories/all.xml", kind: security }, { url: "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json", kind: security, name: kev catalog json }] } }29 - { name: National Security Agency, domain: nsa.gov, country: US, importance: 3, aliases: [nsa, nsa cybersecurity collaboration center, ccc], hints: { github_org: nsacyber }, note: "nsa.gov returns 403 (Akamai) to non-browser clients; advisories are PDFs under /Press-Room/Cybersecurity-Advisories-Guidance/." }30 - { name: FBI Internet Crime Complaint Center, domain: ic3.gov, country: US, importance: 2, aliases: [ic3, fbi ic3, internet crime complaint center, psa], note: "PSA index is HTML behind a bot check (no RSS); already a registry source with discover rss false." }31 - { name: Federal Bureau of Investigation, domain: fbi.gov, country: US, importance: 2, aliases: [fbi, fbi cyber division] }32 - { name: CERT Coordination Center, domain: cert.org, country: US, importance: 3, aliases: [cert/cc, cert cc, sei cert, vulnerability notes, vince], hints: { urls: [{ url: "https://www.kb.cert.org/vuls/atomfeed/", kind: security }] } }33 - { name: DoD Cyber Crime Center, domain: dc3.mil, country: US, importance: 1, aliases: [dc3, dod vulnerability disclosure program, dod vdp], note: "403 (Akamai) to non-browser clients." }34 - { name: US Cyber Command, domain: cybercom.mil, country: US, importance: 1, aliases: [cybercom, uscybercom, cyber national mission force], note: "403 (Akamai) to non-browser clients." }35 - { name: Canadian Centre for Cyber Security, domain: cyber.gc.ca, country: CA, importance: 3, aliases: [cccs, cyber centre, centre canadien pour la cybersecurite, cse cyber centre], hints: { urls: [{ url: "https://www.cyber.gc.ca/api/cccs/atom/v1/get?feed=alerts_advisories&lang=en", kind: security }] } }36 - { name: CERT-MX Guardia Nacional, domain: gob.mx, country: MX, importance: 1, aliases: [cert-mx, cert mx, guardia nacional cibernetica], note: "CERT-MX publishes under gob.mx (Guardia Nacional); no dedicated domain or feed." }37 # ── Europe ──38 - { name: National Cyber Security Centre, domain: ncsc.gov.uk, country: GB, importance: 3, aliases: [ncsc, ncsc uk, ncsc-uk, gchq ncsc], hints: { urls: [{ url: "https://www.ncsc.gov.uk/api/1/services/v1/all-rss-feed.xml", kind: security }] } }39 - { name: ANSSI, domain: cyber.gouv.fr, country: FR, language: fr, importance: 3, aliases: [anssi, agence nationale de la securite des systemes d'information], note: "cyber.gouv.fr has no RSS (/actualites/feed 404); advisories are published by CERT-FR." }40 - { name: CERT-FR, domain: cert.ssi.gouv.fr, country: FR, language: fr, importance: 3, aliases: [cert-fr, certfr, cert fr, anssi cert], hints: { urls: [{ url: "https://www.cert.ssi.gouv.fr/avis/feed/", kind: security }, { url: "https://www.cert.ssi.gouv.fr/alerte/feed/", kind: security, name: alertes }] } }41 - { name: Bundesamt fur Sicherheit in der Informationstechnik, domain: bsi.bund.de, country: DE, language: de, importance: 3, aliases: [bsi, federal office for information security, bsi germany], note: "bsi.bund.de RSS endpoints return 404 (2026-09-11 and 2026-09-13); advisories flow through CERT-Bund WID." }42 - { name: CERT-Bund, domain: cert-bund.de, country: DE, language: de, importance: 3, aliases: [cert-bund, certbund, wid, warn- und informationsdienst], hints: { urls: [{ url: "https://wid.cert-bund.de/content/public/securityAdvisory/rss", kind: security }] }, note: "The WID 'rss' endpoint returns a JSON envelope (items[]), not XML." }43 - { name: Nationaal Cyber Security Centrum, domain: ncsc.nl, country: NL, importance: 3, aliases: [ncsc-nl, ncsc nl, ncsc netherlands], hints: { urls: [{ url: "https://advisories.ncsc.nl/rss/advisories", kind: security }] } }44 - { name: Centre for Cybersecurity Belgium, domain: ccb.belgium.be, country: BE, importance: 2, aliases: [ccb, cert.be, centre for cyber security belgium, ccb belgium], hints: { urls: [{ url: "https://ccb.belgium.be/advisories.xml", kind: security }] } }45 - { name: Traficom National Cyber Security Centre Finland, domain: kyberturvallisuuskeskus.fi, country: FI, importance: 2, aliases: [ncsc-fi, ncsc fi, kyberturvallisuuskeskus, cert-fi, traficom], hints: { urls: [{ url: "https://www.kyberturvallisuuskeskus.fi/feed/rss/en", kind: security }] } }46 - { name: Norwegian National Security Authority, domain: nsm.no, country: "NO", language: "no", importance: 2, aliases: [nsm, ncsc-no, ncsc norway, norcert, nasjonal sikkerhetsmyndighet], note: "nsm.no exposes no RSS (/rss and /aktuelt/rss return the HTML site or 404)." }47 - { name: CERT-SE, domain: cert.se, country: SE, language: sv, importance: 2, aliases: [cert-se, cert se, msb cert], hints: { urls: [{ url: "https://www.cert.se/feed.rss", kind: security }] } }48 - { name: Swedish Civil Contingencies Agency, domain: msb.se, country: SE, language: sv, importance: 1, aliases: [msb, myndigheten for samhallsskydd och beredskap] }49 - { name: Centre for Cyber Security Denmark, domain: cfcs.dk, country: DK, language: da, importance: 2, aliases: [cfcs, center for cybersikkerhed, ncsc denmark], note: "No RSS endpoint found (/da/rss/ serves the HTML news page)." }50 - { name: INCIBE, domain: incibe.es, country: ES, importance: 2, aliases: [incibe, incibe-cert, instituto nacional de ciberseguridad], hints: { urls: [{ url: "https://www.incibe.es/en/incibe-cert/early-warning/security-advisories/feed", kind: security }] } }51 - { name: CCN-CERT, domain: ccn-cert.cni.es, country: ES, language: es, importance: 2, aliases: [ccn-cert, ccn cert, centro criptologico nacional], note: "RSS feeds (component/obrss) return 403 to non-browser clients." }52 - { name: Agenzia per la Cybersicurezza Nazionale, domain: acn.gov.it, country: IT, language: it, importance: 2, aliases: [acn, agenzia cybersicurezza nazionale], note: "acn.gov.it/portale/rss returns 404; bulletins are published by CSIRT Italia." }53 - { name: CSIRT Italia, domain: csirt.gov.it, country: IT, language: it, importance: 2, aliases: [csirt italia, csirt-it, csirt-ita], hints: { urls: [{ url: "https://www.csirt.gov.it/contenuti/rss.xml", kind: security }] }, note: "The /contenuti/rss.xml path serves the 'Alert e Bollettini' HTML list (CVE-rich), not XML; /rss returns 403." }54 - { name: Centro Nacional de Ciberseguranca, domain: cncs.gov.pt, country: PT, language: pt, importance: 2, aliases: [cncs, cert.pt, cert-pt], note: "cncs.gov.pt/pt/rss/ returned HTTP 517 (WAF); cert.pt resolves to the same host." }55 - { name: NUKIB, domain: nukib.gov.cz, country: CZ, language: cs, importance: 2, aliases: [nukib, narodni urad pro kybernetickou a informacni bezpecnost, govcert.cz], note: "No RSS at /cs/rss/ (404)." }56 - { name: GovCERT.CZ, domain: govcert.cz, country: CZ, language: cs, importance: 1, aliases: [govcert cz, govcert-cz] }57 - { name: SK-CERT, domain: sk-cert.sk, country: SK, language: sk, importance: 2, aliases: [sk-cert, skcert, national cyber security centre sk-cert], note: "No RSS (/feed 404); csirt.sk (CSIRT.SK, governmental) is already a registry source." }58 - { name: National Security Authority Slovakia, domain: nbu.gov.sk, country: SK, language: sk, importance: 1, aliases: [nbu, narodny bezpecnostny urad] }59 - { name: CERT Polska, domain: cert.pl, country: PL, language: pl, importance: 2, aliases: [cert polska, cert.pl, cert-pl, nask cert], note: "RSS paths (/rss/, /en/rss/) return 404 on 2026-09-13; the registry uses another sensor." }60 - { name: NASK, domain: nask.pl, country: PL, language: pl, importance: 1, aliases: [nask, naukowa i akademicka siec komputerowa] }61 - { name: CSIRT GOV Poland, domain: csirt.gov.pl, country: PL, language: pl, importance: 1, aliases: [csirt gov, csirt-gov, abw csirt] }62 - { name: Estonian Information System Authority, domain: ria.ee, country: EE, importance: 2, aliases: [ria, cert-ee, cert ee, riigi infosusteemi amet], note: "No RSS (/en/rss 404)." }63 - { name: CERT.LV, domain: cert.lv, country: LV, importance: 2, aliases: [cert.lv, cert-lv, cert lv], note: "/en/feed and /lv/rss return the HTML site." }64 - { name: National Cyber Security Centre Lithuania, domain: nksc.lt, country: LT, language: lt, importance: 2, aliases: [nksc, nksc lt, cert-lt, nacionalinis kibernetinio saugumo centras], note: "RSS endpoints return 403 (Cloudflare)." }65 - { name: ENISA, domain: enisa.europa.eu, country: EU, importance: 3, aliases: [enisa, european union agency for cybersecurity, euvd, european vulnerability database], hints: { urls: [{ url: "https://euvdservices.enisa.europa.eu/api/lastvulnerabilities", kind: security, name: euvd last vulnerabilities }] }, note: "enisa.europa.eu/rss.xml returns 404; the EUVD API is public JSON." }66 - { name: CERT-EU, domain: cert.europa.eu, country: EU, importance: 3, aliases: [cert-eu, cert eu, certeu], hints: { urls: [{ url: "https://cert.europa.eu/publications/security-advisories-rss", kind: security }] } }67 - { name: Europol European Cybercrime Centre, domain: europol.europa.eu, country: EU, importance: 2, aliases: [europol, ec3, european cybercrime centre], note: "/newsroom/rss returns 404 on 2026-09-13." }68 - { name: National Cyber Security Centre Ireland, domain: ncsc.gov.ie, country: IE, importance: 2, aliases: [ncsc-ie, ncsc ie, csirt-ie], hints: { urls: [{ url: "https://www.ncsc.gov.ie/news/", kind: security }] }, note: "/news/ is the Alerts & Advisories HTML list (200+ CVEs); the RSS/ATOM links it advertises return 404." }69 - { name: National Cyber Security Centre Switzerland, domain: ncsc.admin.ch, country: CH, importance: 2, aliases: [ncsc-ch, ncsc ch, ncsc switzerland, melani, bacs], note: "RSS endpoints return 404 on 2026-09-13." }70 - { name: GovCERT.ch, domain: govcert.ch, country: CH, importance: 1, aliases: [govcert ch, govcert-ch], note: "/blog/rss.xml serves the HTML site." }71 - { name: CERT.at, domain: cert.at, country: AT, language: de, importance: 2, aliases: [cert.at, cert-at, cert at, govcert austria], hints: { urls: [{ url: "https://www.cert.at/cert-at.de.warnings.rss_2.0.xml", kind: security }] } }72 - { name: CIRCL, domain: circl.lu, country: LU, importance: 2, aliases: [circl, computer incident response center luxembourg, vulnerability-lookup, cve-search], hints: { github_org: CIRCL, urls: [{ url: "https://www.circl.lu/rss.xml", kind: security }, { url: "https://cve.circl.lu/api/last/30", kind: data, name: cve-search last }] } }73 - { name: GovCERT.lu, domain: govcert.lu, country: LU, importance: 1, aliases: [govcert lu, govcert-lu] }74 - { name: National Cyber Security Center Hungary, domain: nki.gov.hu, country: HU, language: hu, importance: 2, aliases: [nki, ncsc-hu, nemzeti kibervedelmi intezet], note: "/rss and /feed/ serve the HTML site." }75 - { name: Romanian National Cyber Security Directorate, domain: dnsc.ro, country: RO, language: ro, importance: 2, aliases: [dnsc, cert-ro, directoratul national de securitate cibernetica], hints: { urls: [{ url: "https://dnsc.ro/feed", kind: security }] } }76 - { name: CERT.hr, domain: cert.hr, country: HR, language: hr, importance: 2, aliases: [cert.hr, cert-hr, carnet cert], hints: { urls: [{ url: "https://www.cert.hr/feed/", kind: security }] } }77 - { name: SI-CERT, domain: cert.si, country: SI, importance: 2, aliases: [si-cert, si cert, cert.si], hints: { urls: [{ url: "https://www.cert.si/en/feed/", kind: security }] } }78 - { name: National CERT of Serbia, domain: cert.rs, country: RS, language: sr, importance: 1, aliases: [cert.rs, cert-rs, ratel cert], note: "/feed returns 404." }79 - { name: National CSIRT Greece, domain: csirt.gr, country: GR, language: el, importance: 1, aliases: [csirt-gr, national csirt-gr] }80 - { name: National CSIRT Cyprus, domain: csirt.cy, country: CY, language: el, importance: 1, aliases: [csirt-cy, national csirt-cy, dsa cyprus] }81 - { name: CSIRTMalta, domain: mita.gov.mt, country: MT, importance: 1, aliases: [csirtmalta, csirt malta, mita] }82 - { name: CERT-IS, domain: cert.is, country: IS, language: is, importance: 1, aliases: [cert-is, cert is, netoryggissveit] }83 - { name: CERT-UA, domain: cert.gov.ua, country: UA, language: uk, importance: 3, aliases: [cert-ua, cert ua, sssci cert], hints: { urls: [{ url: "https://cert.gov.ua/api/articles/all?page=1", kind: security }] }, note: "The articles API returns JSON with an application/xhtml+xml content-type; /articles is a JS shell." }84 - { name: USOM, domain: usom.gov.tr, country: TR, language: tr, importance: 2, aliases: [usom, tr-cert, ulusal siber olaylara mudahale merkezi], note: "/rss/*.rss paths serve the HTML homepage (no XML) on 2026-09-13." }85 - { name: Israel National Cyber Directorate, domain: cyber.gov.il, country: IL, importance: 2, aliases: [incd, israel national cyber directorate, govcert israel, cert-il], note: "gov.il returns 403 to non-browser clients." }86 - { name: NKTsKI, domain: gov-cert.ru, country: RU, language: ru, importance: 1, aliases: [nktski, nkcki, national coordination center for computer incidents, gov-cert], note: "Reachability varies by vantage point." }87 - { name: Safe-Surf FSTEC, domain: safe-surf.ru, country: RU, language: ru, importance: 1, aliases: [safe-surf, fstec safe surf], hints: { urls: [{ url: "https://safe-surf.ru/rss/", kind: news }] } }88 # ── Asia-Pacific ──89 - { name: JPCERT Coordination Center, domain: jpcert.or.jp, country: JP, importance: 3, aliases: [jpcert, jpcert/cc, jpcert cc], hints: { github_org: JPCERTCC, urls: [{ url: "https://www.jpcert.or.jp/english/rss/jpcert-en.rdf", kind: security }] } }90 - { name: National center of Incident readiness and Strategy for Cybersecurity, domain: nisc.go.jp, country: JP, language: ja, importance: 2, aliases: [nisc, ncso japan, national cybersecurity office] }91 - { name: Information-technology Promotion Agency Japan, domain: ipa.go.jp, country: JP, language: ja, importance: 2, aliases: [ipa, ipa japan, ipa security center], hints: { urls: [{ url: "https://www.ipa.go.jp/security/rss/alert.rdf", kind: security }] } }92 - { name: KrCERT/CC, domain: boho.or.kr, country: KR, language: ko, importance: 2, aliases: [krcert, krcert/cc, kisa krcert, boho], hints: { urls: [{ url: "https://www.boho.or.kr/kr/rss.do?bbsId=B0000133", kind: security }] } }93 - { name: Korea Internet & Security Agency, domain: kisa.or.kr, country: KR, language: ko, importance: 2, aliases: [kisa, korea internet and security agency] }94 - { name: National Cyber Security Center Korea, domain: ncsc.go.kr, country: KR, language: ko, importance: 1, aliases: [ncsc korea, ncsc-kr, nis ncsc] }95 - { name: CNCERT/CC, domain: cert.org.cn, country: CN, language: zh, importance: 2, aliases: [cncert, cncert/cc, national computer network emergency response technical team] }96 - { name: TWCERT/CC, domain: twcert.org.tw, country: TW, language: zh, importance: 2, aliases: [twcert, twcert/cc, taiwan computer emergency response team], hints: { urls: [{ url: "https://www.twcert.org.tw/tw/rss-104-1.xml", kind: security }] } }97 - { name: National Institute of Cyber Security Taiwan, domain: nics.nat.gov.tw, country: TW, language: zh, importance: 1, aliases: [nics, twncert, taiwan national institute of cyber security] }98 - { name: HKCERT, domain: hkcert.org, country: HK, importance: 2, aliases: [hkcert, hong kong computer emergency response team], note: "Security bulletin list requires JavaScript; RSS endpoints return 404/500." }99 - { name: Cyber Security Agency of Singapore, domain: csa.gov.sg, country: SG, importance: 2, aliases: [csa, csa singapore, singcert], hints: { urls: [{ url: "https://www.csa.gov.sg/alerts-and-advisories/alerts", kind: security }] }, note: "No RSS (404); the alerts HTML list is server-rendered." }100 - { name: CERT-In, domain: cert-in.org.in, country: IN, importance: 2, aliases: [cert-in, cert in, indian computer emergency response team], note: "Site is a JS shell (447 bytes) for non-browser clients." }101 - { name: Australian Cyber Security Centre, domain: cyber.gov.au, country: AU, importance: 3, aliases: [acsc, asd acsc, cert australia, australian signals directorate acsc], note: "cyber.gov.au drops connections from non-Australian vantage points (geo-block) — no sensor possible from the cluster." }102 - { name: Australian Signals Directorate, domain: asd.gov.au, country: AU, importance: 1, aliases: [asd, australian signals directorate] }103 - { name: National Cyber Security Centre New Zealand, domain: ncsc.govt.nz, country: NZ, importance: 2, aliases: [ncsc nz, ncsc-nz, cert nz, cert.govt.nz], note: "CERT NZ merged into the NCSC; RSS endpoints return 404." }104 - { name: National Cyber Security Agency Malaysia, domain: nacsa.gov.my, country: MY, importance: 1, aliases: [nacsa, nacsa malaysia] }105 - { name: MyCERT, domain: mycert.org.my, country: MY, importance: 2, aliases: [mycert, cybersecurity malaysia mycert], note: "Advisory pages return 403 (Cloudflare)." }106 - { name: ThaiCERT, domain: thaicert.or.th, country: TH, language: th, importance: 2, aliases: [thaicert, thai cert, etda thaicert], hints: { urls: [{ url: "https://www.thaicert.or.th/feed/", kind: security }] } }107 - { name: National Cyber Security Agency Thailand, domain: ncsa.or.th, country: TH, language: th, importance: 1, aliases: [ncsa thailand, ncsa-th] }108 - { name: Badan Siber dan Sandi Negara, domain: bssn.go.id, country: ID, language: id, importance: 2, aliases: [bssn, id-sirtii, national cyber and crypto agency indonesia], note: "/feed/ returns 403." }109 - { name: ID-SIRTII/CC, domain: idsirtii.or.id, country: ID, language: id, importance: 1, aliases: [id-sirtii, idsirtii] }110 - { name: Department of Information and Communications Technology Philippines, domain: dict.gov.ph, country: PH, importance: 1, aliases: [dict, dict philippines, cicc], note: "/feed/ returns 403 (Cloudflare)." }111 - { name: National Computer Emergency Response Team Philippines, domain: ncert.gov.ph, country: PH, importance: 1, aliases: [ncert, ncert philippines], note: "/feed/ returns 403 (Cloudflare)." }112 - { name: National Cyber Security Center Vietnam, domain: ncsc.gov.vn, country: VN, language: vi, importance: 1, aliases: [ncsc vietnam, ncsc-vn, ais vietnam] }113 - { name: VNCERT/CC, domain: vncert.gov.vn, country: VN, language: vi, importance: 1, aliases: [vncert, vncert/cc] }114 - { name: BGD e-GOV CIRT, domain: cirt.gov.bd, country: BD, importance: 1, aliases: [bgd e-gov cirt, cirt bangladesh, bd cirt] }115 - { name: Sri Lanka CERT, domain: cert.gov.lk, country: LK, importance: 1, aliases: [sri lanka cert, slcert, cert|cc sri lanka] }116 - { name: NPCERT, domain: npcert.gov.np, country: NP, importance: 1, aliases: [npcert, nepal cert] }117 - { name: Mongolia CERT, domain: cert.gov.mn, country: MN, language: mn, importance: 1, aliases: [mncert, mongolia cert] }118 - { name: mmCERT, domain: mmcert.org.mm, country: MM, importance: 1, aliases: [mmcert, myanmar cert] }119 - { name: BruCERT, domain: brucert.org.bn, country: BN, importance: 1, aliases: [brucert, brunei cert] }120 - { name: BtCIRT, domain: btcirt.bt, country: BT, importance: 1, aliases: [btcirt, bhutan cirt] }121 - { name: LaoCERT, domain: laocert.gov.la, country: LA, importance: 1, aliases: [laocert, lao cert] }122 - { name: KZ-CERT, domain: kz-cert.kz, country: KZ, language: ru, importance: 1, aliases: [kz-cert, kz cert, kazakhstan cert], note: "Site is a JS shell (1.4 kB) for non-browser clients." }123 - { name: UZCERT, domain: uzcert.uz, country: UZ, language: ru, importance: 1, aliases: [uzcert, uzbekistan cert] }124 - { name: CERT.GOV.GE, domain: cert.gov.ge, country: GE, importance: 1, aliases: [cert-ge, cert georgia, dea cert] }125 - { name: CERT.GOV.AZ, domain: cert.gov.az, country: AZ, importance: 1, aliases: [cert-az, cert azerbaijan] }126 - { name: CERT-GOV-MD, domain: cert.gov.md, country: MD, language: