SPB Git forge
spboucher.ai ↗

spb/websensor

Public
33commits 1branches 0releases
3.4 MBsize
maindefault branch
10 days agolast push
TypeScript 55.4% Python 43.2% SQL 1.2%

coverage: cybersecurity universe — 793 organizations (142 national agencies/CERTs in 99 countries, 45 vulnerability databases & standards, 487 vendor PSIRTs, 105 research/threat-intel, 14 disclosure platforms), 153 verified advisory-feed hints, 36 status pages

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Simon-Pierre Boucher committed 11 days ago (Sep 13, 2026) parent d866fac

1 changed file +865 −0

added config/coverage/42-cyber.yaml +865 −0
@@ -0,0 +1,865 @@
1 +# config/coverage/42-cyber.yaml — Cybersecurity coverage universe (2026-09-13).
2 +# Denominator of the coverage score for the `cyber` sector: national agencies & CERTs, vulnerability databases and
3 +# standards bodies, vendor PSIRTs, security research / threat-intel teams, bug-bounty platforms. Every domain was
4 +# resolved on 2026-09-13; every `hints.urls` entry was fetched with curl the same day (HTTP 200, feed with items or
5 +# HTML page containing the advisory list). Organizations whose advisory pages are blocked or JS-only (Cloudflare/Akamai
6 +# 403, Salesforce/Angular shells, geo-blocks) are listed without hints and carry a `note` — the universe is the
7 +# denominator, not the registry. Already monitored (config/sources.yaml + sources.d/42-cybersecurity.yaml):
8 +# cisa nvd nist cert-cc mitre first-org ic3 circl microsoft-security apple-security android chromium cisco-security
9 +# palo-alto-networks fortinet sentinelone sophos trend-micro zero-day-initiative tenable rapid7 crowdstrike mandiant
10 +# ivanti broadcom atlassian yubico jamf hashicorp gitlab github kubernetes docker red-hat suse gentoo linux-kernel
11 +# openssl wordpress osv sigstore chainguard cyclonedx spdx owasp exploit-db ransomware-live abuse-ch ncsc-uk cccs
12 +# cert-fr cert-bund cert-eu enisa europol jpcert jvn ipa-japan ncsc-nl incibe cert-pl cert-at ccb-belgium cert-se
13 +# si-cert cert-hr csirt-sk dnsc-romania cert-ua kisa-krcert cert-br cert-ae traficom-ncsc-fi kaspersky eset check-point
14 +# recorded-future greynoise huntress qualys bitdefender censys shodan intel471 flashpoint socradar … and the media block.
15 +sector: cyber
16 +label: Cybersecurity
17 +description: National cybersecurity agencies and CERTs, vulnerability databases and standards bodies, vendor product-security teams (PSIRT), threat-intelligence and research teams, and bug-bounty platforms whose publications move the security posture of the Web.
18 +weight: 1.4
19 +categories: [cyber, technology]
20 +tier: B
21 +universes:
22 + - key: national-agencies-and-certs
23 + label: National cybersecurity agencies & CERTs/CSIRTs
24 + description: Government cybersecurity agencies, national CERT/CSIRT teams, EU and international bodies, sector ISACs.
25 + provenance: "FIRST member directory https://www.first.org/members/teams/ + ENISA CSIRTs inventory https://www.enisa.europa.eu/topics/incident-response/csirt-inventory + Wikipedia 'List of computer security incident response teams' (retrieved 2026-09-13); feeds verified with curl 2026-09-13"
26 + members:
27 + # ── North America ──
28 + - { name: Cybersecurity and Infrastructure Security Agency, domain: cisa.gov, country: US, importance: 3, aliases: [cisa, us-cert, ics-cert, kev, known exploited vulnerabilities, vulnrichment], hints: { github_org: cisagov, urls: [{ url: "https://www.cisa.gov/cybersecurity-advisories/all.xml", kind: security }, { url: "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json", kind: security, name: kev catalog json }] } }
29 + - { name: National Security Agency, domain: nsa.gov, country: US, importance: 3, aliases: [nsa, nsa cybersecurity collaboration center, ccc], hints: { github_org: nsacyber }, note: "nsa.gov returns 403 (Akamai) to non-browser clients; advisories are PDFs under /Press-Room/Cybersecurity-Advisories-Guidance/." }
30 + - { name: FBI Internet Crime Complaint Center, domain: ic3.gov, country: US, importance: 2, aliases: [ic3, fbi ic3, internet crime complaint center, psa], note: "PSA index is HTML behind a bot check (no RSS); already a registry source with discover rss false." }
31 + - { name: Federal Bureau of Investigation, domain: fbi.gov, country: US, importance: 2, aliases: [fbi, fbi cyber division] }
32 + - { name: CERT Coordination Center, domain: cert.org, country: US, importance: 3, aliases: [cert/cc, cert cc, sei cert, vulnerability notes, vince], hints: { urls: [{ url: "https://www.kb.cert.org/vuls/atomfeed/", kind: security }] } }
33 + - { name: DoD Cyber Crime Center, domain: dc3.mil, country: US, importance: 1, aliases: [dc3, dod vulnerability disclosure program, dod vdp], note: "403 (Akamai) to non-browser clients." }
34 + - { name: US Cyber Command, domain: cybercom.mil, country: US, importance: 1, aliases: [cybercom, uscybercom, cyber national mission force], note: "403 (Akamai) to non-browser clients." }
35 + - { name: Canadian Centre for Cyber Security, domain: cyber.gc.ca, country: CA, importance: 3, aliases: [cccs, cyber centre, centre canadien pour la cybersecurite, cse cyber centre], hints: { urls: [{ url: "https://www.cyber.gc.ca/api/cccs/atom/v1/get?feed=alerts_advisories&lang=en", kind: security }] } }
36 + - { name: CERT-MX Guardia Nacional, domain: gob.mx, country: MX, importance: 1, aliases: [cert-mx, cert mx, guardia nacional cibernetica], note: "CERT-MX publishes under gob.mx (Guardia Nacional); no dedicated domain or feed." }
37 + # ── Europe ──
38 + - { name: National Cyber Security Centre, domain: ncsc.gov.uk, country: GB, importance: 3, aliases: [ncsc, ncsc uk, ncsc-uk, gchq ncsc], hints: { urls: [{ url: "https://www.ncsc.gov.uk/api/1/services/v1/all-rss-feed.xml", kind: security }] } }
39 + - { name: ANSSI, domain: cyber.gouv.fr, country: FR, language: fr, importance: 3, aliases: [anssi, agence nationale de la securite des systemes d'information], note: "cyber.gouv.fr has no RSS (/actualites/feed 404); advisories are published by CERT-FR." }
40 + - { name: CERT-FR, domain: cert.ssi.gouv.fr, country: FR, language: fr, importance: 3, aliases: [cert-fr, certfr, cert fr, anssi cert], hints: { urls: [{ url: "https://www.cert.ssi.gouv.fr/avis/feed/", kind: security }, { url: "https://www.cert.ssi.gouv.fr/alerte/feed/", kind: security, name: alertes }] } }
41 + - { name: Bundesamt fur Sicherheit in der Informationstechnik, domain: bsi.bund.de, country: DE, language: de, importance: 3, aliases: [bsi, federal office for information security, bsi germany], note: "bsi.bund.de RSS endpoints return 404 (2026-09-11 and 2026-09-13); advisories flow through CERT-Bund WID." }