ro, importance: 1, aliases: [cert-gov-md, cert moldova, stisc] }127 - { name: CERT.BY, domain: cert.by, country: BY, language: ru, importance: 1, aliases: [cert.by, cert-by, cert belarus] }128 # ── Middle East & Africa ──129 - { name: National Cybersecurity Authority Saudi Arabia, domain: nca.gov.sa, country: SA, importance: 2, aliases: [nca, nca saudi, saudi national cybersecurity authority], note: "/en/rss serves the HTML site." }130 - { name: Saudi CERT, domain: cert.gov.sa, country: SA, importance: 2, aliases: [saudi cert, cert-sa, nca cert], note: "Security warnings list is a Blazor/JS app; /en/rss.xml serves HTML." }131 - { name: UAE Cybersecurity Council, domain: csc.gov.ae, country: AE, importance: 2, aliases: [csc, uae cyber security council, cybersecurity council uae], note: "csc.gov.ae did not answer HTTPS from the cluster on 2026-09-13 (DNS resolves)." }132 - { name: aeCERT, domain: cert.ae, country: AE, importance: 2, aliases: [aecert, uae cert, tdra cert] }133 - { name: National Cyber Security Agency Qatar, domain: ncsa.gov.qa, country: QA, importance: 2, aliases: [ncsa qatar, ncsa-qa, q-cert, qcert], note: "Alerts pages are a JS shell (5 kB) for non-browser clients." }134 - { name: Oman National CERT, domain: cert.gov.om, country: OM, importance: 1, aliases: [ocert, oman cert] }135 - { name: National Cyber Security Center Bahrain, domain: ncsc.gov.bh, country: BH, importance: 1, aliases: [ncsc bahrain, ncsc-bh] }136 - { name: National Cyber Security Centre Jordan, domain: ncsc.jo, country: JO, importance: 1, aliases: [ncsc jordan, ncsc-jo, jo-cert] }137 - { name: CITRA Kuwait, domain: citra.gov.kw, country: KW, importance: 1, aliases: [citra, kuwait citra, cert-kw] }138 - { name: EG-CERT, domain: egcert.eg, country: EG, importance: 1, aliases: [eg-cert, egcert, egyptian computer emergency readiness team] }139 - { name: Tunisian CERT, domain: cert.tn, country: TN, language: fr, importance: 1, aliases: [tuncert, cert-tcc, ansi tunisia] }140 - { name: DGSSI Morocco, domain: dgssi.gov.ma, country: MA, language: fr, importance: 1, aliases: [dgssi, macert, ma-cert, direction generale de la securite des systemes d'information], note: "/fr/rss.xml serves the HTML homepage (bulletin list embedded), no XML." }141 - { name: ngCERT, domain: cert.gov.ng, country: NG, importance: 1, aliases: [ngcert, nigeria cert], note: "403 (Cloudflare) to non-browser clients." }142 - { name: NITDA, domain: nitda.gov.ng, country: NG, importance: 1, aliases: [nitda, national information technology development agency] }143 - { name: National KE-CIRT/CC, domain: ke-cirt.go.ke, country: KE, importance: 1, aliases: [ke-cirt, ke-cirt/cc, kenya cirt], hints: { urls: [{ url: "https://www.ke-cirt.go.ke/feed/", kind: security }] } }144 - { name: Cybersecurity Hub South Africa, domain: cybersecurityhub.gov.za, country: ZA, importance: 1, aliases: [cybersecurity hub, csirt south africa, cert-za], note: "Returned 503 on 2026-09-13." }145 - { name: Cyber Security Authority Ghana, domain: csa.gov.gh, country: GH, importance: 1, aliases: [csa ghana, cert-gh] }146 - { name: National Cyber Security Authority Rwanda, domain: cyber.gov.rw, country: RW, importance: 1, aliases: [ncsa rwanda, rw-csirt] }147 - { name: TZ-CERT, domain: tzcert.go.tz, country: TZ, importance: 1, aliases: [tz-cert, tanzania cert] }148 - { name: Uganda National CERT, domain: cert.ug, country: UG, importance: 1, aliases: [cert.ug, cert-ug, uganda cert] }149 - { name: CERT-MU, domain: cert-mu.govmu.org, country: MU, importance: 1, aliases: [cert-mu, mauritius cert] }150 # ── Latin America ──151 - { name: CERT.br, domain: cert.br, country: BR, language: pt, importance: 2, aliases: [cert.br, cert-br, cert br, nic.br cert], hints: { urls: [{ url: "https://cert.br/rss/certbr-rss.xml", kind: news }] } }152 - { name: CTIR Gov, domain: ctir.gov.br, country: BR, language: pt, importance: 1, aliases: [ctir gov, ctir.gov.br, gsi ctir] }153 - { name: CSIRT Gobierno de Chile, domain: csirt.gob.cl, country: CL, language: es, importance: 2, aliases: [csirt chile, csirt gob cl, csirt de gobierno], note: "Feeds and alert pages return 403 (Cloudflare)." }154 - { name: ColCERT, domain: colcert.gov.co, country: CO, language: es, importance: 1, aliases: [colcert, grupo de respuesta a emergencias ciberneticas de colombia], note: "Site is a JS shell (402 bytes) for non-browser clients." }155 - { name: CERT.ar, domain: cert.ar, country: AR, language: es, importance: 1, aliases: [cert.ar, cert-ar, arcert] }156 - { name: PeCERT, domain: pecert.gob.pe, country: PE, language: es, importance: 1, aliases: [pecert, pe-cert, peru cert] }157 - { name: EcuCERT, domain: ecucert.gob.ec, country: EC, language: es, importance: 1, aliases: [ecucert, ecuador cert] }158 - { name: CERTuy, domain: cert.uy, country: UY, language: es, importance: 1, aliases: [certuy, cert-uy, agesic certuy] }159 - { name: CERT-PY, domain: cert.gov.py, country: PY, language: es, importance: 1, aliases: [cert-py, cert paraguay, mitic cert] }160 - { name: VenCERT, domain: vencert.gob.ve, country: VE, language: es, importance: 1, aliases: [vencert, venezuela cert] }161 - { name: CSIRT-RD, domain: csirt.gob.do, country: DO, language: es, importance: 1, aliases: [csirt-rd, csirt dominican republic] }162 - { name: CSIRT-CR, domain: micitt.go.cr, country: CR, language: es, importance: 1, aliases: [csirt-cr, micitt, costa rica csirt] }163 - { name: TT-CSIRT, domain: ttcsirt.gov.tt, country: TT, importance: 1, aliases: [tt-csirt, trinidad and tobago csirt] }164 - { name: CIRT.GY, domain: cirt.gy, country: GY, importance: 1, aliases: [cirt.gy, guyana cirt] }165 # ── International bodies & ISACs ──166 - { name: International Telecommunication Union, domain: itu.int, country: INT, importance: 2, aliases: [itu, itu-d cybersecurity, global cybersecurity index] }167 - { name: INTERPOL, domain: interpol.int, country: INT, importance: 2, aliases: [interpol, interpol cybercrime directorate, interpol global complex for innovation] }168 - { name: NATO Cooperative Cyber Defence Centre of Excellence, domain: ccdcoe.org, country: INT, importance: 2, aliases: [ccdcoe, nato ccdcoe, locked shields, cycon], note: "/feed/ returns 404." }169 - { name: Global Forum on Cyber Expertise, domain: thegfce.org, country: INT, importance: 1, aliases: [gfce, global forum on cyber expertise] }170 - { name: CyberPeace Institute, domain: cyberpeaceinstitute.org, country: INT, importance: 1, aliases: [cyberpeace institute] }171 - { name: FS-ISAC, domain: fsisac.com, country: US, importance: 2, aliases: [fs-isac, financial services information sharing and analysis center] }172 - { name: Health-ISAC, domain: h-isac.org, country: US, importance: 1, aliases: [h-isac, health-isac, health isac], hints: { urls: [{ url: "https://h-isac.org/feed/", kind: news }] } }173 - { name: Auto-ISAC, domain: automotiveisac.com, country: US, importance: 1, aliases: [auto-isac, automotive isac] }174 - { name: NERC E-ISAC, domain: nerc.com, country: US, importance: 1, aliases: [nerc, e-isac, electricity information sharing and analysis center, nerc cip] }175 - key: vulnerability-databases-and-standards176 label: Vulnerability databases, scoring systems & security standards bodies177 description: CVE ecosystem, exploit and advisory databases, scoring systems, supply-chain security frameworks and standards organizations.178 provenance: "CVE Program partners https://www.cve.org/PartnerInformation/ListofPartners + OpenSSF / OWASP / CIS / FIRST official sites + Wikipedia 'Vulnerability database' (retrieved 2026-09-13); feeds verified with curl 2026-09-13"179 members:180 - { name: National Institute of Standards and Technology, domain: nist.gov, country: US, importance: 3, aliases: [nist, nvd, national vulnerability database, nccoe, cybersecurity framework, csf, sp 800-53, fips], hints: { github_org: usnistgov, urls: [{ url: "https://services.nvd.nist.gov/rest/json/cves/2.0?resultsPerPage=200", kind: security, name: nvd cve api }, { url: "https://www.nist.gov/blogs/cybersecurity-insights/rss.xml", kind: blog }] }, note: "NVD RSS feeds were retired (404); the REST API 2.0 is the source. nccoe.nist.gov returns 403 to non-browser clients." }181 - { name: MITRE, domain: mitre.org, country: US, importance: 3, aliases: [mitre, mitre att&ck, attack, cwe, common weakness enumeration, capec, d3fend, caldera, engenuity], hints: { github_org: mitre, github_repos: [mitre/cti, mitre-attack/attack-stix-data] }, note: "mitre.org RSS returns 403 (Akamai); attack.mitre.org and cwe.mitre.org are static HTML." }182 - { name: CVE Program, domain: cve.org, country: US, importance: 3, aliases: [cve, cve.org, cve program, cve list, cna, cve numbering authority, cve records], hints: { github_org: CVEProject, github_repos: [CVEProject/cvelistV5, CVEProject/cve-schema] }, note: "www.cve.org is an Angular shell (880 bytes); the Services API (cveawg.mitre.org) requires CNA credentials for listing; the cvelistV5 GitHub mirror is the public feed." }183 - { name: FIRST, domain: first.org, country: INT, importance: 3, aliases: [first, forum of incident response and security teams, epss, exploit prediction scoring system, cvss, tlp, traffic light protocol], hints: { github_org: FIRSTdotorg, urls: [{ url: "https://api.first.org/data/v1/epss?days=1&limit=100", kind: security, name: epss daily }, { url: "https://www.first.org/newsroom/releases/rss.xml", kind: press }] } }184 - { name: OSV, domain: osv.dev, country: US, importance: 3, aliases: [osv, open source vulnerabilities, osv.dev, osv-scanner, osv schema], hints: { github_repos: [google/osv.dev, google/osv-scanner, ossf/osv-schema] }, note: "Query API is POST-only; the web front end is server-rendered HTML." }185 - { name: GitHub, domain: github.com, country: US, importance: 3, aliases: [github, github advisory database, ghsa, github security lab, dependabot, codeql, npm advisories], hints: { github_org: github, github_repos: [github/advisory-database], status_url: "https://www.githubstatus.com", urls: [{ url: "https://github.com/advisories", kind: security }, { url: "https://github.com/github/advisory-database/commits/main.atom", kind: security, name: advisory database commits }] } }186 - { name: Snyk, domain: snyk.io, country: US, importance: 2, aliases: [snyk, snyk vulnerability database, snyk labs, snyk security], hints: { github_org: snyk, status_url: "https://status.snyk.io", urls: [{ url: "https://security.snyk.io/vuln", kind: security }, { url: "https://snyk.io/blog/feed/", kind: blog }] } }187 - { name: VulnCheck, domain: vulncheck.com, country: US, importance: 2, aliases: [vulncheck, vulncheck kev, nvd++, vulncheck xdb], hints: { github_org: vulncheck-oss, status_url: "https://status.vulncheck.com" }, note: "Data APIs require an API key; the KEV/XDB indexes are gated." }188 - { name: Vulners, domain: vulners.com, country: US, importance: 2, aliases: [vulners, vulners database], hints: { urls: [{ url: "https://vulners.com/rss.xml", kind: security }] } }189 - { name: Exploit Database, domain: exploit-db.com, country: US, importance: 2, aliases: [exploit-db, exploitdb, edb, google hacking database, ghdb, searchsploit], hints: { github_repos: [offensive-security/exploitdb], urls: [{ url: "https://www.exploit-db.com/rss.xml", kind: security }] } }190 - { name: OffSec, domain: offsec.com, country: US, importance: 1, aliases: [offsec, offensive security, kali linux, oscp] }191 - { name: Zero Day Initiative, domain: zerodayinitiative.com, country: US, importance: 3, aliases: [zdi, zero day initiative, trend micro zdi], hints: { urls: [{ url: "https://www.zerodayinitiative.com/rss/published/", kind: security }, { url: "https://www.zerodayinitiative.com/rss/upcoming/", kind: security, name: upcoming advisories }] } }192 - { name: Packet Storm Security, domain: packetstormsecurity.com, country: US, importance: 2, aliases: [packet storm, packetstorm, packet storm security], note: "Homepage renders (file list) but the RSS host rss.packetstormsecurity.com does not resolve and deep pages sit behind a TOS wall (2026-09-11)." }193 - { name: Openwall, domain: openwall.com, country: US, importance: 2, aliases: [openwall, oss-security, oss-sec, john the ripper, linux-distros list], hints: { urls: [{ url: "https://www.openwall.com/lists/oss-security/", kind: security, name: oss-security archive }] } }194 - { name: OWASP Foundation, domain: owasp.org, country: US, importance: 2, aliases: [owasp, owasp top 10, owasp zap, zaproxy, asvs, dependency-check, cheat sheet series], hints: { github_org: OWASP }, note: "owasp.org/feed.xml returns 404; the site is generated from GitHub." }195 - { name: Center for Internet Security, domain: cisecurity.org, country: US, importance: 2, aliases: [cis, center for internet security, cis benchmarks, cis controls, ms-isac, multi-state isac, ei-isac], hints: { urls: [{ url: "https://www.cisecurity.org/feed/advisories", kind: security }] } }196 - { name: SANS Internet Storm Center, domain: sans.edu, country: US, importance: 2, aliases: [sans isc, internet storm center, isc diary, dshield, isc stormcast], hints: { urls: [{ url: "https://isc.sans.edu/rssfeed_full.xml", kind: security }] } }197 - { name: SANS Institute, domain: sans.org, country: US, importance: 1, aliases: [sans, sans institute, giac, sans newsbites], note: "/blog/feed/ returns 404." }198 - { name: OpenSSF, domain: openssf.org, country: INT, importance: 2, aliases: [openssf, open source security foundation, scorecard, sigstore, slsa, osv schema, alpha-omega], hints: { github_org: ossf, urls: [{ url: "https://openssf.org/feed/", kind: blog }] } }199 - { name: Sigstore, domain: sigstore.dev, country: INT, importance: 2, aliases: [sigstore, cosign, fulcio, rekor, gitsign], hints: { github_org: sigstore }, note: "blog.sigstore.dev/rss/ returns 404." }200 - { name: SLSA, domain: slsa.dev, country: INT, importance: 1, aliases: [slsa, supply-chain levels for software artifacts], hints: { github_repos: [slsa-framework/slsa] } }201 - { name: CycloneDX, domain: cyclonedx.org, country: INT, importance: 2, aliases: [cyclonedx, owasp cyclonedx, sbom, vex, bom], hints: { github_org: CycloneDX } }202 - { name: SPDX, domain: spdx.dev, country: INT, importance: 2, aliases: [spdx, software package data exchange, spdx license list], hints: { github_org: spdx, urls: [{ url: "https://spdx.dev/feed/", kind: news }] } }203 - { name: OASIS Open, domain: oasis-open.org, country: US, importance: 2, aliases: [oasis, oasis open, csaf, common security advisory framework, stix, taxii, openc2, sarif], hints: { github_org: oasis-tcs } }204 - { name: PCI Security Standards Council, domain: pcisecuritystandards.org, country: US, importance: 2, aliases: [pci ssc, pci dss, pci security standards council, pci], hints: { urls: [{ url: "https://blog.pcisecuritystandards.org/rss.xml", kind: blog }] } }205 - { name: International Organization for Standardization, domain: iso.org, country: INT, importance: 2, aliases: [iso, iso/iec jtc 1/sc 27, iso 27001, iso/iec 27001, iec], note: "iso.org returns 403 (Cloudflare) to non-browser clients." }206 - { name: Cloud Security Alliance, domain: cloudsecurityalliance.org, country: US, importance: 1, aliases: [csa, cloud security alliance, ccm, cloud controls matrix, star registry], hints: { urls: [{ url: "https://cloudsecurityalliance.org/blog/feed", kind: blog }] } }207 - { name: Internet Engineering Task Force, domain: ietf.org, country: INT, importance: 2, aliases: [ietf, rfc, rfc editor, tls working group, security area directorate] }208 - { name: CA/Browser Forum, domain: cabforum.org, country: INT, importance: 1, aliases: [ca/browser forum, cabforum, cab forum, baseline requirements], note: "/feed/ returns 404." }209 - { name: FIDO Alliance, domain: fidoalliance.org, country: US, importance: 1, aliases: [fido alliance, fido2, webauthn, passkeys], hints: { urls: [{ url: "https://fidoalliance.org/feed/", kind: news }] } }210 - { name: Common Criteria Portal, domain: commoncriteriaportal.org, country: INT, importance: 1, aliases: [common criteria, ccra, cc portal, eal], note: "Homepage is a 154-byte JS shell for non-browser clients." }211 - { name: JVN, domain: jvn.jp, country: JP, language: ja, importance: 2, aliases: [jvn, japan vulnerability notes, jvn ipedia, jvndb], hints: { urls: [{ url: "https://jvn.jp/rss/jvn.rdf", kind: security }] } }212 - { name: CNNVD, domain: cnnvd.org.cn, country: CN, language: zh, importance: 1, aliases: [cnnvd, china national vulnerability database of information security], note: "Not fetched from the cluster; JS-heavy portal." }213 - { name: CNVD, domain: cnvd.org.cn, country: CN, language: zh, importance: 1, aliases: [cnvd, china national vulnerability database], note: "Not fetched from the cluster; JS-heavy portal." }214 - { name: FSTEC BDU, domain: fstec.ru, country: RU, language: ru, importance: 1, aliases: [fstec, bdu, bdu fstec, data security threats database], note: "Not fetched from the cluster." }215 - { name: VulDB, domain: vuldb.com, country: CH, importance: 2, aliases: [vuldb, vulnerability database vuldb, scip vuldb], hints: { urls: [{ url: "https://vuldb.com/?rss.recent", kind: security }] }, note: "HTML pages return 403 to non-browser clients; the RSS endpoint works." }216 - { name: CVE Details, domain: cvedetails.com, country: US, first_party: false, importance: 1, aliases: [cvedetails, cve details, securityscorecard cvedetails], note: "403 (Cloudflare) to non-browser clients." }217 - { name: AttackerKB, domain: attackerkb.com, country: US, importance: 1, aliases: [attackerkb, rapid7 attackerkb], hints: { urls: [{ url: "https://attackerkb.com/", kind: security }] } }218 - { name: Metasploit, domain: metasploit.com, country: US, importance: 2, aliases: [metasploit, metasploit framework, msf], hints: { github_repos: [rapid7/metasploit-framework] } }219 - { name: Wordfence, domain: wordfence.com, country: US, importance: 2, aliases: [wordfence, wordfence intelligence, defiant], hints: { urls: [{ url: "https://www.wordfence.com/feed/", kind: security }] } }220 - { name: Patchstack, domain: patchstack.com, country: EE, importance: 2, aliases: [patchstack, patchstack vulnerability database], hints: { urls: [{ url: "https://patchstack.com/feed/", kind: security }] } }221 - { name: WPScan, domain: wpscan.com, country: GB, importance: 1, aliases: [wpscan, wpvulndb, wordpress vulnerability database], hints: { github_org: wpscanteam, urls: [{ url: "https://wpscan.com/feed/", kind: security }] } }222 - { name: Sonatype, domain: sonatype.com, country: US, importance: 2, aliases: [sonatype, oss index, nexus repository, maven central, nexus lifecycle], hints: { github_org: sonatype, urls: [{ url: "https://www.sonatype.com/blog/rss.xml", kind: blog }] } }223 - { name: RustSec, domain: rustsec.org, country: INT, importance: 1, aliases: [rustsec, rustsec advisory database, cargo-audit], hints: { github_repos: [rustsec/advisory-db], urls: [{ url: "https://rustsec.org/feed.xml", kind: security }] } }224 - { name: OpenCVE, domain: opencve.io, country: FR, importance: 1, aliases: [opencve], hints: { github_repos: [opencve/opencve] } }225 - key: vendor-psirts226 label: Vendor product-security teams (PSIRT) & advisory feeds227 description: Software, hardware, network, industrial, IoT, automotive and medical-device vendors that publish security advisories.228 provenance: "CISA KEV vendor column https://www.cisa.gov/known-exploited-vulnerabilities-catalog + CVE Program CNA list https://www.cve.org/PartnerInformation/ListofPartners + FIRST PSIRT members (retrieved 2026-09-13); advisory URLs verified with curl 2026-09-13"229 members:230 # ── Platform & software majors ──231 - { name: Microsoft, domain: microsoft.com, country: US, importance: 3, aliases: [microsoft, msrc, microsoft