42 + - { name: CERT-Bund, domain: cert-bund.de, country: DE, language: de, importance: 3, aliases: [cert-bund, certbund, wid, warn- und informationsdienst], hints: { urls: [{ url: "https://wid.cert-bund.de/content/public/securityAdvisory/rss", kind: security }] }, note: "The WID 'rss' endpoint returns a JSON envelope (items[]), not XML." }
43 + - { name: Nationaal Cyber Security Centrum, domain: ncsc.nl, country: NL, importance: 3, aliases: [ncsc-nl, ncsc nl, ncsc netherlands], hints: { urls: [{ url: "https://advisories.ncsc.nl/rss/advisories", kind: security }] } }
44 + - { name: Centre for Cybersecurity Belgium, domain: ccb.belgium.be, country: BE, importance: 2, aliases: [ccb, cert.be, centre for cyber security belgium, ccb belgium], hints: { urls: [{ url: "https://ccb.belgium.be/advisories.xml", kind: security }] } }
45 + - { name: Traficom National Cyber Security Centre Finland, domain: kyberturvallisuuskeskus.fi, country: FI, importance: 2, aliases: [ncsc-fi, ncsc fi, kyberturvallisuuskeskus, cert-fi, traficom], hints: { urls: [{ url: "https://www.kyberturvallisuuskeskus.fi/feed/rss/en", kind: security }] } }
46 + - { name: Norwegian National Security Authority, domain: nsm.no, country: "NO", language: "no", importance: 2, aliases: [nsm, ncsc-no, ncsc norway, norcert, nasjonal sikkerhetsmyndighet], note: "nsm.no exposes no RSS (/rss and /aktuelt/rss return the HTML site or 404)." }
47 + - { name: CERT-SE, domain: cert.se, country: SE, language: sv, importance: 2, aliases: [cert-se, cert se, msb cert], hints: { urls: [{ url: "https://www.cert.se/feed.rss", kind: security }] } }
48 + - { name: Swedish Civil Contingencies Agency, domain: msb.se, country: SE, language: sv, importance: 1, aliases: [msb, myndigheten for samhallsskydd och beredskap] }
49 + - { name: Centre for Cyber Security Denmark, domain: cfcs.dk, country: DK, language: da, importance: 2, aliases: [cfcs, center for cybersikkerhed, ncsc denmark], note: "No RSS endpoint found (/da/rss/ serves the HTML news page)." }
50 + - { name: INCIBE, domain: incibe.es, country: ES, importance: 2, aliases: [incibe, incibe-cert, instituto nacional de ciberseguridad], hints: { urls: [{ url: "https://www.incibe.es/en/incibe-cert/early-warning/security-advisories/feed", kind: security }] } }
51 + - { name: CCN-CERT, domain: ccn-cert.cni.es, country: ES, language: es, importance: 2, aliases: [ccn-cert, ccn cert, centro criptologico nacional], note: "RSS feeds (component/obrss) return 403 to non-browser clients." }
52 + - { name: Agenzia per la Cybersicurezza Nazionale, domain: acn.gov.it, country: IT, language: it, importance: 2, aliases: [acn, agenzia cybersicurezza nazionale], note: "acn.gov.it/portale/rss returns 404; bulletins are published by CSIRT Italia." }
53 + - { name: CSIRT Italia, domain: csirt.gov.it, country: IT, language: it, importance: 2, aliases: [csirt italia, csirt-it, csirt-ita], hints: { urls: [{ url: "https://www.csirt.gov.it/contenuti/rss.xml", kind: security }] }, note: "The /contenuti/rss.xml path serves the 'Alert e Bollettini' HTML list (CVE-rich), not XML; /rss returns 403." }
54 + - { name: Centro Nacional de Ciberseguranca, domain: cncs.gov.pt, country: PT, language: pt, importance: 2, aliases: [cncs, cert.pt, cert-pt], note: "cncs.gov.pt/pt/rss/ returned HTTP 517 (WAF); cert.pt resolves to the same host." }
55 + - { name: NUKIB, domain: nukib.gov.cz, country: CZ, language: cs, importance: 2, aliases: [nukib, narodni urad pro kybernetickou a informacni bezpecnost, govcert.cz], note: "No RSS at /cs/rss/ (404)." }
56 + - { name: GovCERT.CZ, domain: govcert.cz, country: CZ, language: cs, importance: 1, aliases: [govcert cz, govcert-cz] }
57 + - { name: SK-CERT, domain: sk-cert.sk, country: SK, language: sk, importance: 2, aliases: [sk-cert, skcert, national cyber security centre sk-cert], note: "No RSS (/feed 404); csirt.sk (CSIRT.SK, governmental) is already a registry source." }
58 + - { name: National Security Authority Slovakia, domain: nbu.gov.sk, country: SK, language: sk, importance: 1, aliases: [nbu, narodny bezpecnostny urad] }