security response center, patch tuesday, windows, azure, office, exchange, .net, dotnet, microsoft threat intelligence, mstic, defender], hints: { github_org: microsoft, cik: "789019", ticker: MSFT, urls: [{ url: "https://api.msrc.microsoft.com/update-guide/rss", kind: security }, { url: "https://www.microsoft.com/en-us/security/blog/feed/", kind: blog }] } }232 - { name: Apple, domain: apple.com, country: US, importance: 3, aliases: [apple, apple security releases, ios, macos, safari, webkit, apple product security, apple security engineering], hints: { github_org: apple, cik: "320193", ticker: AAPL, urls: [{ url: "https://support.apple.com/en-us/100100", kind: security }] } }233 - { name: Google, domain: google.com, country: US, importance: 3, aliases: [google, alphabet, chrome, chrome releases, google cloud, gcp, gke, google security blog, fitbit, nest, google play protect, project zero], hints: { github_org: google, cik: "1652044", ticker: GOOGL, urls: [{ url: "https://cloud.google.com/feeds/google-cloud-security-bulletins.xml", kind: security, name: google cloud security bulletins }, { url: "https://chromereleases.googleblog.com/feeds/posts/default", kind: releases, name: chrome releases }, { url: "https://security.googleblog.com/feeds/posts/default", kind: blog }] } }234 - { name: Android Open Source Project, domain: android.com, country: US, importance: 3, aliases: [android, aosp, android security bulletin, pixel update bulletin], hints: { urls: [{ url: "https://source.android.com/docs/security/bulletin", kind: security }] } }235 - { name: Chromium Projects, domain: chromium.org, country: US, importance: 2, aliases: [chromium, chromium security, chromeos, v8], hints: { github_org: chromium } }236 - { name: Mozilla, domain: mozilla.org, country: US, importance: 3, aliases: [mozilla, firefox, thunderbird, mfsa, mozilla foundation security advisories, nss], hints: { github_org: mozilla, urls: [{ url: "https://www.mozilla.org/en-US/security/advisories/", kind: security }, { url: "https://blog.mozilla.org/security/feed/", kind: blog }] } }237 - { name: Adobe, domain: adobe.com, country: US, importance: 3, aliases: [adobe, adobe psirt, acrobat, reader, coldfusion, adobe commerce, magento, adobe experience manager, aem], hints: { cik: "796343", ticker: ADBE }, note: "helpx.adobe.com/security returns 403 (Akamai) to non-browser clients (also on 2026-09-11)." }238 - { name: Oracle, domain: oracle.com, country: US, importance: 3, aliases: [oracle, critical patch update, cpu, oracle security alert, java, mysql, weblogic, oracle linux, virtualbox, oracle health, cerner], hints: { cik: "1341439", ticker: ORCL, urls: [{ url: "https://www.oracle.com/ocom/groups/public/@otn/documents/webcontent/rss-otn-sec.xml", kind: security }, { url: "https://www.oracle.com/security-alerts/", kind: security }] } }239 - { name: SAP, domain: sap.com, country: DE, importance: 3, aliases: [sap, sap security notes, sap patch day, sap netweaver, s/4hana, hana], hints: { ticker: SAP }, note: "Security Notes news page is JS-rendered (support.sap.com); the Security Notes API requires an S-user." }240 - { name: IBM, domain: ibm.com, country: US, importance: 3, aliases: [ibm, ibm psirt, ibm security bulletins, ibm x-force, websphere, db2, aix, qradar, hcl], hints: { github_org: IBM, cik: "51143", ticker: IBM }, note: "IBM Product Security Central (/support/pages/bulletin/) is an Angular shell; the old PSIRT blog feed redirects to it." }241 - { name: Cisco, domain: cisco.com, country: US, importance: 3, aliases: [cisco, cisco psirt, cisco security advisories, ios xe, asa, ftd, webex, meraki, appdynamics, snort], hints: { github_org: cisco, cik: "858877", ticker: CSCO, urls: [{ url: "https://sec.cloudapps.cisco.com/security/center/psirtrss20/CiscoSecurityAdvisory.xml", kind: security }] } }242 - { name: Juniper Networks, domain: juniper.net, country: US, importance: 3, aliases: [juniper, juniper sirt, junos, jsa, juniper security advisories, mist], hints: { cik: "1043604", ticker: JNPR }, note: "Security advisories live in a Salesforce Knowledge portal (supportportal.juniper.net, JS shell); advisory.juniper.net is a redirect stub." }243 - { name: Arista Networks, domain: arista.com, country: US, importance: 2, aliases: [arista, arista eos, arista security advisories, untangle], hints: { cik: "1596532", ticker: ANET }, note: "arista.com returns 406 to non-browser clients." }244 - { name: Palo Alto Networks, domain: paloaltonetworks.com, country: US, importance: 3, aliases: [palo alto networks, pan-os, panos, globalprotect, prisma, cortex, unit 42, unit42], hints: { cik: "1327567", ticker: PANW, status_url: "https://status.paloaltonetworks.com", urls: [{ url: "https://security.paloaltonetworks.com/rss.xml", kind: security }, { url: "https://unit42.paloaltonetworks.com/feed/", kind: blog, name: unit 42 }] } }245 - { name: Fortinet, domain: fortinet.com, country: US, importance: 3, aliases: [fortinet, fortiguard psirt, fortios, fortigate, fortimanager, forticlient, fortiweb], hints: { cik: "1262039", ticker: FTNT, urls: [{ url: "https://filestore.fortinet.com/fortiguard/rss/ir.xml", kind: security, name: psirt advisories }] } }246 - { name: Check Point Software, domain: checkpoint.com, country: IL, importance: 3, aliases: [check point, checkpoint, check point research, cpr, quantum gateway, harmony, infinity], hints: { ticker: CHKP, urls: [{ url: "https://advisories.checkpoint.com/", kind: security }, { url: "https://research.checkpoint.com/feed/", kind: blog, name: check point research }] } }247 - { name: SonicWall, domain: sonicwall.com, country: US, importance: 3, aliases: [sonicwall, sonicwall psirt, sonicos, sma, global management system], note: "psirt.global.sonicwall.com is a JS shell (729 bytes) — no static advisory list." }248 - { name: WatchGuard, domain: watchguard.com, country: US, importance: 2, aliases: [watchguard, watchguard psirt, fireware, firebox], hints: { urls: [{ url: "https://www.watchguard.com/wgrd-psirt/advisories", kind: security }] } }249 - { name: Sophos, domain: sophos.com, country: GB, importance: 3, aliases: [sophos, sophos firewall, xg firewall, intercept x, sophos x-ops, sophos ctu, secureworks], note: "sophos.com timed out (TLS handshake) from the cluster on 2026-09-13; advisories at /en-us/security-advisories were verified on 2026-09-11 in the registry." }250 - { name: Barracuda Networks, domain: barracuda.com, country: US, importance: 2, aliases: [barracuda, barracuda esg, email security gateway, barracuda waf], note: "Trust-center security advisories page is a JS shell." }251 - { name: Zyxel, domain: zyxel.com, country: TW, importance: 2, aliases: [zyxel, zyxel security advisories, zyxel networks, nebula], hints: { urls: [{ url: "https://www.zyxel.com/global/en/support/security-advisories", kind: security }] } }252 - { name: Netgear, domain: netgear.com, country: US, importance: 2, aliases: [netgear, netgear security advisories, orbi, nighthawk], hints: { ticker: NTGR, urls: [{ url: "https://www.netgear.com/about/security/", kind: security }] } }253 - { name: TP-Link, domain: tp-link.com, country: CN, importance: 2, aliases: [tp-link, tplink, omada, archer, tapo, kasa], hints: { urls: [{ url: "https://www.tp-link.com/us/press/security-advisory/", kind: security }] } }254 - { name: D-Link, domain: dlink.com, country: TW, importance: 2, aliases: [d-link, dlink, d-link security announcements], hints: { urls: [{ url: "https://supportannouncement.us.dlink.com/security/", kind: security }] } }255 - { name: Ubiquiti, domain: ui.com, country: US, importance: 2, aliases: [ubiquiti, ubnt, unifi, edgerouter, airmax, ubiquiti security advisory bulletins], hints: { ticker: UI }, note: "community.ui.com/releases is a JS shell; security bulletins are Zendesk help-center articles." }256 - { name: MikroTik, domain: mikrotik.com, country: LV, importance: 2, aliases: [mikrotik, routeros, routerboard, winbox], hints: { urls: [{ url: "https://mikrotik.com/download/changelogs", kind: changelog }] } }257 - { name: Huawei, domain: huawei.com, country: CN, importance: 2, aliases: [huawei, huawei psirt, harmonyos, huawei cloud, emui], hints: { urls: [{ url: "https://www.huawei.com/en/rss-feeds/psirt/rss", kind: security }] } }258 - { name: ZTE, domain: zte.com.cn, country: CN, importance: 1, aliases: [zte, zte psirt, zte security bulletins], note: "Security bulletin pages return a browser-version wall / 404 to non-browser clients." }259 - { name: Nokia, domain: nokia.com, country: FI, importance: 2, aliases: [nokia, nokia psirt, nokia deepfield, alcatel-lucent enterprise, nokia product security advisory], hints: { ticker: NOK, urls: [{ url: "https://www.nokia.com/about-us/security-and-privacy/product-security-advisory/", kind: security }] } }260 - { name: Ericsson, domain: ericsson.com, country: SE, importance: 2, aliases: [ericsson, ericsson psirt, cradlepoint], hints: { ticker: ERIC }, note: "PSIRT bulletins return 403 (Cloudflare) to non-browser clients." }261 - { name: F5, domain: f5.com, country: US, importance: 3, aliases: [f5, f5 networks, big-ip, bigip, nginx plus, myf5, f5 labs, k000], hints: { cik: "1048695", ticker: FFIV, urls: [{ url: "https://www.f5.com/labs/rss-feeds/all.xml", kind: blog, name: f5 labs }] }, note: "MyF5 security advisories (my.f5.com) are a Salesforce shell (404 to non-browser clients)." }262 - { name: Citrix, domain: citrix.com, country: US, importance: 3, aliases: [citrix, cloud software group, netscaler, netscaler adc, citrix gateway, xenapp, citrix bleed, ctx], note: "support.citrix.com security bulletins (incl. the RSS path) are a JS shell (8 kB)." }263 - { name: VMware, domain: vmware.com, country: US, importance: 3, aliases: [vmware, vmsa, vmware security advisories, vcenter, esxi, vsphere, workspace one, horizon, tanzu, spring by vmware], note: "vmware.com/security/advisories is a title-only JS shell; advisories moved to support.broadcom.com (JS-rendered)." }264 - { name: Broadcom, domain: broadcom.com, country: US, importance: 3, aliases: [broadcom, broadcom support portal, symantec, carbon black, ca technologies, brocade, vmware by broadcom, velocloud], hints: { cik: "1730168", ticker: AVGO }, note: "support.broadcom.com/web/ecx/security-advisory is JS-rendered (bot challenge markers)." }265 - { name: Ivanti, domain: ivanti.com, country: US, importance: 3, aliases: [ivanti, ivanti connect secure, pulse secure, ivanti epmm, mobileiron, ivanti endpoint manager, avalanche, ivanti security advisory], note: "Security advisory list (forums.ivanti.com Salesforce, ivanti.com/blog/topics/security-advisory) is JS-rendered — 'No results found' without JavaScript." }266 - { name: Progress Software, domain: progress.com, country: US, importance: 3, aliases: [progress, progress software, moveit, moveit transfer, whatsup gold, telerik, kemp loadmaster, sitefinity, chef], hints: { cik: "876167", ticker: PRGS }, note: "progress.com/security is a general Trust Center page; product advisories are Community (Salesforce) articles." }267 - { name: Veeam, domain: veeam.com, country: US, importance: 3, aliases: [veeam, veeam backup & replication, veeam one, veeam kb], note: "Knowledge base security list is JS-rendered (bot challenge markers); /kb-rss returns 404." }268 - { name: Commvault, domain: commvault.com, country: US, importance: 2, aliases: [commvault, metallic, commvault security advisories], hints: { ticker: CVLT, urls: [{ url: "https://documentation.commvault.com/securityadvisories/index.html", kind: security }] } }269 - { name: Veritas Technologies, domain: veritas.com, country: US, importance: 2, aliases: [veritas, netbackup, backup exec, cohesity veritas], note: "veritas.com/support/en_US/security.html returned 503 on 2026-09-13." }270 - { name: Atlassian, domain: atlassian.com, country: AU, importance: 3, aliases: [atlassian, jira, confluence, bitbucket, bamboo, crowd, atlassian security advisories], hints: { github_org: atlassian, cik: "1650372", ticker: TEAM, status_url: "https://status.atlassian.com", urls: [{ url: "https://www.atlassian.com/trust/security/advisories", kind: security }] } }271 - { name: GitLab, domain: gitlab.com, country: US, importance: 3, aliases: [gitlab, gitlab security releases, gitlab patch releases], hints: { github_org: gitlabhq, cik: "1653482", ticker: GTLB, urls: [{ url: "https://about.gitlab.com/security-releases.xml", kind: security }] } }272 - { name: JetBrains, domain: jetbrains.com, country: CZ, importance: 2, aliases: [jetbrains, teamcity, intellij, youtrack, kotlin, jetbrains security], hints: { github_org: JetBrains }, note: "'Fixed security issues' page is JS-rendered (title only without JavaScript)." }273 - { name: HashiCorp, domain: hashicorp.com, country: US, importance: 2, aliases: [hashicorp, terraform, vault, consul, nomad, boundary, packer, hcsec], hints: { github_org: hashicorp, status_url: "https://status.hashicorp.com", urls: [{ url: "https://discuss.hashicorp.com/c/security/52.rss", kind: security }] } }274 - { name: Docker, domain: docker.com, country: US, importance: 3, aliases: [docker, docker desktop, docker hub, docker engine, moby], hints: { github_org: docker, status_url: "https://www.dockerstatus.com", urls: [{ url: "https://docs.docker.com/security/security-announcements/", kind: security }] } }275 - { name: Salesforce, domain: salesforce.com, country: US, importance: 2, aliases: [salesforce, heroku, mulesoft, tableau, slack technologies parent], hints: { cik: "1108524", ticker: CRM } }276 - { name: ServiceNow, domain: servicenow.com, country: US, importance: 2, aliases: [servicenow, now platform], hints: { cik: "1373715", ticker: NOW } }277 - { name: Workday, domain: workday.com, country: US, importance: 1, aliases: [workday], hints: { cik: "1327811", ticker: WDAY } }278 - { name: Autodesk, domain: autodesk.com, country: US, importance: 2, aliases: [autodesk, autocad, revit, fusion 360, autodesk trust center], hints: { cik: "769397", ticker: ADSK } }279 - { name: Meta Platforms, domain: meta.com, country: US, importance: 2, aliases: [meta, facebook, whatsapp, instagram, oculus, meta bug bounty, react], hints: { github_org: facebook, cik: "1326801", ticker: META } }280 - { name: Zoom, domain: zoom.com, country: US, importance: 3, aliases: [zoom, zoom video communications, zoom security bulletins, zoom.us, zoom workplace], hints: { cik: "1585521", ticker: ZM, urls: [{ url: "https://www.zoom.com/en/trust/security-bulletin/", kind: security }] } }281 - { name: Slack, domain: slack.com, country: US, importance: 2, aliases: [slack, slack technologies] }282 - { name: RingCentral, domain: ringcentral.com, country: US, importance: 1, aliases: [ringcentral, ringex], hints: { ticker: RNG } }283 - { name: Twilio, domain: twilio.com, country: US, importance: 2, aliases: [twilio, sendgrid, authy, segment], hints: { cik: "1447669", ticker: TWLO, status_url: "https://status.twilio.com" } }284 - { name: Dropbox, domain: dropbox.com, country: US, importance: 1, aliases: [dropbox], hints: { cik: "1467623", ticker: DBX, status_url: "https://status.dropbox.com" } }285 - { name: Box, domain: box.com, country: US, importance: 1, aliases: [box], hints: { ticker: BOX, status_url: "https://status.box.com" } }286 - { name: Zendesk, domain: zendesk.com, country: US, importance: 1, aliases: [zendesk] }287 - { name: Snowflake, domain: snowflake.com, country: US, importance: 2, aliases: [snowflake], hints: { cik: "1640147", ticker: SNOW, status_url: "https://status.snowflake.com" } }288 - { name: Databricks, domain: databricks.com, country: US, importance: 1, aliases: [databricks] }289 - { name: Vercel, domain: vercel.com, country: US, importance: 1, aliases: [vercel, next.js, nextjs], hints: { github_org: vercel, status_url: "https://www.vercel-status.com" } }290 - { name: Netlify, domain: netlify.com, country: US, importance: 1, aliases: [netlify], hints: { status_url: "https://www.netlifystatus.com" } }291 - { name: DigitalOcean, domain: digitalocean.com, country: US, importance: 1, aliases: [digitalocean], hints: { ticker: DOCN, status_url: "https://status.digitalocean.com" } }292 - { name: OVHcloud, domain: ovhcloud.com, country: FR, importance: 1, aliases: [ovh, ovhcloud] }293 - { name: Hetzner, domain: hetzner.com, country: DE, importance: 1, aliases: [hetzner, hetzner online] }294 - { name: Scaleway, domain: scaleway.com, country: FR, importance: 1, aliases: [scaleway] }295 - { name: Vultr, domain: vultr.com, country: US, importance: 1, aliases: [vultr] }296 - { name: GoDaddy, domain: godaddy.com, country: US, importance: 1, aliases: [godaddy], hints: { ticker: GDDY } }297 - { name: Namecheap, domain: namecheap.com, country: US, importance: 1, aliases: [namecheap] }298 - { name: cPanel, domain: cpanel.net, country: US, importance: 1, aliases: [cpanel, whm, cpanel & whm] }299 - { name: Plesk, domain: plesk.com, country: CH, importance: 1, aliases: [plesk, plesk obsidian] }300 - { name: WHMCS, domain: whmcs.com, country: GB, importance: 1, aliases: [whmcs] }301 - { name: Webmin, domain: webmin.com, country: INT, importance: 1, aliases: [webmin, virtualmin, usermin], hints: { github_repos: [webmin/webmin] } }302 - { name: Portainer, domain: portainer.io, country: NZ, importance: 1, aliases: [portainer], hints: { github_org: portainer } }303 - { name: Mirantis, domain: mirantis.com, country: US, importance: 1, aliases: [mirantis, lens, mke] }304 - { name: Alibaba Cloud, domain: alibabacloud.com, country: CN, importance: 2, aliases: [alibaba cloud, aliyun, alibaba] }305 - { name: Tencent, domain: tencent.com, country: CN, importance: 2, aliases: [tencent, tencent cloud, wechat, tencent security] }306 - { name: ByteDance, domain: bytedance.com, country: CN, importance: 1, aliases: [bytedance, tiktok, douyin] }307 - { name: Baidu, domain: baidu.com, country: CN, importance: 1, aliases: [baidu, baidu security] }308 - { name: Foxit Software, domain: foxit.com, country: US, importance: 1, aliases: [foxit, foxit pdf editor, foxit reader, phantompdf] }309 - { name: Telegram, domain: telegram.org, country: AE, importance: 1, aliases: [telegram, telegram messenger] }310 - { name: Signal, domain: signal.org, country: US, importance: 1, aliases: [signal, signal messenger, signal foundation], hints: { github_org: signalapp } }311 - { name: Proton, domain: proton.me, country: CH, importance: 1, aliases: [proton, proton mail, protonmail, proton vpn], hints: { github_org: ProtonMail } }312 - { name: Zimbra, domain: zimbra.com, country: US, importance: 2, aliases: [zimbra, zimbra collaboration suite, zcs, synacor zimbra] }313 - { name: Roundcube, domain: roundcube.net, country: INT, importance: 1, aliases: [roundcube, roundcube webmail], hints: { github_org: roundcube } }314 - { name: Exim, domain: exim.org, country: INT, importance: 1, aliases: [exim, exim mta], hints: { github_repos: [Exim/exim] } }315 - { name: Postfix, domain: postfix.org, country: INT, importance: 1, aliases: [postfix, postfix mta] }316 - { name: Dovecot, domain: dovecot.org, country: FI, importance: 1, aliases: [dovecot, dovecot imap, open-xchange dovecot], hints: { github_repos: [dovecot/core] } }317 # ── Operating systems & distributions ──318 - { name: Red Hat, domain: redhat.com, country: US, importance: 3, aliases: [red hat, rhel, red hat enterprise linux, rhsa, openshift, ansible, jboss, keycloak by red hat, quay, podman], hints: { github_org: RedHatOfficial, status_url: "https://status.redhat.com", urls: [{ url: "https://access.redhat.com/hydra/rest/securitydata/csaf.json?per_page=100", kind: security, name: csaf advisories }] }, note: "securitydata/cve.json is double-encoded JSON; csaf.json is a proper array." }319 - { name: SUSE, domain: suse.com, country: DE, importance: 2, aliases: [suse, sles, suse linux enterprise, opensuse, rancher, neuvector, suse-su], hints: { github_org: SUSE, urls: [{ url: "https://www.suse.com/c/tag/security/feed/", kind: blog }] }, note: "The update advisories list (/support/update/) is JS-rendered; announcements are on lists.suse.com (HTML archive)." }320 - { name: Canonical, domain: ubuntu.com, country: GB, importance: 3, aliases: [canonical, ubuntu, ubuntu security notices, usn, snapcraft, launchpad], hints: { github_org: canonical, urls: [{ url: "https://ubuntu.com/security/notices/rss.xml", kind: security }] } }321 - { name: Debian, domain: debian.org, country: INT, importance: 3, aliases: [debian, dsa, debian security advisory, debian security tracker, dla], hints: { urls: [{ url: "https://www.debian.org/security/dsa", kind: security }] }, note: "The /security/dsa URL serves the RSS 2.0 feed; dsa.en.rdf returns 404." }322 - { name: Fedora Project, domain: fedoraproject.org, country: US, importance: 2, aliases: [fedora, fedora security updates, bodhi, fedora project], hints: { urls: [{ url: "https://bodhi.fedoraproject.org/rss/updates/?type=security", kind: security }] } }323 - { name: Alpine Linux, domain: alpinelinux.org, country: INT, importance: 2, aliases: [alpine, alpine linux, alpine secdb, apk], hints: { urls: [{ url: "https://secdb.alpinelinux.org/", kind: data, name: secdb index }] } }324 - { name: Arch Linux, domain: archlinux.org, country: INT, importance: 2, aliases: [arch linux, arch, asa, arch security tracker], hints: { urls: [{ url: "https://security.archlinux.org/advisory/feed.atom", kind: security }] } }325 - { name: FreeBSD, domain: freebsd.org, country: INT, importance: 2, aliases: [freebsd, freebsd security advisories, freebsd-sa], hints: { github_repos: [freebsd/freebsd-src], urls: [{ url: "https://www.freebsd.org/security/feed.xml", kind: security }] } }326 - { name: OpenBSD, domain: openbsd.org, country: CA, importance: 2, aliases: [openbsd, openbsd errata, libressl, openssh project], hints: { urls: [{ url: "https://www.openbsd.org/errata.html", kind: security }] } }327 - { name: NetBSD, domain: netbsd.org, country: INT, importance: 1, aliases: [netbsd, netbsd security advisories], hints: { urls: [{ url: "https://www.netbsd.org/support/security/advisory.html", kind: security }] } }328 - { name: Gentoo Linux, domain: gentoo.org, country: INT, importance: 2, aliases: [gentoo, glsa, gentoo linux security advisories], hints: { github_org: gentoo, urls: [{ url: "https://security.gentoo.org/glsa/feed.rss", kind: security }] } }329 - { name: Rocky Linux, domain: rockylinux.org, country: US, importance: 2, aliases: [rocky linux, rocky, rlsa, rocky enterprise software foundation], hints: { github_org: rocky-linux, urls: [{ url: "https://errata.rockylinux.org/api/v2/advisories?filters.type=TYPE_SECURITY", kind: security }] } }330 - { name: AlmaLinux, domain: almalinux.org, country: US, importance: 2, aliases: [almalinux, alma linux, alsa, almalinux os foundation], hints: { github_org: AlmaLinux }, note: "errata.almalinux.org is a JS shell (643 bytes)." }331 - { name: Amazon Web Services, domain: amazon.com, country: US, importance: 3, aliases: [aws, amazon web services, amazon linux, alas, aws security bulletins, amazon], hints: { github_org: aws, cik: "1018724", ticker: AMZN, urls: [{ url: "https://aws.amazon.com/security/security-bulletins/rss/feed/", kind: security }, { url: "https://alas.aws.amazon.com/AL2023/alas.rss", kind: security, name: amazon linux 2023 alas }] } }332 - { name: Linux Kernel Organization, domain: kernel.org, country: US, importance: 3, aliases: [linux kernel, kernel.org, linux cna, linux-cve-announce, greg kroah-hartman], hints: { urls: [{ url: "https://lore.kernel.org/linux-cve-announce/new.atom", kind: security }] } }333 - { name: OpenStack, domain: openstack.org, country: INT, importance: 1, aliases: [openstack, ossa, openstack security advisories, openinfra foundation], hints: { github_org: openstack } }334 - { name: Proxmox, domain: proxmox.com, country: AT, importance: 1, aliases: [proxmox, proxmox ve, pve, proxmox backup server] }335 - { name: QEMU, domain: qemu.org, country: INT, importance: 1, aliases: [qemu], hints: { github_repos: [qemu/qemu] } }336 - { name: Xen Project, domain: xenproject.org, country: INT, importance: 2, aliases: [xen, xen project, xsa, xen security advisories], hints: { urls: [{ url: "https://xenbits.xen.org/xsa/", kind: security }] } }337 - { name: Kubernetes, domain: kubernetes.io, country: INT, importance: 3, aliases: [kubernetes, k8s, kubernetes security response committee, kubernetes cve feed], hints: { github_org: kubernetes, urls: [{ url: "https://kubernetes.io/docs/reference/issues-security/official-cve-feed/index.json", kind: security }] } }338 - { name: Istio, domain: istio.io, country: INT, importance: 1, aliases: [istio, istio security bulletins], hints: { github_org: istio, urls: [{ url: "https://istio.io/latest/news/security/", kind: security }] }, note: "/news/security/feed.xml returns 404; the HTML bulletin index is server-rendered." }339 - { name: Helm, domain: helm.sh, country: INT, importance: 1, aliases: [helm, helm charts], hints: { github_org: helm } }340 - { name: containerd, domain: containerd.io, country: INT, importance: 1, aliases: [containerd], hints: { github_repos: [containerd/containerd] } }341 - { name: Open Container Initiative, domain: opencontainers.org, country: INT, importance: 1, aliases: [oci, open container initiative, runc, image-spec], hints: { github_org: opencontainers } }342 - { name: Cilium, domain: cilium.io, country: INT, importance: 1, aliases: [cilium, ebpf cilium, isovalent], hints: { github_repos: [cilium/cilium] } }343 - { name: Tigera, domain: tigera.io, country: US, importance: 1, aliases: [tigera, calico, project calico], hints: { github_repos: [projectcalico/calico] } }344 - { name: Linkerd, domain: linkerd.io, country: INT, importance: 1, aliases: [linkerd, buoyant], hints: { github_repos: [linkerd/linkerd2] } }345 - { name: Ceph, domain: ceph.io, country: INT, importance: 1, aliases: [ceph, ceph storage], hints: { github_repos: [ceph/ceph] } }346 - { name: MinIO, domain: min.io, country: US, importance: 1, aliases: [minio], hints: { github_repos: [minio/minio] } }347 - { name: Keycloak, domain: keycloak.org, country: INT, importance: 2, aliases: [keycloak], hints: { github_repos: [keycloak/keycloak], urls: [{ url: "https://www.keycloak.org/security", kind: security }] } }348 # ── Mobile & consumer electronics ──349 - { name: Samsung Electronics, domain: samsung.com, country: KR, importance: 3, aliases: [samsung, samsung mobile security, samsung security updates, smr, galaxy, knox, samsung smart tv], hints: { urls: [{ url: "https://security.samsungmobile.com/securityUpdate.smsb", kind: security }] } }350 - { name: Xiaomi, domain: mi.com, country: CN, importance: 2, aliases: [xiaomi, mi, misrc, xiaomi security center, hyperos, miui, redmi, poco], hints: { urls: [{ url: "https://trust.mi.com/misrc/bulletins/advisory", kind: security }] } }351 - { name: OPPO, domain: oppo.com, country: CN, importance: 1, aliases: [oppo, oppo security response center, osrc, oneplus, realme, coloros], note: "security.oppo.com advisory list is JS-rendered (menu only without JavaScript)." }352 - { name: vivo, domain: vivo.com, country: CN, importance: 1, aliases: [vivo, vivo security response center, iqoo, originos], note: "security.vivo.com returns 403 to non-browser clients." }353 - { name: HONOR, domain: hihonor.com, country: CN, importance: 1, aliases: [honor, hihonor, honor security bulletin, magicos] }354 - { name: Lenovo, domain: lenovo.com, country: CN, importance: 2, aliases: [lenovo, lenovo psirt, thinkpad, motorola mobility, lenovo security advisories, len-], note: "support.lenovo.com product_security returns 403 (Akamai) to non-browser clients." }355 - { name: Dell Technologies, domain: dell.com, country: US, importance: 2, aliases: [dell, dell psirt, dell security advisories, dsa-, poweredge, idrac, dell emc], hints: { cik: "1571996", ticker: DELL }, note: "dell.com/support/security answers 'Access Denied' (Akamai) to non-browser clients." }356 - { name: HP, domain: hp.com, country: US, importance: 2, aliases: [hp, hp inc, hp psirt, hp security bulletins, hpsbhf, hpsbpi, poly], hints: { cik: "47217", ticker: HPQ }, note: "support.hp.com security bulletins page is a JS shell (7 kB)." }357 - { name: Hewlett Packard Enterprise, domain: hpe.com, country: US, importance: 2, aliases: [hpe, hewlett packard enterprise, hpe psirt, hpesbhf, aruba, aruba networks, ilo, hpe security bulletin library, zerto], hints: { cik: "1645590", ticker: HPE }, note: "Security Bulletin Library (support.hpe.com Salesforce) is a JS shell (9 kB)." }358 - { name: Supermicro, domain: supermicro.com, country: US, importance: 2, aliases: [supermicro, super micro computer, supermicro security center, bmc firmware], hints: { cik: "1375365", ticker: SMCI }, note: "supermicro.com returns 403 (Akamai) to non-browser clients." }359 - { name: ASUS, domain: asus.com, country: TW, importance: 2, aliases: [asus, asustek, asus security advisory, asus router, rog] }360 - { name: MSI, domain: msi.com, country: TW, importance: 1, aliases: [msi, micro-star international] }361 - { name: GIGABYTE, domain: gigabyte.com, country: TW, importance: 1, aliases: [gigabyte, gigabyte technology] }362 - { name: ASRock, domain: asrock.com, country: TW, importance: 1, aliases: [asrock] }363 - { name: Sony, domain: sony.com, country: JP, importance: 1, aliases: [sony, sony group, playstation, sony psirt], hints: { ticker: SONY } }364 - { name: LG Electronics, domain: lg.com, country: KR, importance: 1, aliases: [lg, lg electronics, webos, lg psirt] }365 - { name: Panasonic, domain: panasonic.com, country: JP, importance: 1, aliases: [panasonic, panasonic psirt, panasonic connect] }366 - { name: Fujitsu, domain: fujitsu.com, country: JP, importance: 1, aliases: [fujitsu, fujitsu psirt] }367 - { name: NEC, domain: nec.com, country: JP, importance: 1, aliases: [nec, nec corporation, nec psirt] }368 - { name: Hitachi, domain: hitachi.com, country: JP, importance: 1, aliases: [hitachi, hitachi software vulnerability information, hitachi vantara] }369 - { name: Canon, domain: canon.com, country: JP, importance: 1, aliases: [canon, canon psirt, canon printers, imagerunner] }370 - { name: Brother Industries, domain: brother.com, country: JP, importance: 1, aliases: [brother, brother printers] }371 - { name: Ricoh, domain: ricoh.com, country: JP, importance: 1, aliases: [ricoh, ricoh psirt] }372 - { name: Kyocera Document Solutions, domain: kyoceradocumentsolutions.com, country: JP, importance: 1, aliases: [kyocera, kyocera document solutions, taskalfa] }373 - { name: Epson, domain: epson.com, country: JP, importance: 1, aliases: [epson, seiko epson] }374 - { name: Lexmark, domain: lexmark.com, country: US, importance: 1, aliases: [lexmark, lexmark security advisories] }375 - { name: Xerox, domain: xerox.com, country: US, importance: 1, aliases: [xerox, xerox security bulletins, altalink, versalink], hints: { ticker: XRX } }376 - { name: Logitech, domain: logitech.com, country: CH, importance: 1, aliases: [logitech, logi] }377 - { name: Sonos, domain: sonos.com, country: US, importance: 1, aliases: [sonos], hints: { ticker: SONO } }378 - { name: Roku, domain: roku.com, country: US, importance: 1, aliases: [roku], hints: { ticker: ROKU } }379 - { name: Garmin, domain: garmin.com, country: US, importance: 1, aliases: [garmin, garmin connect], hints: { ticker: GRMN } }380 - { name: Peloton, domain: onepeloton.com, country: US, importance: 1, aliases: [peloton, peloton interactive], hints: { ticker: PTON } }381 - { name: Anker, domain: anker.com, country: CN, importance: 1, aliases: [anker, eufy, eufy security, soundcore] }382 - { name: Wyze Labs, domain: wyze.com, country: US, importance: 1, aliases: [wyze, wyze cam] }383 - { name: Reolink, domain: reolink.com, country: CN, importance: 1, aliases: [reolink] }384 - { name: Arlo Technologies, domain: arlo.com, country: US, importance: 1, aliases: [arlo], hints: { ticker: ARLO } }385 - { name: Signify, domain: signify.com, country: NL, importance: 1, aliases: [signify, philips hue, hue bridge, wiz lighting] }386 - { name: ecobee, domain: ecobee.com, country: CA, importance: 1, aliases: [ecobee, generac ecobee] }387 - { name: Resideo, domain: resideo.com, country: US, importance: 1, aliases: [resideo, honeywell home, first alert], hints: { ticker: REZI } }388 - { name: Chamberlain Group, domain: chamberlaingroup.com, country: US, importance: 1, aliases: [chamberlain, myq, liftmaster] }389 # ── Networking (long tail) ──390 - { name: Linksys, domain: linksys.com, country: US, importance: 1, aliases: [linksys, velop] }391 - { name: Tenda, domain: tendacn.com, country: CN, importance: 1, aliases: [tenda, shenzhen tenda] }392 - { name: TOTOLINK, domain: totolink.net, country: CN, importance: 1, aliases: [totolink, zioncom] }393 - { name: Edimax, domain: edimax.com, country: TW, importance: 1, aliases: [edimax] }394 - { name: Buffalo, domain: buffalo.jp, country: JP, language: ja, importance: 1, aliases: [buffalo, buffalo inc, airstation, terastation] }395 - { name: I-O DATA, domain: iodata.jp, country: JP, language: ja, importance: 1, aliases: [i-o data, iodata] }396 - { name: ELECOM, domain: elecom.co.jp, country: JP, language: ja, importance: 1, aliases: [elecom] }397 - { name: DrayTek, domain: draytek.com, country: TW, importance: 1, aliases: [draytek, vigor] }398 - { name: Peplink, domain: peplink.com, country: HK, importance: 1, aliases: [peplink, pepwave] }399 - { name: Cambium Networks, domain: cambiumnetworks.com, country: US, importance: 1, aliases: [cambium, cambium networks, cnpilot, cnmaestro], hints: { ticker: CMBM } }400 - { name: Extreme Networks, domain: extremenetworks.com, country: US, importance: 1, aliases: [extreme networks, extreme, exos, voss], hints: { ticker: EXTR } }401 - { name: CommScope, domain: commscope.com, country: US, importance: 1, aliases: [commscope, ruckus, ruckus networks, arris], hints: { ticker: COMM } }402 - { name: Radware, domain: radware.com, country: IL, importance: 1, aliases: [radware, defensepro, alteon], hints: { ticker: RDWR } }403 - { name: A10 Networks, domain: a10networks.com, country: US, importance: 1, aliases: [a10 networks, a10, thunder adc], hints: { ticker: ATEN } }404 - { name: Array Networks, domain: arraynetworks.com, country: US, importance: 1, aliases: [array networks, array ag] }405 - { name: Avaya, domain: avaya.com, country: US, importance: 1, aliases: [avaya, avaya aura, avaya psirt] }406 - { name: Mitel, domain: mitel.com, country: CA, importance: 1, aliases: [mitel, micollab, mivoice, mitel product security advisories] }407 - { name: Yealink, domain: yealink.com, country: CN, importance: 1, aliases: [yealink] }408 - { name: Grandstream, domain: grandstream.com, country: US, importance: 1, aliases: [grandstream, grandstream networks, ucm] }409 - { name: Motorola Solutions, domain: motorolasolutions.com, country: US, importance: 1, aliases: [motorola solutions, avigilon, pelco], hints: { ticker: MSI } }410 - { name: Digi International, domain: digi.com, country: US, importance: 1, aliases: [digi, digi international, digi psirt], hints: { ticker: DGII } }411 - { name: Lantronix, domain: lantronix.com, country: US, importance: 1, aliases: [lantronix], hints: { ticker: LTRX } }412 - { name: Sierra Wireless, domain: sierrawireless.com, country: CA, importance: 1, aliases: [sierra wireless, airlink, semtech sierra wireless] }413 - { name: Teltonika Networks, domain: teltonika-networks.com, country: LT, importance: 1, aliases: [teltonika, teltonika networks, rutos] }414 - { name: InHand Networks, domain: inhandnetworks.com, country: CN, importance: 1, aliases: [inhand, inhand networks] }415 - { name: Westermo, domain: westermo.com, country: SE, importance: 1, aliases: [westermo, weos] }416 - { name: Belden, domain: belden.com, country: US, importance: 1, aliases: [belden, hirschmann, tofino, prosoft, belden security bulletins], hints: { ticker: BDC } }417 - { name: Red Lion Controls, domain: redlion.net, country: US, importance: 1, aliases: [red lion, red lion controls, sixnet] }418 - { name: Netgate, domain: netgate.com, country: US, importance: 1, aliases: [netgate, pfsense plus, tnsr] }419 - { name: pfSense, domain: pfsense.org, country: US, importance: 1, aliases: [pfsense, pfsense ce], hints: { github_repos: [pfsense/pfsense], urls: [{ url: "https://www.pfsense.org/security/advisories/", kind: security }] } }420 - { name: OPNsense, domain: opnsense.org, country: NL, importance: 1, aliases: [opnsense, deciso], hints: { github_repos: [opnsense/core] } }421 # ── Semiconductors ──422 - { name: Intel, domain: intel.com, country: US, importance: 3, aliases: [intel, intel psirt, intel-sa, intel security center, ipu, intel platform update], hints: { cik: "50863", ticker: INTC }, note: "intel.com security center returns 403 (Akamai) to non-browser clients." }423 - { name: AMD, domain: amd.com, country: US, importance: 3, aliases: [amd, amd product security, amd-sb, ryzen, epyc, xilinx], hints: { cik: "2488", ticker: AMD, urls: [{ url: "https://www.amd.com/en/resources/product-security.html", kind: security }] } }424 - { name: NVIDIA, domain: nvidia.com, country: US, importance: 3, aliases: [nvidia, nvidia psirt, nvidia security bulletins, geforce driver, cuda, dgx, mellanox], hints: { github_org: NVIDIA, cik: "1045810", ticker: NVDA, urls: [{ url: "https://www.nvidia.com/en-us/security/", kind: security }] } }425 - { name: Arm, domain: arm.com, country: GB, importance: 2, aliases: [arm, arm security center, arm psirt, mali gpu, trustzone, cortex], hints: { ticker: ARM }, note: "developer.arm.com Security Center returns 403 (Akamai) to non-browser clients." }426 - { name: Qualcomm, domain: qualcomm.com, country: US, importance: 3, aliases: [qualcomm, qualcomm security bulletin, snapdragon, qti], hints: { cik: "804328", ticker: QCOM }, note: "docs.qualcomm.com security bulletin index is a JS shell." }427 - { name: MediaTek, domain: mediatek.com, country: TW, importance: 2, aliases: [mediatek, mediatek product security bulletin, dimensity, helio], hints: { urls: [{ url: "https://corp.mediatek.com/product-security-bulletin", kind: security }] } }428 - { name: Marvell, domain: marvell.com, country: US, importance: 1, aliases: [marvell, marvell technology, cavium], hints: { ticker: MRVL }, note: "marvell.com returns 403 (Akamai) to non-browser clients." }429 - { name: Realtek, domain: realtek.com, country: TW, importance: 2, aliases: [realtek, realtek sdk, realtek semiconductor] }430 - { name: Infineon Technologies, domain: infineon.com, country: DE, importance: 1, aliases: [infineon, infineon psirt, optiga, cypress], hints: { ticker: IFX } }431 - { name: NXP Semiconductors, domain: nxp.com, country: NL, importance: 1, aliases: [nxp, nxp psirt, i.mx, mifare], hints: { cik: "1413447", ticker: NXPI }, note: "/psirt returns 404; PSIRT page path has changed." }432 - { name: STMicroelectronics, domain: st.com, country: CH, importance: 1, aliases: [stmicroelectronics, stmicro, st psirt, stm32], hints: { cik: "932787", ticker: STM }, note: "st.com timed out from the cluster on 2026-09-13." }433 - { name: Texas Instruments, domain: ti.com, country: US, importance: 1, aliases: [texas instruments, ti, ti psirt], hints: { cik: "97476", ticker: TXN } }434 - { name: Microchip Technology, domain: microchip.com, country: US, importance: 1, aliases: [microchip, microchip psirt, atmel, microsemi], hints: { cik: "827054", ticker: MCHP }, note: "PSIRT page returns 403 (Akamai) to non-browser clients." }435 - { name: Renesas Electronics, domain: renesas.com, country: JP, importance: 1, aliases: [renesas, renesas psirt] }436 # ── Industrial control systems & building automation ──437 - { name: Siemens, domain: siemens.com, country: DE, importance: 3, aliases: [siemens, siemens productcert, ssa-, simatic, sinec, siemens security advisories], hints: { ticker: SIE, urls: [{ url: "https://cert-portal.siemens.com/productcert/rss/advisories.atom", kind: security }] } }438 - { name: Schneider Electric, domain: se.com, country: FR, importance: 3, aliases: [schneider electric, schneider, sevd, modicon, ecostruxure, apc], hints: { ticker: SU }, note: "se.com security notifications page returns 403 (Akamai) to non-browser clients." }439 - { name: ABB, domain: abb.com, country: CH, importance: 2, aliases: [abb, abb cyber security, abb alerts and notifications, b&r parent], hints: { ticker: ABBN, urls: [{ url: "https://global.abb/group/en/technology/cyber-security/alerts-and-notifications", kind: security }] } }440 - { name: Rockwell Automation, domain: rockwellautomation.com, country: US, importance: 3, aliases: [rockwell automation, rockwell, allen-bradley, factorytalk, controllogix, logix], hints: { cik: "1024478", ticker: ROK, urls: [{ url: "https://www.rockwellautomation.com/en-us/trust-center/security-advisories.html", kind: security }] } }441 - { name: Honeywell, domain: honeywell.com, country: US, importance: 2, aliases: [honeywell, honeywell product security, experion, honeywell productivity solutions, tridium, niagara], hints: { cik: "773840", ticker: HON, urls: [{ url: "https://www.honeywell.com/us/en/product-security", kind: security }] } }442 - { name: Emerson, domain: emerson.com, country: US, importance: 2, aliases: [emerson, emerson electric, deltav, ovation, rosemount, emerson security notifications], hints: { cik: "32604", ticker: EMR }, note: "Security notifications page is JS-rendered (empty body without JavaScript)." }443 - { name: GE Vernova, domain: gevernova.com, country: US, importance: 2, aliases: [ge vernova, ge grid solutions, ge digital, cimplicity, proficy], hints: { ticker: GEV, urls: [{ url: "https://www.gevernova.com/security", kind: security }] } }444 - { name: Hitachi Energy, domain: hitachienergy.com, country: CH, importance: 2, aliases: [hitachi energy, hitachi abb power grids, microscada, relion], note: "Alerts and notifications page path returned 404 on 2026-09-13." }445 - { name: Mitsubishi Electric, domain: mitsubishielectric.com, country: JP, importance: 2, aliases: [mitsubishi electric, mitsubishi electric psirt, melsec, gx works, iconics], hints: { urls: [{ url: "https://www.mitsubishielectric.com/en/psirt/vulnerability/index.html", kind: security }] } }446 - { name: OMRON, domain: omron.com, country: JP, importance: 2, aliases: [omron, omron psirt, omron automation, sysmac, cx-programmer], note: "omron.com and ia.omron.com return 403 (Akamai) to non-browser clients." }447 - { name: Yokogawa Electric, domain: yokogawa.com, country: JP, importance: 2, aliases: [yokogawa, ysar, yokogawa security advisory report, centum], hints: { urls: [{ url: "https://www.yokogawa.com/library/resources/white-papers/yokogawa-security-advisory-report-list/", kind: security }] } }448 - { name: Phoenix Contact, domain: phoenixcontact.com, country: DE, importance: 2, aliases: [phoenix contact, phoenix contact psirt, plcnext, mguard], hints: { urls: [{ url: "https://www.phoenixcontact.com/en-pc/psirt", kind: security }] } }449 - { name: WAGO, domain: wago.com, country: DE, importance: 1, aliases: [wago, wago psirt, wago pfc], note: "/global/psirt returned 404 on 2026-09-13 (path changed)." }450 - { name: Moxa, domain: moxa.com, country: TW, importance: 2, aliases: [moxa, moxa security advisory, moxa psirt, nport, eds], hints: { urls: [{ url: "https://www.moxa.com/en/support/product-support/security-advisory", kind: security }] } }451 - { name: Advantech, domain: advantech.com, country: TW, importance: 2, aliases: [advantech, advantech psirt, webaccess, r-seenet], note: "Security advisory URLs returned 404 on 2026-09-13." }452 - { name: Beckhoff Automation, domain: beckhoff.com, country: DE, importance: 1, aliases: [beckhoff, twincat, beckhoff advisories], note: "Product-security advisories URL returned 404 on 2026-09-13." }453 - { name: B&R Industrial Automation, domain: br-automation.com, country: AT, importance: 1, aliases: [b&r, br automation, b&r industrial automation, automation runtime], hints: { urls: [{ url: "https://www.br-automation.com/en/service/cyber-security/", kind: security }] } }454 - { name: Bosch, domain: bosch.com, country: DE, importance: 2, aliases: [bosch, bosch psirt, bosch rexroth, bosch security advisories, bsa-, ctrlx], hints: { urls: [{ url: "https://psirt.bosch.com/security-advisories/", kind: security }] } }455 - { name: Bosch Security and Safety Systems, domain: boschsecurity.com, country: DE, importance: 1, aliases: [bosch security, bosch building technologies, bosch video systems, bvms], hints: { urls: [{ url: "https://www.boschsecurity.com/xc/en/support/product-security/security-advisories.html", kind: security }] } }456 - { name: Johnson Controls, domain: johnsoncontrols.com, country: IE, importance: 2, aliases: [johnson controls, jci, metasys, tyco, exacq, software house, johnson controls product security advisories], hints: { cik: "833444", ticker: JCI, urls: [{ url: "https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories", kind: security }] } }457 - { name: Carrier, domain: carrier.com, country: US, importance: 1, aliases: [carrier, carrier global, lenel, lenels2, automated logic, carrier product security], hints: { cik: "1783180", ticker: CARR } }458 - { name: Trane Technologies, domain: tranetechnologies.com, country: IE, importance: 1, aliases: [trane, trane technologies, tracer], hints: { ticker: TT } }459 - { name: Daikin, domain: daikin.com, country: JP, importance: 1, aliases: [daikin, daikin industries] }460 - { name: Eaton, domain: eaton.com, country: IE, importance: 1, aliases: [eaton, eaton cybersecurity, intelligent power manager], hints: { ticker: ETN } }461 - { name: Vertiv, domain: vertiv.com, country: US, importance: 1, aliases: [vertiv, liebert, avocent], hints: { ticker: VRT } }462 - { name: Legrand, domain: legrand.com, country: FR, importance: 1, aliases: [legrand, raritan, server technology] }463 - { name: Delta Electronics, domain: deltaww.com, country: TW, importance: 1, aliases: [delta electronics, delta, dopsoft, cncsoft] }464 - { name: Festo, domain: festo.com, country: DE, importance: 1, aliases: [festo, festo psirt] }465 - { name: SICK, domain: sick.com, country: DE, importance: 1, aliases: [sick, sick ag, sick psirt] }466 - { name: Pepperl+Fuchs, domain: pepperl-fuchs.com, country: DE, importance: 1, aliases: [pepperl+fuchs, pepperl fuchs] }467 - { name: Endress+Hauser, domain: endress.com, country: CH, importance: 1, aliases: [endress+hauser, endress hauser] }468 - { name: Weidmuller, domain: weidmueller.com, country: DE, importance: 1, aliases: [weidmuller, weidmueller] }469 - { name: Schweitzer Engineering Laboratories, domain: selinc.com, country: US, importance: 1, aliases: [sel, schweitzer engineering laboratories, sel relays] }470 - { name: AVEVA, domain: aveva.com, country: GB, importance: 1, aliases: [aveva, wonderware, aveva security bulletins, aveva pi] }471 - { name: Inductive Automation, domain: inductiveautomation.com, country: US, importance: 1, aliases: [inductive automation, ignition scada] }472 - { name: PTC, domain: ptc.com, country: US, importance: 1, aliases: [ptc, kepware, thingworx, kepserverex], hints: { cik: "857005", ticker: PTC } }473 - { name: CODESYS, domain: codesys.com, country: DE, importance: 1, aliases: [codesys, codesys group, 3s-smart software solutions] }474 - { name: Softing, domain: softing.com, country: DE, importance: 1, aliases: [softing, softing industrial, edgeconnector] }475 - { name: COPA-DATA, domain: copadata.com, country: AT, importance: 1, aliases: [copa-data, zenon] }476 - { name: Trihedral Engineering, domain: trihedral.com, country: CA, importance: 1, aliases: [trihedral, vtscada] }477 - { name: Fuji Electric, domain: fujielectric.com, country: JP, importance: 1, aliases: [fuji electric, tellus, v-server] }478 - { name: KUKA, domain: kuka.com, country: DE, importance: 1, aliases: [kuka, kuka robotics] }479 - { name: FANUC, domain: fanuc.com, country: JP, importance: 1, aliases: [fanuc] }480 - { name: Yaskawa Electric, domain: yaskawa.com, country: JP, importance: 1, aliases: [yaskawa, motoman] }481 - { name: Universal Robots, domain: universal-robots.com, country: DK, importance: 1, aliases: [universal robots, ur cobots] }482 - { name: Cognex, domain: cognex.com, country: US, importance: 1, aliases: [cognex], hints: { ticker: CGNX } }483 - { name: KEYENCE, domain: keyence.com, country: JP, importance: 1, aliases: [keyence] }484 # ── Physical security & video ──485 - { name: Axis Communications, domain: axis.com, country: SE, importance: 2, aliases: [axis, axis communications, axis os, axis security advisories, acap], hints: { urls: [{ url: "https://www.axis.com/support/product-security", kind: security }] } }486 - { name: Hikvision, domain: hikvision.com, country: CN, importance: 2, aliases: [hikvision, hikvision security advisory, hik-connect], note: "Security advisory page is JS-rendered (empty body without JavaScript)." }487 - { name: Dahua Technology, domain: dahuasecurity.com, country: CN, importance: 2, aliases: [dahua, dahua technology, dahua security advisory, imou], note: "Cybersecurity announcement pages return 404/JS shell to non-browser clients." }488 - { name: Hanwha Vision, domain: hanwhavision.com, country: KR, importance: 1, aliases: [hanwha vision, hanwha techwin, wisenet], hints: { urls: [{ url: "https://www.hanwhavision.com/en/support/cybersecurity/", kind: security }] } }489 - { name: Genetec, domain: genetec.com, country: CA, importance: 1, aliases: [genetec, security center genetec], note: "Trust-center advisory URLs returned 404 on 2026-09-13." }490 - { name: Verkada, domain: verkada.com, country: US, importance: 1, aliases: [verkada] }491 - { name: Zebra Technologies, domain: zebra.com, country: US, importance: 1, aliases: [zebra, zebra technologies, lifeguard, zebra security bulletins], hints: { cik: "877212", ticker: ZBRA, urls: [{ url: "https://www.zebra.com/us/en/support-downloads/lifeguard-security.html", kind: security }] } }492 - { name: Crestron, domain: crestron.com, country: US, importance: 1, aliases: [crestron, crestron security advisories] }493 - { name: Extron, domain: extron.com, country: US, importance: 1, aliases: [extron] }494 - { name: Ingenico, domain: ingenico.com, country: FR, importance: 1, aliases: [ingenico, worldline terminals] }495 - { name: Verifone, domain: verifone.com, country: US, importance: 1, aliases: [verifone] }496 - { name: NCR Atleos, domain: ncratleos.com, country: US, importance: 1, aliases: [ncr atleos, ncr, ncr voyix], hints: { ticker: NATL } }497 - { name: Diebold Nixdorf, domain: dieboldnixdorf.com, country: US, importance: 1, aliases: [diebold nixdorf, diebold, wincor], hints: { ticker: DBD } }498 # ── Identity, access & secrets ──499 - { name: Okta, domain: okta.com, country: US, importance: 3, aliases: [okta, auth0, okta security advisories, okta trust], hints: { cik: "1660134", ticker: OKTA, urls: [{ url: "https://trust.okta.com/security-advisories/", kind: security }] } }500 - { name: Ping Identity, domain: pingidentity.com, country: US, importance: 2, aliases: [ping identity, pingfederate, pingone, forgerock, pingam], note: "Security advisories page path returned 404 on 2026-09-13." }501 - { name: CyberArk, domain: cyberark.com, country: US, importance: 2, aliases: [cyberark, cyberark psirt, conjur, venafi, idira], hints: { ticker: CYBR }, note: "cyberark.com now serves the Palo Alto Networks 'Idira' brand shell; the advisories page is JS-rendered." }502 - { name: BeyondTrust, domain: beyondtrust.com, country: US, importance: 2, aliases: [beyondtrust, bomgar, remote support, privileged remote access, beyondtrust security advisories], note: "Trust-center advisories return 403 (Cloudflare) to non-browser clients." }503 - { name: Delinea, domain: delinea.com, country: US, importance: 2, aliases: [delinea, thycotic, centrify, secret server], hints: { urls: [{ url: "https://trust.delinea.com/", kind: security }] } }504 - { name: SailPoint, domain: sailpoint.com, country: US, importance: 1, aliases: [sailpoint, identitynow, identityiq], hints: { ticker: SAIL } }505 - { name: Saviynt, domain: saviynt.com, country: US, importance: 1, aliases: [saviynt] }506 - { name: One Identity, domain: oneidentity.com, country: US, importance: 1, aliases: [one identity, onelogin, safeguard, quest one identity] }507 - { name: Quest Software, domain: quest.com, country: US, importance: 1, aliases: [quest, quest software, kace, toad] }508 - { name: JumpCloud, domain: jumpcloud.com, country: US, importance: 1, aliases: [jumpcloud] }509 - { name: WALLIX, domain: wallix.com, country: FR, importance: 1, aliases: [wallix, wallix bastion] }510 - { name: Teleport, domain: goteleport.com, country: US, importance: 1, aliases: [teleport, gravitational teleport], hints: { github_repos: [gravitational/teleport] } }511 - { name: RSA Security, domain: rsa.com, country: US, importance: 1, aliases: [rsa, rsa securid, rsa security] }512 - { name: Keyfactor, domain: keyfactor.com, country: US, importance: 1, aliases: [keyfactor, ejbca, signserver] }513 - { name: 1Password, domain: 1password.com, country: CA, importance: 2, aliases: [1password, agilebits], hints: { status_url: "https://status.1password.com" } }514 - { name: Bitwarden, domain: bitwarden.com, country: US, importance: 2, aliases: [bitwarden], hints: { github_org: bitwarden } }515 - { name: LastPass, domain: lastpass.com, country: US, importance: 2, aliases: [lastpass], note: "status.lastpass.com returns 403 to non-browser clients." }516 - { name: Keeper Security, domain: keepersecurity.com, country: US, importance: 1, aliases: [keeper, keeper security] }517 - { name: Dashlane, domain: dashlane.com, country: FR, importance: 1, aliases: [dashlane] }518 - { name: KeePass, domain: keepass.info, country: DE, importance: 1, aliases: [keepass, keepass password safe] }519 - { name: Yubico, domain: yubico.com, country: SE, importance: 2, aliases: [yubico, yubikey, ysa, yubico security advisories], hints: { github_org: Yubico, urls: [{ url: "https://www.yubico.com/support/security-advisories/", kind: security }] } }520 - { name: Feitian Technologies, domain: ftsafe.com, country: CN, importance: 1, aliases: [feitian, ftsafe] }521 - { name: Ledger, domain: ledger.com, country: FR, importance: 1, aliases: [ledger, ledger nano, ledger donjon] }522 - { name: Trezor, domain: trezor.io, country: CZ, importance: 1, aliases: [trezor, satoshilabs] }523 - { name: Thales, domain: thalesgroup.com, country: FR, importance: 2, aliases: [thales, thales cpl, gemalto, safenet, luna hsm, imperva by thales], hints: { ticker: HO } }524 - { name: Entrust, domain: entrust.com, country: US, importance: 1, aliases: [entrust, entrust datacard, nshield], note: "entrust.com returns 403 to non-browser clients." }525 - { name: DigiCert, domain: digicert.com, country: US, importance: 2, aliases: [digicert, digicert certcentral] }526 - { name: Sectigo, domain: sectigo.com, country: US, importance: 1, aliases: [sectigo, comodo ca] }527 - { name: Let's Encrypt, domain: letsencrypt.org, country: US, importance: 2, aliases: [let's encrypt, letsencrypt, isrg, internet security research group, boulder], hints: { github_org: letsencrypt } }528 # ── Endpoint, network & cloud security vendors ──529 - { name: CrowdStrike, domain: crowdstrike.com, country: US, importance: 3, aliases: [crowdstrike, falcon, crowdstrike intelligence, crowdstrike security advisories, overwatch], hints: { cik: "1535527", ticker: CRWD, urls: [{ url: "https://www.crowdstrike.com/security-advisories/", kind: security }, { url: "https://www.crowdstrike.com/en-us/blog/feed/", kind: blog }] } }530 - { name: SentinelOne, domain: sentinelone.com, country: US, importance: 3, aliases: [sentinelone, sentinellabs, singularity], hints: { cik: "1583708", ticker: S, status_url: "https://status.sentinelone.com", urls: [{ url: "https://www.sentinelone.com/labs/feed/", kind: blog, name: sentinellabs }] }, note: "/security-advisories/ returns 404; no public advisory list." }531 - { name: Trellix, domain: trellix.com, country: US, importance: 2, aliases: [trellix, mcafee enterprise, fireeye products, trellix advanced research center], note: "trellix.com timed out from the cluster on 2026-09-13 (also blocked on 2026-09-11)." }532 - { name: McAfee, domain: mcafee.com, country: US, importance: 1, aliases: [mcafee, mcafee consumer] }533 - { name: Trend Micro, domain: trendmicro.com, country: JP, importance: 3, aliases: [trend micro, trendmicro, apex one, deep security, trend vision one, trend micro research], hints: { ticker: "4704" }, note: "Security bulletins live in success.trendmicro.com (Salesforce, JS-rendered); research RSS paths return 404." }534 - { name: ESET, domain: eset.com, country: SK, importance: 2, aliases: [eset, eset customer advisories, eset research], note: "Customer advisories KB (support.eset.com/en/ca8775) returned 404 on 2026-09-13." }535 - { name: Kaspersky, domain: kaspersky.com, country: RU, importance: 3, aliases: [kaspersky, kaspersky lab, kaspersky great, kaspersky security advisories, ksn], hints: { urls: [{ url: "https://support.kaspersky.com/vulnerability/list-of-advisories/12430", kind: security }] } }536 - { name: Bitdefender, domain: bitdefender.com, country: RO, importance: 2, aliases: [bitdefender, bitdefender labs, gravityzone, hot for security], hints: { urls: [{ url: "https://www.bitdefender.com/support/security-advisories/", kind: security }, { url: "https://www.bitdefender.com/nuxt/api/en-us/rss/hotforsecurity/", kind: blog }] } }537 - { name: Gen Digital, domain: gendigital.com, country: US, importance: 2, aliases: [gen digital, gen, nortonlifelock, avira, avg, ccleaner], hints: { cik: "849399", ticker: GEN } }538 - { name: Norton, domain: norton.com, country: US, importance: 1, aliases: [norton, norton 360, symantec consumer], hints: { urls: [{ url: "https://support.norton.com/sp/static/external/tools/security-advisories.html", kind: security }] } }539 - { name: Avast, domain: avast.com, country: CZ, importance: 1, aliases: [avast, avast threat labs, decoded avast] }540 - { name: Malwarebytes, domain: malwarebytes.com, country: US, importance: 2, aliases: [malwarebytes, malwarebytes labs, threatdown], hints: { urls: [{ url: "https://www.malwarebytes.com/blog/feed/index.xml", kind: blog }] } }541 - { name: Cybereason, domain: cybereason.com, country: US, importance: 1, aliases: [cybereason, cybereason nocturnus], hints: { urls: [{ url: "https://www.cybereason.com/blog/rss.xml", kind: blog }] } }542 - { name: WithSecure, domain: withsecure.com, country: FI, importance: 1, aliases: [withsecure, with secure, f-secure business, withsecure labs], note: "Labs RSS paths return HTML/404." }543 - { name: F-Secure, domain: f-secure.com, country: FI, importance: 1, aliases: [f-secure, fsecure] }544 - { name: BlackBerry, domain: blackberry.com, country: CA, importance: 1, aliases: [blackberry, cylance, qnx, blackberry psirt], hints: { ticker: BB } }545 - { name: Rapid7, domain: rapid7.com, country: US, importance: 2, aliases: [rapid7, insightvm, nexpose, rapid7 labs, velociraptor], hints: { github_org: rapid7, cik: "1560327", ticker: RPD, status_url: "https://status.rapid7.com", urls: [{ url: "https://www.rapid7.com/blog/rss/", kind: blog }] } }546 - { name: Tenable, domain: tenable.com, country: US, importance: 2, aliases: [tenable, nessus, tenable.io, tenable research, tns-], hints: { github_org: tenable, cik: "1660280", ticker: TENB, status_url: "https://status.tenable.com", urls: [{ url: "https://www.tenable.com/security/feed", kind: security }, { url: "https://www.tenable.com/blog/feed", kind: blog }] } }547 - { name: Qualys, domain: qualys.com, country: US, importance: 2, aliases: [qualys, qualys tru, qualys threat research unit, qualys security advisories], hints: { cik: "1107843", ticker: QLYS, urls: [{ url: "https://www.qualys.com/security-advisories/", kind: security }, { url: "https://blog.qualys.com/feed", kind: blog }] } }548 - { name: Greenbone, domain: greenbone.net, country: DE, importance: 1, aliases: [greenbone, openvas, greenbone community edition], hints: { github_org: greenbone } }549 - { name: Elastic, domain: elastic.co, country: US, importance: 2, aliases: [elastic, elasticsearch, kibana, elastic security labs, esa-], hints: { github_org: elastic, cik: "1707753", ticker: ESTC, status_url: "https://status.elastic.co", urls: [{ url: "https://discuss.elastic.co/c/announcements/security-announcements/31.rss", kind: security }, { url: "https://www.elastic.co/security-labs/rss/feed.xml", kind: blog, name: elastic security labs }] } }550 - { name: Splunk, domain: splunk.com, country: US, importance: 3, aliases: [splunk, splunk security advisories, svd-, splunk enterprise, splunk by cisco], hints: { urls: [{ url: "https://advisory.splunk.com/feed", kind: security }] } }551 - { name: Datadog, domain: datadoghq.com, country: US, importance: 2, aliases: [datadog, datadog security labs, datadog security research], hints: { github_org: DataDog, cik: "1561550", ticker: DDOG, status_url: "https://status.datadoghq.com", urls: [{ url: "https://securitylabs.datadoghq.com/rss/feed.xml", kind: blog }] } }552 - { name: Sumo Logic, domain: sumologic.com, country: US, importance: 1, aliases: [sumo logic, sumologic], hints: { status_url: "https://status.sumologic.com" } }553 - { name: Dynatrace, domain: dynatrace.com, country: US, importance: 1, aliases: [dynatrace], hints: { ticker: DT } }554 - { name: New Relic, domain: newrelic.com, country: US, importance: 1, aliases: [new relic, newrelic], hints: { status_url: "https://status.newrelic.com" } }555 - { name: PagerDuty, domain: pagerduty.com, country: US, importance: 1, aliases: [pagerduty], hints: { ticker: PD } }556 - { name: Cribl, domain: cribl.io, country: US, importance: 1, aliases: [cribl, cribl stream] }557 - { name: Graylog, domain: graylog.org, country: US, importance: 1, aliases: [graylog], hints: { github_repos: [Graylog2/graylog2-server] } }558 - { name: Prometheus, domain: prometheus.io, country: INT, importance: 1, aliases: [prometheus, prometheus monitoring], hints: { github_org: prometheus } }559 - { name: Wazuh, domain: wazuh.com, country: US, importance: 1, aliases: [wazuh], hints: { github_repos: [wazuh/wazuh] } }560 - { name: Open Information Security Foundation, domain: suricata.io, country: US, importance: 1, aliases: [suricata, oisf], hints: { github_repos: [OISF/suricata] } }561 - { name: Snort, domain: snort.org, country: US, importance: 1, aliases: [snort, snort rules, talos snort], hints: { github_repos: [snort3/snort3] } }562 - { name: Zeek, domain: zeek.org, country: US, importance: 1, aliases: [zeek, bro ids], hints: { github_repos: [zeek/zeek] } }563 - { name: Security Onion Solutions, domain: securityonion.net, country: US, importance: 1, aliases: [security onion], hints: { github_repos: [Security-Onion-Solutions/securityonion] } }564 - { name: Nmap Project, domain: nmap.org, country: US, importance: 1, aliases: [nmap, npcap, zenmap], hints: { github_repos: [nmap/nmap] } }565 - { name: Wireshark Foundation, domain: wireshark.org, country: US, importance: 1, aliases: [wireshark, wnpa-sec, tshark] }566 - { name: Kali Linux, domain: kali.org, country: US, importance: 1, aliases: [kali, kali linux] }567 - { name: Zscaler, domain: zscaler.com, country: US, importance: 2, aliases: [zscaler, zscaler threatlabz, zia, zpa, zscaler trust], hints: { cik: "1713683", ticker: ZS, urls: [{ url: "https://www.zscaler.com/blogs/feeds/security-research", kind: blog, name: threatlabz }] }, note: "trust.zscaler.com security advisories are a JS shell." }568 - { name: Netskope, domain: netskope.com, country: US, importance: 2, aliases: [netskope, netskope threat labs], note: "Security advisories URL returned 404 on 2026-09-13." }569 - { name: Cato Networks, domain: catonetworks.com, country: IL, importance: 1, aliases: [cato networks, cato ctrl, cato sase] }570 - { name: Versa Networks, domain: versa-networks.com, country: US, importance: 1, aliases: [versa networks, versa director, versa sase] }571 - { name: Forcepoint, domain: forcepoint.com, country: US, importance: 1, aliases: [forcepoint, websense, stonesoft] }572 - { name: Cloudflare, domain: cloudflare.com, country: US, importance: 3, aliases: [cloudflare, cloudflare radar, cloudflare one, warp, workers], hints: { github_org: cloudflare, cik: "1477333", ticker: NET, status_url: "https://www.cloudflarestatus.com", urls: [{ url: "https://blog.cloudflare.com/tag/security/rss/", kind: blog }] }, note: "radar.cloudflare.com returns 403 to non-browser clients." }573 - { name: Akamai, domain: akamai.com, country: US, importance: 3, aliases: [akamai, akamai sirt, akamai security research, linode, guardicore], hints: { cik: "1086222", ticker: AKAM, urls: [{ url: "https://feeds.feedburner.com/akamai/blog", kind: blog }] }, note: "akamai.com blog RSS returns 403 (Akamai bot manager); the FeedBurner mirror is the only working feed." }574 - { name: Fastly, domain: fastly.com, country: US, importance: 2, aliases: [fastly, fastly security research, signal sciences], hints: { cik: "1517413", ticker: FSLY }, note: "/security-advisories redirects to the blog 'Security' category (no advisory list)." }575 - { name: Imperva, domain: imperva.com, country: US, importance: 1, aliases: [imperva, incapsula, imperva waf] }576 - { name: Proofpoint, domain: proofpoint.com, country: US, importance: 2, aliases: [proofpoint, proofpoint security advisories, proofpoint threat insight], hints: { urls: [{ url: "https://www.proofpoint.com/us/security/security-advisories", kind: security }, { url: "https://www.proofpoint.com/us/rss.xml", kind: news }] } }577 - { name: Mimecast, domain: mimecast.com, country: GB, importance: 1, aliases: [mimecast] }578 - { name: Abnormal AI, domain: abnormal.ai, country: US, importance: 1, aliases: [abnormal, abnormal security, abnormal ai], hints: { status_url: "https://status.abnormalsecurity.com" } }579 - { name: KnowBe4, domain: knowbe4.com, country: US, importance: 1, aliases: [knowbe4], hints: { status_url: "https://status.knowbe4.com" } }580 - { name: Tanium, domain: tanium.com, country: US, importance: 1, aliases: [tanium] }581 - { name: Automox, domain: automox.com, country: US, importance: 1, aliases: [automox] }582 - { name: NinjaOne, domain: ninjaone.com, country: US, importance: 1, aliases: [ninjaone, ninjarmm], hints: { status_url: "https://status.ninjaone.com" } }583 - { name: Kaseya, domain: kaseya.com, country: US, importance: 2, aliases: [kaseya, kaseya vsa, it glue, unitrends], hints: { status_url: "https://status.kaseya.com" }, note: "/security-advisories/ is a JS shell (814 bytes)." }584 - { name: Datto, domain: datto.com, country: US, importance: 1, aliases: [datto, datto rmm, autotask], note: "Trust/security advisories URL returned 404 on 2026-09-13." }585 - { name: ConnectWise, domain: connectwise.com, country: US, importance: 2, aliases: [connectwise, screenconnect, connectwise control, automate, connectwise security bulletins], hints: { urls: [{ url: "https://www.connectwise.com/company/trust/security-bulletins", kind: security }] } }586 - { name: N-able, domain: n-able.com, country: US, importance: 2, aliases: [n-able, nable, n-central, take control], hints: { ticker: NABL }, note: "Security bulletins return 403 (Cloudflare) to non-browser clients." }587 - { name: SolarWinds, domain: solarwinds.com, country: US, importance: 3, aliases: [solarwinds, orion, serv-u, web help desk, solarwinds security advisories], hints: { urls: [{ url: "https://www.solarwinds.com/trust-center/security-advisories", kind: security }] } }588 - { name: ManageEngine, domain: manageengine.com, country: IN, importance: 2, aliases: [manageengine, zoho manageengine, adselfservice plus, servicedesk plus, desktop central, endpoint central], hints: { urls: [{ url: "https://www.manageengine.com/security/advisory/", kind: security }] } }589 - { name: Zoho, domain: zoho.com, country: IN, importance: 1, aliases: [zoho, zoho corporation] }590 - { name: BMC Software, domain: bmc.com, country: US, importance: 1, aliases: [bmc, bmc helix, control-m, remedy] }591 - { name: OpenText, domain: opentext.com, country: CA, importance: 1, aliases: [opentext, micro focus, netiq, arcsight, fortify, webroot, carbonite], hints: { ticker: OTEX } }592 - { name: Nagios, domain: nagios.com, country: US, importance: 1, aliases: [nagios, nagios xi, nagios core], note: "/security/ returned 404 on 2026-09-13." }593 - { name: Zabbix, domain: zabbix.com, country: LV, importance: 1, aliases: [zabbix], hints: { urls: [{ url: "https://www.zabbix.com/security_advisories", kind: security }] } }594 - { name: Paessler, domain: paessler.com, country: DE, importance: 1, aliases: [paessler, prtg, prtg network monitor], hints: { urls: [{ url: "https://www.paessler.com/prtg/history/stable", kind: changelog }] } }595 - { name: Grafana Labs, domain: grafana.com, country: US, importance: 2, aliases: [grafana, grafana labs, loki, tempo, mimir], hints: { github_org: grafana, status_url: "https://status.grafana.com", urls: [{ url: "https://grafana.com/security/security-advisories/", kind: security }] } }596 - { name: Jenkins, domain: jenkins.io, country: INT, importance: 2, aliases: [jenkins, jenkins security advisories, cloudbees jenkins], hints: { github_org: jenkinsci, urls: [{ url: "https://www.jenkins.io/security/advisories/rss.xml", kind: security }] } }597 - { name: CircleCI, domain: circleci.com, country: US, importance: 1, aliases: [circleci] }598 - { name: Gitea, domain: gitea.com, country: INT, importance: 1, aliases: [gitea, forgejo], hints: { github_repos: [go-gitea/gitea] } }599 - { name: SonarSource, domain: sonarsource.com, country: CH, importance: 1, aliases: [sonarsource, sonarqube, sonarcloud] }600 - { name: Puppet, domain: puppet.com, country: US, importance: 1, aliases: [puppet, perforce puppet] }601 - { name: Chef, domain: chef.io, country: US, importance: 1, aliases: [chef, progress chef, chef infra] }602 # ── Backup, storage & remote access ──603 - { name: Nextcloud, domain: nextcloud.com, country: DE, importance: 2, aliases: [nextcloud, nextcloud hub], hints: { github_org: nextcloud }, note: "/security/advisories/ returned 404 on 2026-09-13; advisories are GitHub security advisories (GHSA)." }604 - { name: ownCloud, domain: owncloud.com, country: DE, importance: 1, aliases: [owncloud, kiteworks owncloud], hints: { github_org: owncloud, urls: [{ url: "https://owncloud.com/security-advisories/", kind: security }] } }605 - { name: Synology, domain: synology.com, country: TW, importance: 2, aliases: [synology, dsm, diskstation, synology-sa, synology security advisory], hints: { urls: [{ url: "https://www.synology.com/en-global/security/advisory", kind: security }] } }606 - { name: QNAP, domain: qnap.com, country: TW, importance: 2, aliases: [qnap, qts, quts hero, qnap security advisories, qsa-], hints: { urls: [{ url: "https://www.qnap.com/en/security-advisories", kind: security }] } }607 - { name: ASUSTOR, domain: asustor.com, country: TW, importance: 1, aliases: [asustor, adm] }608 - { name: TerraMaster, domain: terra-master.com, country: CN, importance: 1, aliases: [terramaster, tos] }609 - { name: iXsystems, domain: truenas.com, country: US, importance: 1, aliases: [truenas, ixsystems, freenas], hints: { github_repos: [truenas/middleware] } }610 - { name: Lime Technology, domain: unraid.net, country: US, importance: 1, aliases: [unraid, lime technology] }611 - { name: Western Digital, domain: westerndigital.com, country: US, importance: 2, aliases: [western digital, wd, my cloud, sandisk], hints: { cik: "106040", ticker: WDC }, note: "Product security page is JS-rendered (no advisory list without JavaScript)." }612 - { name: Seagate Technology, domain: seagate.com, country: IE, importance: 1, aliases: [seagate, lyve], hints: { cik: "1137789", ticker: STX }, note: "seagate.com answered 429 to the cluster on 2026-09-13." }613 - { name: NetApp, domain: netapp.com, country: US, importance: 2, aliases: [netapp, ontap, netapp security advisories, ntap-], hints: { cik: "1002047", ticker: NTAP }, note: "security.netapp.com is a JS shell (1.2 kB) to non-browser clients." }614 - { name: Pure Storage, domain: purestorage.com, country: US, importance: 1, aliases: [pure storage, flasharray, purity], hints: { cik: "1474432", ticker: PSTG } }615 - { name: Nutanix, domain: nutanix.com, country: US, importance: 2, aliases: [nutanix, aos, prism, nutanix security advisories], hints: { cik: "1618732", ticker: NTNX }, note: "Security advisories live in portal.nutanix.com (login/JS)." }616 - { name: Hitachi Vantara, domain: hitachivantara.com, country: US, importance: 1, aliases: [hitachi vantara, pentaho] }617 - { name: Quantum Corporation, domain: quantum.com, country: US, importance: 1, aliases: [quantum, quantum corporation, stornext] }618 - { name: Acronis, domain: acronis.com, country: CH, importance: 1, aliases: [acronis, acronis cyber protect] }619 - { name: Arcserve, domain: arcserve.com, country: US, importance: 1, aliases: [arcserve, arcserve udp] }620 - { name: Rubrik, domain: rubrik.com, country: US, importance: 1, aliases: [rubrik], hints: { ticker: RBRK } }621 - { name: Cohesity, domain: cohesity.com, country: US, importance: 1, aliases: [cohesity] }622 - { name: Fortra, domain: fortra.com, country: US, importance: 2, aliases: [fortra, helpsystems, goanywhere, cobalt strike, filecatalyst, globalscape], note: "fortra.com/security/advisories returns 403 (Cloudflare) to non-browser clients." }623 - { name: Kiteworks, domain: kiteworks.com, country: US, importance: 1, aliases: [kiteworks, accellion, accellion fta] }624 - { name: Parallels, domain: parallels.com, country: US, importance: 1, aliases: [parallels, parallels desktop, parallels ras, alludo], note: "/security/ returned 404 on 2026-09-13." }625 - { name: TeamViewer, domain: teamviewer.com, country: DE, importance: 2, aliases: [teamviewer, tv-], hints: { ticker: TMV, urls: [{ url: "https://www.teamviewer.com/en/trust-center/security-bulletins/", kind: security }] } }626 - { name: AnyDesk, domain: anydesk.com, country: DE, importance: 1, aliases: [anydesk], note: "anydesk.com returns 403 (Cloudflare) to non-browser clients." }627 - { name: Splashtop, domain: splashtop.com, country: US, importance: 1, aliases: [splashtop] }628 - { name: Syncthing Foundation, domain: syncthing.net, country: INT, importance: 1, aliases: [syncthing], hints: { github_repos: [syncthing/syncthing] } }629 - { name: FileZilla, domain: filezilla-project.org, country: INT, importance: 1, aliases: [filezilla] }630 - { name: WinSCP, domain: winscp.net, country: CZ, importance: 1, aliases: [winscp] }631 - { name: OpenVPN, domain: openvpn.net, country: US, importance: 1, aliases: [openvpn, openvpn access server], hints: { github_org: OpenVPN } }632 - { name: WireGuard, domain: wireguard.com, country: INT, importance: 1, aliases: [wireguard] }633 - { name: Tailscale, domain: tailscale.com, country: CA, importance: 1, aliases: [tailscale, headscale], hints: { github_org: tailscale, status_url: "https://status.tailscale.com" } }634 - { name: Tor Project, domain: torproject.org, country: US, importance: 1, aliases: [tor, tor project, tor browser] }635 - { name: Mullvad, domain: mullvad.net, country: SE, importance: 1, aliases: [mullvad, mullvad vpn] }636 - { name: NordVPN, domain: nordvpn.com, country: PA, importance: 1, aliases: [nordvpn, nord security] }637 # ── Web servers, languages, frameworks, CMS & databases ──638 - { name: Apache Software Foundation, domain: apache.org, country: US, importance: 3, aliases: [apache, asf, apache security team, httpd, tomcat, struts, log4j, kafka, activemq, airflow, superset], hints: { github_org: apache, urls: [{ url: "https://www.apache.org/security/", kind: security }] } }639 - { name: Eclipse Foundation, domain: eclipse.org, country: BE, importance: 2, aliases: [eclipse, eclipse foundation, jetty, eclipse ide, jakarta ee, mosquitto], hints: { github_org: eclipse, urls: [{ url: "https://www.eclipse.org/security/", kind: security }] } }640 - { name: Eclipse Adoptium, domain: adoptium.net, country: BE, importance: 1, aliases: [adoptium, temurin, eclipse temurin, openjdk builds], hints: { github_org: adoptium } }641 - { name: OpenSSL, domain: openssl.org, country: INT, importance: 3, aliases: [openssl, openssl library, openssl security advisory], hints: { github_repos: [openssl/openssl], urls: [{ url: "https://openssl-library.org/news/vulnerabilities/", kind: security }] } }642 - { name: curl, domain: curl.se, country: SE, importance: 2, aliases: [curl, libcurl, daniel stenberg], hints: { github_repos: [curl/curl], urls: [{ url: "https://curl.se/docs/security.html", kind: security }] }, note: "/docs/vuln.rss returns 404." }643 - { name: OpenSSH, domain: openssh.com, country: CA, importance: 3, aliases: [openssh, portable openssh, sshd], hints: { urls: [{ url: "https://www.openssh.com/security.html", kind: security }] } }644 - { name: nginx, domain: nginx.org, country: US, importance: 2, aliases: [nginx, nginx open source, nginx security advisories], hints: { github_repos: [nginx/nginx], urls: [{ url: "https://nginx.org/en/security_advisories.html", kind: security }] } }645 - { name: HAProxy, domain: haproxy.org, country: FR, importance: 1, aliases: [haproxy, haproxy technologies], hints: { github_repos: [haproxy/haproxy] } }646 - { name: Envoy Proxy, domain: envoyproxy.io, country: INT, importance: 1, aliases: [envoy, envoy proxy], hints: { github_repos: [envoyproxy/envoy] } }647 - { name: Kong, domain: konghq.com, country: US, importance: 1, aliases: [kong, kong gateway], hints: { github_repos: [Kong/kong] } }648 - { name: Traefik Labs, domain: traefik.io, country: FR, importance: 1, aliases: [traefik, traefik proxy], hints: { github_repos: [traefik/traefik] } }649 - { name: Caddy, domain: caddyserver.com, country: US, importance: 1, aliases: [caddy, caddy server], hints: { github_repos: [caddyserver/caddy] } }650 - { name: LiteSpeed Technologies, domain: litespeedtech.com, country: US, importance: 1, aliases: [litespeed, openlitespeed, lsws] }651 - { name: WordPress, domain: wordpress.org, country: US, importance: 3, aliases: [wordpress, wordpress core, wordpress security release], hints: { github_repos: [WordPress/WordPress], urls: [{ url: "https://wordpress.org/news/category/security/feed/", kind: security }] } }652 - { name: Automattic, domain: automattic.com, country: US, importance: 1, aliases: [automattic, woocommerce, wordpress.com, jetpack, wpscan parent], hints: { github_org: Automattic } }653 - { name: Drupal, domain: drupal.org, country: US, importance: 2, aliases: [drupal, drupal security team, sa-core, sa-contrib], hints: { urls: [{ url: "https://www.drupal.org/security/rss.xml", kind: security }] } }654 - { name: Joomla, domain: joomla.org, country: US, importance: 2, aliases: [joomla, joomla security strike team, jsst], hints: { github_repos: [joomla/joomla-cms], urls: [{ url: "https://developer.joomla.org/security-centre.feed?type=rss", kind: security }] } }655 - { name: TYPO3, domain: typo3.org, country: DE, importance: 1, aliases: [typo3, typo3 security advisories, typo3-core-sa], hints: { github_org: TYPO3, urls: [{ url: "https://typo3.org/help/security-advisories", kind: security }] } }656 - { name: Shopify, domain: shopify.com, country: CA, importance: 1, aliases: [shopify], hints: { github_org: Shopify, cik: "1594805", ticker: SHOP } }657 - { name: PrestaShop, domain: prestashop-project.org, country: FR, importance: 1, aliases: [prestashop, prestashop project], hints: { github_repos: [PrestaShop/PrestaShop] } }658 - { name: Django Software Foundation, domain: djangoproject.com, country: US, importance: 2, aliases: [django, django security releases], hints: { github_repos: [django/django], urls: [{ url: "https://www.djangoproject.com/rss/weblog/", kind: news }] } }659 - { name: Ruby on Rails, domain: rubyonrails.org, country: US, importance: 2, aliases: [rails, ruby on rails, rails security announcements], hints: { github_repos: [rails/rails], urls: [{ url: "https://discuss.rubyonrails.org/c/security-announcements/9.rss", kind: security }] } }660 - { name: Laravel, domain: laravel.com, country: US, importance: 1, aliases: [laravel, laravel framework], hints: { github_repos: [laravel/framework] } }661 - { name: Spring, domain: spring.io, country: US, importance: 2, aliases: [spring, spring framework, spring boot, spring security, spring cve reports, pivotal], hints: { github_org: spring-projects, urls: [{ url: "https://spring.io/security.atom", kind: security }] } }662 - { name: Node.js, domain: nodejs.org, country: US, importance: 3, aliases: [node.js, nodejs, node, openjs foundation, node security releases], hints: { github_repos: [nodejs/node], urls: [{ url: "https://nodejs.org/en/feed/vulnerability.xml", kind: security }] } }663 - { name: Deno, domain: deno.com, country: US, importance: 1, aliases: [deno, deno land], hints: { github_repos: [denoland/deno] } }664 - { name: Python Software Foundation, domain: python.org, country: US, importance: 2, aliases: [python, cpython, psf, pypi, pip, security-announce], hints: { github_org: python } }665 - { name: PHP, domain: php.net, country: INT, importance: 2, aliases: [php, php group, php security releases], hints: { github_repos: [php/php-src], urls: [{ url: "https://www.php.net/releases/feed.php", kind: releases }] } }666 - { name: Ruby, domain: ruby-lang.org, country: JP, importance: 1, aliases: [ruby, ruby-lang, rubygems], hints: { github_repos: [ruby/ruby] } }667 - { name: Perl, domain: perl.org, country: INT, importance: 1, aliases: [perl, cpan, perl security], hints: { github_repos: [Perl/perl5] } }668 - { name: Go, domain: go.dev, country: US, importance: 2, aliases: [go, golang, go vulnerability database, govulncheck], hints: { github_repos: [golang/go, golang/vulndb], urls: [{ url: "https://vuln.go.dev/index/vulns.json", kind: security, name: go vulnerability database index }] } }669 - { name: Rust Foundation, domain: rust-lang.org, country: US, importance: 2, aliases: [rust, rust-lang, rustc, cargo, rust security response wg], hints: { github_org: rust-lang } }670 - { name: Erlang Ecosystem Foundation, domain: erlang.org, country: SE, importance: 1, aliases: [erlang, otp, erlang/otp, elixir ecosystem], hints: { github_repos: [erlang/otp] } }671 - { name: Electron, domain: electronjs.org, country: US, importance: 1, aliases: [electron, electronjs], hints: { github_repos: [electron/electron] } }672 - { name: Qt Group, domain: qt.io, country: FI, importance: 1, aliases: [qt, qt group, qt framework], hints: { ticker: QTCOM } }673 - { name: GNOME Foundation, domain: gnome.org, country: INT, importance: 1, aliases: [gnome, gtk, glib, libsoup], hints: { github_org: GNOME } }674 - { name: KDE, domain: kde.org, country: INT, importance: 1, aliases: [kde, kde security advisories, plasma], hints: { github_org: KDE, urls: [{ url: "https://kde.org/info/security/", kind: security }] } }675 - { name: PostgreSQL, domain: postgresql.org, country: INT, importance: 2, aliases: [postgresql, postgres, postgresql security], hints: { github_repos: [postgres/postgres], urls: [{ url: "https://www.postgresql.org/support/security/", kind: security }] } }676 - { name: MongoDB, domain: mongodb.com, country: US, importance: 2, aliases: [mongodb, mongo, atlas, mongodb security], hints: { github_org: mongodb, cik: "1441816", ticker: MDB, status_url: "https://status.mongodb.com", urls: [{ url: "https://jira.mongodb.org/sr/jira.issueviews:searchrequest-rss/temp/SearchRequest.xml?jqlQuery=project+%3D+SERVER+AND+labels+%3D+security&tempMax=50", kind: security }] } }677 - { name: MariaDB Foundation, domain: mariadb.org, country: FI, importance: 1, aliases: [mariadb, mariadb server], hints: { github_repos: [MariaDB/server] } }678 - { name: Redis, domain: redis.io, country: US, importance: 2, aliases: [redis, redis labs, redis security advisories, valkey alternative], hints: { github_repos: [redis/redis] } }679 - { name: SQLite, domain: sqlite.org, country: US, importance: 1, aliases: [sqlite] }680 - { name: ClickHouse, domain: clickhouse.com, country: US, importance: 1, aliases: [clickhouse], hints: { github_repos: [ClickHouse/ClickHouse] } }681 - { name: OpenSearch, domain: opensearch.org, country: US, importance: 1, aliases: [opensearch, opensearch project], hints: { github_org: opensearch-project } }682 - { name: Couchbase, domain: couchbase.com, country: US, importance: 1, aliases: [couchbase], hints: { ticker: BASE } }683 - { name: Neo4j, domain: neo4j.com, country: SE, importance: 1, aliases: [neo4j] }684 - { name: InfluxData, domain: influxdata.com, country: US, importance: 1, aliases: [influxdata, influxdb, telegraf], hints: { github_org: influxdata } }685 - { name: Cockroach Labs, domain: cockroachlabs.com, country: US, importance: 1, aliases: [cockroachdb, cockroach labs], hints: { github_repos: [cockroachdb/cockroach] } }686 - { name: Supabase, domain: supabase.com, country: SG, importance: 1, aliases: [supabase], hints: { github_org: supabase, status_url: "https://status.supabase.com" } }687 - { name: Homebrew, domain: brew.sh, country: INT, importance: 1, aliases: [homebrew, brew], hints: { github_org: Homebrew } }688 - { name: Chocolatey Software, domain: chocolatey.org, country: US, importance: 1, aliases: [chocolatey, choco] }689 - { name: Jamf, domain: jamf.com, country: US, importance: 2, aliases: [jamf, jamf pro, jamf threat labs, jamf protect], hints: { cik: "1721947", ticker: JAMF, status_url: "https://status.jamf.com", urls: [{ url: "https://www.jamf.com/blog/rss/", kind: blog }] } }690 - { name: Duo Security, domain: duo.com, country: US, importance: 1, aliases: [duo, duo security, cisco duo, duo labs, decipher], hints: { status_url: "https://status.duo.com" } }691 # ── Automotive & aerospace ──692 - { name: Tesla, domain: tesla.com, country: US, importance: 2, aliases: [tesla, tesla product security, tesla bug bounty], hints: { cik: "1318605", ticker: TSLA }, note: "tesla.com returns 403 (Akamai) to non-browser clients." }693 - { name: Ford Motor Company, domain: ford.com, country: US, importance: 1, aliases: [ford, ford motor, ford sync], hints: { cik: "37996", ticker: F } }694 - { name: General Motors, domain: gm.com, country: US, importance: 1, aliases: [gm, general motors, onstar], hints: { cik: "1467858", ticker: GM } }695 - { name: Stellantis, domain: stellantis.com, country: NL, importance: 1, aliases: [stellantis, fca, psa, jeep, chrysler, peugeot, uconnect], hints: { ticker: STLA } }696 - { name: Toyota Motor Corporation, domain: global.toyota, country: JP, importance: 1, aliases: [toyota, toyota motor, lexus, woven], hints: { ticker: TM } }697 - { name: BMW Group, domain: bmwgroup.com, country: DE, importance: 1, aliases: [bmw, bmw group, mini, rolls-royce motor cars] }698 - { name: Mercedes-Benz Group, domain: mercedes-benz.com, country: DE, importance: 1, aliases: [mercedes-benz, mercedes, daimler] }699 - { name: Volkswagen Group, domain: volkswagen-group.com, country: DE, importance: 1, aliases: [volkswagen, vw, volkswagen group, audi, porsche, cariad] }700 - { name: Rivian, domain: rivian.com, country: US, importance: 1, aliases: [rivian], hints: { cik: "1874178", ticker: RIVN } }701 - { name: Lucid Motors, domain: lucidmotors.com, country: US, importance: 1, aliases: [lucid, lucid motors], hints: { ticker: LCID } }702 - { name: Nissan Motor, domain: nissan-global.com, country: JP, importance: 1, aliases: [nissan, nissan motor, infiniti] }703 - { name: Hyundai Motor Company, domain: hyundai.com, country: KR, importance: 1, aliases: [hyundai, hyundai motor, bluelink] }704 - { name: Kia, domain: kia.com, country: KR, importance: 1, aliases: [kia, kia connect] }705 - { name: Volvo Cars, domain: volvocars.com, country: SE, importance: 1, aliases: [volvo cars, volvo], note: "volvocars.com returns 403 (Akamai) to non-browser clients." }706 - { name: Polestar, domain: polestar.com, country: SE, importance: 1, aliases: [polestar] }707 - { name: Boeing, domain: boeing.com, country: US, importance: 1, aliases: [boeing, jeppesen], hints: { cik: "12927", ticker: BA } }708 - { name: Airbus, domain: airbus.com, country: NL, importance: 1, aliases: [airbus, airbus cybersecurity, navblue], hints: { ticker: AIR } }709 # ── Medical devices & health IT ──710 - { name: Medtronic, domain: medtronic.com, country: IE, importance: 2, aliases: [medtronic, medtronic security bulletins, minimed, carelink], hints: { cik: "1613103", ticker: MDT }, note: "Security bulletins page (global.medtronic.com) is a JS shell (1.1 kB)." }711 - { name: Philips, domain: philips.com, country: NL, importance: 2, aliases: [philips, royal philips, philips product security, philips security advisories], hints: { ticker: PHIA, urls: [{ url: "https://www.philips.com/a-w/security/security-advisories.html", kind: security }] } }712 - { name: GE HealthCare, domain: gehealthcare.com, country: US, importance: 2, aliases: [ge healthcare, gehc, ge healthcare product security], hints: { cik: "1932393", ticker: GEHC, urls: [{ url: "https://www.gehealthcare.com/security", kind: security }] } }713 - { name: Siemens Healthineers, domain: siemens-healthineers.com, country: DE, importance: 2, aliases: [siemens healthineers, healthineers, shs cybersecurity], hints: { ticker: SHL, urls: [{ url: "https://www.siemens-healthineers.com/en-us/support-documentation/cybersecurity", kind: security }] } }714 - { name: Becton Dickinson, domain: bd.com, country: US, importance: 2, aliases: [bd, becton dickinson, bd product security, alaris, pyxis], hints: { cik: "10795", ticker: BDX }, note: "bd.com returns 403 (Akamai) to non-browser clients." }715 - { name: Baxter International, domain: baxter.com, country: US, importance: 2, aliases: [baxter, baxter product security, spectrum infusion, hillrom, welch allyn], hints: { cik: "10456", ticker: BAX, urls: [{ url: "https://www.baxter.com/product-security", kind: security }] } }716 - { name: Abbott, domain: abbott.com, country: US, importance: 1, aliases: [abbott, abbott laboratories, freestyle libre, abbott cybersecurity], hints: { cik: "1800", ticker: ABT } }717 - { name: Boston Scientific, domain: bostonscientific.com, country: US, importance: 1, aliases: [boston scientific, bsc product security], hints: { cik: "885725", ticker: BSX } }718 - { name: B. Braun, domain: bbraun.com, country: DE, importance: 1, aliases: [b. braun, b braun, bbraun, spacecom, infusomat] }719 - { name: Fresenius, domain: fresenius.com, country: DE, importance: 1, aliases: [fresenius, fresenius kabi, fresenius medical care], hints: { ticker: FRE } }720 - { name: Drager, domain: draeger.com, country: DE, importance: 1, aliases: [drager, draeger, dragerwerk], note: "draeger.com timed out from the cluster on 2026-09-13." }721 - { name: Mindray, domain: mindray.com, country: CN, importance: 1, aliases: [mindray] }722 - { name: Stryker, domain: stryker.com, country: US, importance: 1, aliases: [stryker, stryker product security, vocera], hints: { cik: "310764", ticker: SYK, urls: [{ url: "https://www.stryker.com/us/en/about/governance/cyber-security/product-security.html", kind: security }] } }723 - { name: Zimmer Biomet, domain: zimmerbiomet.com, country: US, importance: 1, aliases: [zimmer biomet, zimmer], hints: { cik: "1136869", ticker: ZBH } }724 - { name: Roche, domain: roche.com, country: CH, importance: 1, aliases: [roche, roche diagnostics, cobas], hints: { ticker: ROG } }725 - { name: Illumina, domain: illumina.com, country: US, importance: 1, aliases: [illumina, iseq, nextseq, universal copy service], hints: { cik: "1110803", ticker: ILMN } }726 - { name: Epic Systems, domain: epic.com, country: US, importance: 1, aliases: [epic, epic systems, mychart] }727 - { name: MEDITECH, domain: meditech.com, country: US, importance: 1, aliases: [meditech, meditech expanse] }728 - { name: athenahealth, domain: athenahealth.com, country: US, importance: 1, aliases: [athenahealth, athenaone], note: "athenahealth.com returns 403 (Akamai) to non-browser clients." }729 - { name: Veradigm, domain: veradigm.com, country: US, importance: 1, aliases: [veradigm, allscripts] }730 - key: security-research-and-threat-intel731 label: Security research teams, threat intelligence & security media732 description: Vendor research labs, independent researchers, threat-intelligence firms, internet-measurement services, non-profit trackers and the security press (media carry first_party false).733 provenance: "Curated from vendor research-blog directories, the Cyber Threat Alliance member list https://www.cyberthreatalliance.org/members/ and Feedspot 'Top cybersecurity blogs' (retrieved 2026-09-13); feeds verified with curl 2026-09-13"734 members:735 # ── Big-tech & vendor research teams with their own domain ──736 - { name: Google Project Zero, domain: googleprojectzero.blogspot.com, country: US, importance: 3, aliases: [project zero, p0, google project zero], hints: { github_org: googleprojectzero, urls: [{ url: "https://googleprojectzero.blogspot.com/feeds/posts/default", kind: blog }] }, note: "Official blog hosted on Blogspot (registrable domain blogspot.com)." }737 - { name: Google Threat Intelligence Group, domain: blog.google, country: US, importance: 3, aliases: [gtig, google threat intelligence group, google tag, threat analysis group], note: "blog.google/threat-analysis-group/ is HTML; its /rss/ path returns 404." }738 - { name: Mandiant, domain: mandiant.com, country: US, importance: 3, aliases: [mandiant, fireeye, mandiant intelligence, m-trends, google cloud mandiant], note: "mandiant.com redirects to cloud.google.com (JS-rendered blog); the old RSS path serves HTML." }739 - { name: Cisco Talos, domain: talosintelligence.com, country: US, importance: 3, aliases: [talos, cisco talos, talos intelligence, talos vulnerability reports], hints: { urls: [{ url: "https://blog.talosintelligence.com/rss/", kind: blog }] } }740 - { name: Secureworks, domain: secureworks.com, country: US, importance: 2, aliases: [secureworks, secureworks ctu, counter threat unit, taegis], note: "secureworks.com now redirects to sophos.com, which timed out from the cluster on 2026-09-13." }741 - { name: ESET WeLiveSecurity, domain: welivesecurity.com, country: SK, importance: 2, aliases: [welivesecurity, eset research, we live security], hints: { urls: [{ url: "https://www.welivesecurity.com/en/rss/feed/", kind: blog }] } }742 - { name: Kaspersky Securelist, domain: securelist.com, country: RU, importance: 3, aliases: [securelist, kaspersky great, global research and analysis team, kaspersky research], hints: { urls: [{ url: "https://securelist.com/feed/", kind: blog }] } }743 - { name: FortiGuard Labs, domain: fortiguard.com, country: US, importance: 2, aliases: [fortiguard, fortiguard labs, threat signal, outbreak alerts], hints: { urls: [{ url: "https://www.fortiguard.com/rss/threatsignal.xml", kind: blog }, { url: "https://filestore.fortinet.com/fortiguard/rss/outbreakalert.xml", kind: security, name: outbreak alerts }] } }744 # ── Threat-intelligence firms ──745 - { name: Recorded Future, domain: recordedfuture.com, country: US, importance: 2, aliases: [recorded future, insikt group, insikt], hints: { urls: [{ url: "https://www.recordedfuture.com/feed", kind: blog }] } }746 - { name: Flashpoint, domain: flashpoint.io, country: US, importance: 2, aliases: [flashpoint, flashpoint intel, risk based security], hints: { urls: [{ url: "https://flashpoint.io/feed/", kind: blog }] } }747 - { name: Intel 471, domain: intel471.com, country: US, importance: 2, aliases: [intel 471, intel471], hints: { urls: [{ url: "https://intel471.com/blog/feed", kind: blog }] } }748 - { name: Group-IB, domain: group-ib.com, country: SG, importance: 2, aliases: [group-ib, group ib], note: "Blog RSS paths return 404; the blog index is HTML." }749 - { name: Cyble, domain: cyble.com, country: US, importance: 1, aliases: [cyble, cyble research and intelligence labs, cril], hints: { urls: [{ url: "https://cyble.com/feed/", kind: blog }] } }750 - { name: SOCRadar, domain: socradar.io, country: US, importance: 1, aliases: [socradar], hints: { urls: [{ url: "https://socradar.io/feed/", kind: blog }] } }751 - { name: ZeroFox, domain: zerofox.com, country: US, importance: 1, aliases: [zerofox], hints: { urls: [{ url: "https://www.zerofox.com/feed/", kind: blog }] } }752 - { name: Silent Push, domain: silentpush.com, country: US, importance: 1, aliases: [silent push], hints: { urls: [{ url: "https://www.silentpush.com/feed/", kind: blog }] } }753 - { name: Team Cymru, domain: team-cymru.com, country: US, importance: 1, aliases: [team cymru, pure signal], hints: { urls: [{ url: "https://www.team-cymru.com/post/rss.xml", kind: blog }] } }754 - { name: EclecticIQ, domain: eclecticiq.com, country: NL, importance: 1, aliases: [eclecticiq], hints: { urls: [{ url: "https://blog.eclecticiq.com/rss.xml", kind: blog }] } }755 - { name: Resecurity, domain: resecurity.com, country: US, importance: 1, aliases: [resecurity], hints: { urls: [{ url: "https://www.resecurity.com/feed", kind: blog }] } }756 - { name: CloudSEK, domain: cloudsek.com, country: IN, importance: 1, aliases: [cloudsek], hints: { urls: [{ url: "https://www.cloudsek.com/blog/rss.xml", kind: blog }] } }757 - { name: Sygnia, domain: sygnia.co, country: IL, importance: 1, aliases: [sygnia], hints: { urls: [{ url: "https://www.sygnia.co/feed/", kind: blog }] } }758 - { name: Arctic Wolf, domain: arcticwolf.com, country: US, importance: 1, aliases: [arctic wolf, arctic wolf labs, cylance by arctic wolf], hints: { urls: [{ url: "https://arcticwolf.com/feed/", kind: blog }] } }759 - { name: AhnLab, domain: ahnlab.com, country: KR, importance: 1, aliases: [ahnlab, asec, ahnlab security intelligence center], hints: { urls: [{ url: "https://asec.ahnlab.com/en/feed/", kind: blog }] } }760 - { name: Positive Technologies, domain: ptsecurity.com, country: RU, importance: 1, aliases: [positive technologies, ptsecurity, pt expert security center], note: "ptsecurity.com did not answer from the cluster on 2026-09-13." }761 - { name: Sekoia.io, domain: sekoia.io, country: FR, importance: 1, aliases: [sekoia, sekoia.io, sekoia tdr], note: "blog.sekoia.io/feed/ serves HTML." }762 - { name: HarfangLab, domain: harfanglab.io, country: FR, importance: 1, aliases: [harfanglab], note: "/feed/ returns 403." }763 - { name: Deepwatch, domain: deepwatch.com, country: US, importance: 1, aliases: [deepwatch, deepwatch ati], hints: { urls: [{ url: "https://www.deepwatch.com/feed/", kind: blog }] } }764 - { name: Halcyon, domain: halcyon.ai, country: US, importance: 1, aliases: [halcyon, halcyon ransomware research], hints: { urls: [{ url: "https://www.halcyon.ai/blog/rss.xml", kind: blog }] } }765 - { name: Exodus Intelligence, domain: exodusintel.com, country: US, importance: 1, aliases: [exodus intelligence, exodus intel], hints: { urls: [{ url: "https://blog.exodusintel.com/feed/", kind: blog }] } }766 # ── Internet measurement, abuse tracking & non-profits ──767 - { name: The Shadowserver Foundation, domain: shadowserver.org, country: US, importance: 2, aliases: [shadowserver, shadowserver foundation], note: "News feeds return 404 with bot-challenge markers (also blocked on 2026-09-11)." }768 - { name: Spamhaus, domain: spamhaus.org, country: CH, importance: 2, aliases: [spamhaus, spamhaus project, sbl, dbl, drop list], note: "Resource-hub RSS returns 404; news page is HTML with bot-challenge markers." }769 - { name: abuse.ch, domain: abuse.ch, country: CH, importance: 2, aliases: [abuse.ch, urlhaus, threatfox, malwarebazaar, feodo tracker, sslbl], hints: { urls: [{ url: "https://feodotracker.abuse.ch/downloads/ipblocklist.json", kind: data, name: feodo tracker blocklist }] }, note: "URLhaus/ThreatFox/MalwareBazaar APIs require an Auth-Key since 2025." }770 - { name: GreyNoise Intelligence, domain: greynoise.io, country: US, importance: 2, aliases: [greynoise, greynoise labs], hints: { status_url: "https://status.greynoise.io", urls: [{ url: "https://www.greynoise.io/blog/rss.xml", kind: blog }] } }771 - { name: Censys, domain: censys.com, country: US, importance: 2, aliases: [censys, censys search, censys research], hints: { urls: [{ url: "https://censys.com/feed/", kind: blog }] } }772 - { name: Shodan, domain: shodan.io, country: US, importance: 2, aliases: [shodan, shodan monitor, internetdb], hints: { urls: [{ url: "https://blog.shodan.io/rss/", kind: blog }] } }773 - { name: BinaryEdge, domain: binaryedge.io, country: CH, importance: 1, aliases: [binaryedge, coalition binaryedge], note: "403 (Cloudflare) to non-browser clients." }774 - { name: Have I Been Pwned, domain: haveibeenpwned.com, country: AU, importance: 2, aliases: [hibp, have i been pwned, haveibeenpwned, pwned passwords], hints: { urls: [{ url: "https://haveibeenpwned.com/api/v3/latestbreach", kind: data, name: latest breach }, { url: "https://haveibeenpwned.com/api/v3/breaches", kind: data, name: breaches }] } }775 - { name: ransomware.live, domain: ransomware.live, country: FR, importance: 2, aliases: [ransomware.live, ransomware live, julien mousqueton], hints: { urls: [{ url: "https://ransomware.live/rss.xml", kind: security }, { url: "https://api.ransomware.live/v2/recentvictims", kind: data, name: recent victims }] } }776 - { name: The DFIR Report, domain: thedfirreport.com, country: US, importance: 1, aliases: [dfir report, the dfir report], hints: { urls: [{ url: "https://thedfirreport.com/feed/", kind: blog }] } }777 - { name: Citizen Lab, domain: citizenlab.ca, country: CA, importance: 2, aliases: [citizen lab, the citizen lab, munk school citizen lab], hints: { urls: [{ url: "https://citizenlab.ca/feed/", kind: blog }] } }778 - { name: Amnesty International Security Lab, domain: amnesty.org, country: GB, importance: 1, aliases: [amnesty security lab, amnesty tech, amnesty international], hints: { urls: [{ url: "https://securitylab.amnesty.org/feed/", kind: blog }] } }779 - { name: VirusTotal, domain: virustotal.com, country: ES, importance: 2, aliases: [virustotal, vt, virustotal intelligence], hints: { urls: [{ url: "https://blog.virustotal.com/feeds/posts/default", kind: blog }] } }780 - { name: ANY.RUN, domain: any.run, country: AE, importance: 1, aliases: [any.run, anyrun, any run sandbox], hints: { urls: [{ url: "https://any.run/cybersecurity-blog/feed/", kind: blog }] } }781 # ── Incident response, cloud & supply-chain research ──782 - { name: Huntress, domain: huntress.com, country: US, importance: 2, aliases: [huntress, huntress labs, huntress soc], hints: { urls: [{ url: "https://www.huntress.com/blog/rss.xml", kind: blog }] } }783 - { name: Volexity, domain: volexity.com, country: US, importance: 2, aliases: [volexity, volexity threat research], hints: { urls: [{ url: "https://www.volexity.com/feed/", kind: blog }] } }784 - { name: Cado Security, domain: cadosecurity.com, country: GB, importance: 1, aliases: [cado, cado security, cado labs, darktrace cado], note: "Blog RSS path serves HTML; Cado is now part of Darktrace." }785 - { name: Darktrace, domain: darktrace.com, country: GB, importance: 1, aliases: [darktrace, darktrace threat research], hints: { urls: [{ url: "https://www.darktrace.com/blog/rss.xml", kind: blog }] } }786 - { name: Wiz, domain: wiz.io, country: US, importance: 2, aliases: [wiz, wiz research, wiz threat research], hints: { status_url: "https://status.wiz.io", urls: [{ url: "https://www.wiz.io/feed/rss.xml", kind: blog }] } }787 - { name: Orca Security, domain: orca.security, country: US, importance: 1, aliases: [orca security, orca research pod], hints: { urls: [{ url: "https://orca.security/feed/", kind: blog }] } }788 - { name: Aqua Security, domain: aquasec.com, country: IL, importance: 2, aliases: [aqua security, aqua nautilus, team nautilus, trivy], hints: { github_org: aquasecurity, urls: [{ url: "https://blog.aquasec.com/rss.xml", kind: blog }] } }789 - { name: Sysdig, domain: sysdig.com, country: US, importance: 1, aliases: [sysdig, sysdig threat research team, sysdig trt, falco], hints: { github_org: sysdiglabs, urls: [{ url: "https://sysdig.com/feed/", kind: blog }] } }790 - { name: JFrog, domain: jfrog.com, country: US, importance: 2, aliases: [jfrog, jfrog security research, artifactory, xray], hints: { cik: "1800667", ticker: FROG, urls: [{ url: "https://jfrog.com/blog/feed/", kind: blog }] } }791 - { name: Socket, domain: socket.dev, country: US, importance: 1, aliases: [socket, socket security, socket threat research], note: "Blog RSS returns 403 (Cloudflare) / 404." }792 - { name: Phylum, domain: phylum.io, country: US, importance: 1, aliases: [phylum, phylum research, veracode phylum], note: "blog.phylum.io does not resolve; Phylum was acquired by Veracode." }793 - { name: ReversingLabs, domain: reversinglabs.com, country: US, importance: 1, aliases: [reversinglabs, reversing labs, spectra], hints: { urls: [{ url: "https://www.reversinglabs.com/blog/rss.xml", kind: blog }] } }794 - { name: Chainguard, domain: chainguard.dev, country: US, importance: 1, aliases: [chainguard, wolfi, chainguard images], hints: { github_org: chainguard-dev, urls: [{ url: "https://www.chainguard.dev/unchained/rss.xml", kind: blog }] } }795 - { name: Endor Labs, domain: endorlabs.com, country: US, importance: 1, aliases: [endor labs], hints: { urls: [{ url: "https://www.endorlabs.com/learn/rss.xml", kind: blog }] } }796 - { name: Legit Security, domain: legitsecurity.com, country: US, importance: 1, aliases: [legit security], hints: { urls: [{ url: "https://www.legitsecurity.com/blog/rss.xml", kind: blog }] } }797 - { name: Cycode, domain: cycode.com, country: US, importance: 1, aliases: [cycode], hints: { urls: [{ url: "https://cycode.com/feed/", kind: blog }] } }798 - { name: Mend.io, domain: mend.io, country: IL, importance: 1, aliases: [mend, mend.io, whitesource, renovate], hints: { urls: [{ url: "https://www.mend.io/blog/feed/", kind: blog }] } }799 - { name: Checkmarx, domain: checkmarx.com, country: US, importance: 1, aliases: [checkmarx, checkmarx research, checkmarx zero], hints: { urls: [{ url: "https://checkmarx.com/feed/", kind: blog }] } }800 - { name: Veracode, domain: veracode.com, country: US, importance: 1, aliases: [veracode, veracode research], note: "Blog RSS feed returns an empty channel (0 items)." }801 # ── Offensive research & consultancies ──802 - { name: Trail of Bits, domain: trailofbits.com, country: US, importance: 2, aliases: [trail of bits, tob, slither, echidna], hints: { github_org: trailofbits, urls: [{ url: "https://blog.trailofbits.com/feed/", kind: blog }] } }803 - { name: NCC Group, domain: nccgroup.com, country: GB, importance: 2, aliases: [ncc group, ncc group research, fox-it], hints: { ticker: NCC }, note: "research.nccgroup.com/feed/ serves HTML; the US research-blog feed returns 404." }804 - { name: Bishop Fox, domain: bishopfox.com, country: US, importance: 1, aliases: [bishop fox, bishopfox], hints: { github_org: BishopFox, urls: [{ url: "https://bishopfox.com/blog/rss.xml", kind: blog }] } }805 - { name: watchTowr, domain: watchtowr.com, country: SG, importance: 2, aliases: [watchtowr, watchtowr labs], hints: { github_org: watchtowrlabs, urls: [{ url: "https://labs.watchtowr.com/rss/", kind: blog }] } }806 - { name: Assetnote, domain: assetnote.io, country: AU, importance: 1, aliases: [assetnote, assetnote research, searchlight cyber assetnote], hints: { urls: [{ url: "https://www.assetnote.io/resources/research/rss.xml", kind: blog }] } }807 - { name: Horizon3.ai, domain: horizon3.ai, country: US, importance: 1, aliases: [horizon3, horizon3.ai, nodezero, horizon3 attack team], hints: { urls: [{ url: "https://www.horizon3.ai/feed/", kind: blog }] } }808 - { name: Praetorian, domain: praetorian.com, country: US, importance: 1, aliases: [praetorian], hints: { github_org: praetorian-inc, urls: [{ url: "https://www.praetorian.com/blog/feed/", kind: blog }] } }809 - { name: Synacktiv, domain: synacktiv.com, country: FR, importance: 1, aliases: [synacktiv], hints: { github_org: synacktiv, urls: [{ url: "https://www.synacktiv.com/en/feed/lastblog.xml", kind: blog }] } }810 - { name: Quarkslab, domain: quarkslab.com, country: FR, importance: 1, aliases: [quarkslab, qb], hints: { github_org: quarkslab, urls: [{ url: "https://blog.quarkslab.com/feeds/all.atom.xml", kind: blog }] } }811 - { name: PortSwigger, domain: portswigger.net, country: GB, importance: 2, aliases: [portswigger, burp suite, portswigger research, the daily swig], hints: { urls: [{ url: "https://portswigger.net/research/rss", kind: blog }] } }812 - { name: ProjectDiscovery, domain: projectdiscovery.io, country: US, importance: 1, aliases: [projectdiscovery, nuclei, nuclei templates, subfinder], hints: { github_org: projectdiscovery, urls: [{ url: "https://blog.projectdiscovery.io/rss/", kind: blog }] } }813 - { name: MDSec, domain: mdsec.co.uk, country: GB, importance: 1, aliases: [mdsec, mdsec activebreach], hints: { urls: [{ url: "https://www.mdsec.co.uk/feed/", kind: blog }] } }814 - { name: Pen Test Partners, domain: pentestpartners.com, country: GB, importance: 1, aliases: [pen test partners, pentest partners, ptp], hints: { urls: [{ url: "https://www.pentestpartners.com/feed/", kind: blog }] } }815 # ── OT / IoT / mobile research ──816 - { name: Dragos, domain: dragos.com, country: US, importance: 2, aliases: [dragos, dragos worldview, dragos ot], note: "/feed/ returns 404; the blog index is HTML." }817 - { name: Claroty, domain: claroty.com, country: US, importance: 2, aliases: [claroty, team82, claroty team82], hints: { urls: [{ url: "https://claroty.com/team82/disclosure-dashboard", kind: security, name: team82 disclosure dashboard }] } }818 - { name: Nozomi Networks, domain: nozominetworks.com, country: US, importance: 1, aliases: [nozomi networks, nozomi labs], note: "Blog RSS path returns 404; /labs is HTML." }819 - { name: Armis, domain: armis.com, country: US, importance: 1, aliases: [armis, armis labs], note: "403 (Cloudflare) to non-browser clients." }820 - { name: Forescout, domain: forescout.com, country: US, importance: 1, aliases: [forescout, vedere labs, forescout research], hints: { urls: [{ url: "https://www.forescout.com/feed/", kind: blog }] } }821 - { name: Lookout, domain: lookout.com, country: US, importance: 1, aliases: [lookout, lookout threat lab], hints: { urls: [{ url: "https://www.lookout.com/blog/rss.xml", kind: blog }] } }822 - { name: Zimperium, domain: zimperium.com, country: US, importance: 1, aliases: [zimperium, zlabs], note: "Blog RSS paths return 404." }823 - { name: NETSCOUT, domain: netscout.com, country: US, importance: 1, aliases: [netscout, asert, arbor networks, netscout asert], hints: { ticker: NTCT, urls: [{ url: "https://www.netscout.com/blog/asert/rss.xml", kind: blog }] } }824 - { name: Corero Network Security, domain: corero.com, country: GB, importance: 1, aliases: [corero, corero ddos], note: "Blog RSS feed returns an empty channel (0 items)." }825 # ── Independent voices & security press (first_party false) ──826 - { name: Krebs on Security, domain: krebsonsecurity.com, country: US, first_party: false, importance: 2, aliases: [krebs on security, krebsonsecurity, brian krebs], hints: { urls: [{ url: "https://krebsonsecurity.com/feed/", kind: news }] } }827 - { name: Schneier on Security, domain: schneier.com, country: US, first_party: false, importance: 1, aliases: [schneier on security, bruce schneier], hints: { urls: [{ url: "https://www.schneier.com/feed/atom/", kind: blog }] } }828 - { name: Troy Hunt, domain: troyhunt.com, country: AU, first_party: false, importance: 1, aliases: [troy hunt, troyhunt], hints: { urls: [{ url: "https://www.troyhunt.com/rss/", kind: blog }] } }829 - { name: Graham Cluley, domain: grahamcluley.com, country: GB, first_party: false, importance: 1, aliases: [graham cluley, smashing security], hints: { urls: [{ url: "https://grahamcluley.com/feed/", kind: blog }] } }830 - { name: BleepingComputer, domain: bleepingcomputer.com, country: US, first_party: false, importance: 2, aliases: [bleepingcomputer, bleeping computer], hints: { urls: [{ url: "https://www.bleepingcomputer.com/feed/", kind: news }] } }831 - { name: The Record, domain: therecord.media, country: US, first_party: false, importance: 2, aliases: [the record, the record by recorded future, click here podcast], hints: { urls: [{ url: "https://therecord.media/feed", kind: news }] } }832 - { name: SecurityWeek, domain: securityweek.com, country: US, first_party: false, importance: 2, aliases: [securityweek, security week], hints: { urls: [{ url: "https://www.securityweek.com/feed/", kind: news }] } }833 - { name: Dark Reading, domain: darkreading.com, country: US, first_party: false, importance: 2, aliases: [dark reading, darkreading], hints: { urls: [{ url: "https://www.darkreading.com/rss.xml", kind: news }] } }834 - { name: The Hacker News, domain: thehackernews.com, country: IN, first_party: false, importance: 2, aliases: [the hacker news, thn, thehackernews], hints: { urls: [{ url: "https://feeds.feedburner.com/TheHackersNews", kind: news }] } }835 - { name: Risky Business, domain: risky.biz, country: AU, first_party: false, importance: 2, aliases: [risky business, risky biz, risky bulletin, patrick gray], hints: { urls: [{ url: "https://risky.biz/feeds/risky-business-news/", kind: news }] } }836 - { name: CyberScoop, domain: cyberscoop.com, country: US, first_party: false, importance: 2, aliases: [cyberscoop, scoop news group], hints: { urls: [{ url: "https://cyberscoop.com/feed/", kind: news }] } }837 - { name: Infosecurity Magazine, domain: infosecurity-magazine.com, country: GB, first_party: false, importance: 1, aliases: [infosecurity magazine, infosecurity-magazine], hints: { urls: [{ url: "https://www.infosecurity-magazine.com/rss/news/", kind: news }] } }838 - { name: Help Net Security, domain: helpnetsecurity.com, country: HR, first_party: false, importance: 1, aliases: [help net security, helpnetsecurity], hints: { urls: [{ url: "https://www.helpnetsecurity.com/feed/", kind: news }] } }839 - { name: Security Affairs, domain: securityaffairs.com, country: IT, first_party: false, importance: 1, aliases: [security affairs, pierluigi paganini], hints: { urls: [{ url: "https://securityaffairs.com/feed", kind: news }] } }840 - { name: CSO Online, domain: csoonline.com, country: US, first_party: false, importance: 1, aliases: [cso online, csoonline, cso], hints: { urls: [{ url: "https://www.csoonline.com/feed/", kind: news }] } }841 - { name: Cybersecurity Dive, domain: cybersecuritydive.com, country: US, first_party: false, importance: 1, aliases: [cybersecurity dive, industry dive], hints: { urls: [{ url: "https://www.cybersecuritydive.com/feeds/news/", kind: news }] } }842 - { name: DataBreaches.net, domain: databreaches.net, country: US, first_party: false, importance: 1, aliases: [databreaches.net, databreaches, dissent doe], hints: { urls: [{ url: "https://databreaches.net/feed/", kind: news }] } }843 - { name: heise Security, domain: heise.de, country: DE, language: de, first_party: false, importance: 1, aliases: [heise security, heise online, heisec], hints: { urls: [{ url: "https://www.heise.de/security/feed.xml", kind: news }] } }844 - { name: The Register, domain: theregister.com, country: GB, first_party: false, importance: 1, aliases: [the register, el reg], hints: { urls: [{ url: "https://www.theregister.com/security/headlines.atom", kind: news }] } }845 - { name: Ars Technica, domain: arstechnica.com, country: US, first_party: false, importance: 1, aliases: [ars technica, ars], hints: { urls: [{ url: "https://arstechnica.com/security/feed/", kind: news }] } }846 - { name: WIRED, domain: wired.com, country: US, first_party: false, importance: 1, aliases: [wired, wired security], hints: { urls: [{ url: "https://www.wired.com/feed/category/security/latest/rss", kind: news }] } }847 - key: bug-bounty-and-disclosure-platforms848 label: Bug-bounty & coordinated-disclosure platforms849 description: Crowdsourced security and vulnerability-disclosure platforms, hacking contests and disclosure standards.850 provenance: "Wikipedia 'Bug bounty program' + platform official sites (retrieved 2026-09-13); URLs verified with curl 2026-09-13"851 members:852 - { name: HackerOne, domain: hackerone.com, country: US, importance: 3, aliases: [hackerone, h1, hacktivity, hackerone hacktivity], note: "hackerone.com/hacktivity is a JS shell (1.8 kB); the GraphQL API requires a token. status.hackerone.com answered on the Statuspage API but with an empty HTTP status code from the cluster." }853 - { name: Bugcrowd, domain: bugcrowd.com, country: US, importance: 2, aliases: [bugcrowd, crowdcontrol, bugcrowd vrt], hints: { github_org: bugcrowd } }854 - { name: Intigriti, domain: intigriti.com, country: BE, importance: 2, aliases: [intigriti], note: "Researcher blog RSS path returns 404; already a registry source." }855 - { name: YesWeHack, domain: yeswehack.com, country: FR, importance: 2, aliases: [yeswehack, yes we hack, dojo yeswehack], note: "blog.yeswehack.com/feed/ serves HTML." }856 - { name: Synack, domain: synack.com, country: US, importance: 1, aliases: [synack, synack red team, srt] }857 - { name: Immunefi, domain: immunefi.com, country: SG, importance: 2, aliases: [immunefi, web3 bug bounty] }858 - { name: Zerocopter, domain: zerocopter.com, country: NL, importance: 1, aliases: [zerocopter] }859 - { name: Open Bug Bounty, domain: openbugbounty.org, country: INT, importance: 1, aliases: [open bug bounty, openbugbounty], note: "403 (Cloudflare) to non-browser clients, including the RSS feed." }860 - { name: huntr, domain: huntr.com, country: US, importance: 1, aliases: [huntr, huntr.dev, protect ai huntr] }861 - { name: disclose.io, domain: disclose.io, country: US, importance: 1, aliases: [disclose.io, disclose, safe harbor project], hints: { github_org: disclose } }862 - { name: Pwn2Own, domain: pwn2own.com, country: US, importance: 2, aliases: [pwn2own, pwn2own vancouver, pwn2own automotive, pwn2own ireland] }863 - { name: HackenProof, domain: hackenproof.com, country: EE, importance: 1, aliases: [hackenproof, hacken] }864 - { name: Code4rena, domain: code4rena.com, country: US, importance: 1, aliases: [code4rena, c4, code arena] }865 - { name: Cobalt, domain: cobalt.io, country: US, importance: 1, aliases: [cobalt, cobalt.io, pentest as a service] }866