59 + - { name: CERT Polska, domain: cert.pl, country: PL, language: pl, importance: 2, aliases: [cert polska, cert.pl, cert-pl, nask cert], note: "RSS paths (/rss/, /en/rss/) return 404 on 2026-09-13; the registry uses another sensor." }
60 + - { name: NASK, domain: nask.pl, country: PL, language: pl, importance: 1, aliases: [nask, naukowa i akademicka siec komputerowa] }
61 + - { name: CSIRT GOV Poland, domain: csirt.gov.pl, country: PL, language: pl, importance: 1, aliases: [csirt gov, csirt-gov, abw csirt] }
62 + - { name: Estonian Information System Authority, domain: ria.ee, country: EE, importance: 2, aliases: [ria, cert-ee, cert ee, riigi infosusteemi amet], note: "No RSS (/en/rss 404)." }
63 + - { name: CERT.LV, domain: cert.lv, country: LV, importance: 2, aliases: [cert.lv, cert-lv, cert lv], note: "/en/feed and /lv/rss return the HTML site." }
64 + - { name: National Cyber Security Centre Lithuania, domain: nksc.lt, country: LT, language: lt, importance: 2, aliases: [nksc, nksc lt, cert-lt, nacionalinis kibernetinio saugumo centras], note: "RSS endpoints return 403 (Cloudflare)." }
65 + - { name: ENISA, domain: enisa.europa.eu, country: EU, importance: 3, aliases: [enisa, european union agency for cybersecurity, euvd, european vulnerability database], hints: { urls: [{ url: "https://euvdservices.enisa.europa.eu/api/lastvulnerabilities", kind: security, name: euvd last vulnerabilities }] }, note: "enisa.europa.eu/rss.xml returns 404; the EUVD API is public JSON." }
66 + - { name: CERT-EU, domain: cert.europa.eu, country: EU, importance: 3, aliases: [cert-eu, cert eu, certeu], hints: { urls: [{ url: "https://cert.europa.eu/publications/security-advisories-rss", kind: security }] } }
67 + - { name: Europol European Cybercrime Centre, domain: europol.europa.eu, country: EU, importance: 2, aliases: [europol, ec3, european cybercrime centre], note: "/newsroom/rss returns 404 on 2026-09-13." }
68 + - { name: National Cyber Security Centre Ireland, domain: ncsc.gov.ie, country: IE, importance: 2, aliases: [ncsc-ie, ncsc ie, csirt-ie], hints: { urls: [{ url: "https://www.ncsc.gov.ie/news/", kind: security }] }, note: "/news/ is the Alerts & Advisories HTML list (200+ CVEs); the RSS/ATOM links it advertises return 404." }
69 + - { name: National Cyber Security Centre Switzerland, domain: ncsc.admin.ch, country: CH, importance: 2, aliases: [ncsc-ch, ncsc ch, ncsc switzerland, melani, bacs], note: "RSS endpoints return 404 on 2026-09-13." }
70 + - { name: GovCERT.ch, domain: govcert.ch, country: CH, importance: 1, aliases: [govcert ch, govcert-ch], note: "/blog/rss.xml serves the HTML site." }
71 + - { name: CERT.at, domain: cert.at, country: AT, language: de, importance: 2, aliases: [cert.at, cert-at, cert at, govcert austria], hints: { urls: [{ url: "https://www.cert.at/cert-at.de.warnings.rss_2.0.xml", kind: security }] } }
72 + - { name: CIRCL, domain: circl.lu, country: LU, importance: 2, aliases: [circl, computer incident response center luxembourg, vulnerability-lookup, cve-search], hints: { github_org: CIRCL, urls: [{ url: "https://www.circl.lu/rss.xml", kind: security }, { url: "https://cve.circl.lu/api/last/30", kind: data, name: cve-search last }] } }
73 + - { name: GovCERT.lu, domain: govcert.lu, country: LU, importance: 1, aliases: [govcert lu, govcert-lu] }
74 + - { name: National Cyber Security Center Hungary, domain: nki.gov.hu, country: HU, language: hu, importance: 2, aliases: [nki, ncsc-hu, nemzeti kibervedelmi intezet], note: "/rss and /feed/ serve the HTML site." }
75 + - { name: Romanian National Cyber Security Directorate, domain: dnsc.ro, country: RO, language: ro, importance: 2, aliases: [dnsc, cert-ro, directoratul national de securitate cibernetica], hints: { urls: [{ url: "https://dnsc.ro/feed", kind: security }] } }
76 + - { name: CERT.hr, domain: cert.hr, country: HR, language: hr, importance: 2, aliases: [cert.hr, cert-hr, carnet cert], hints: { urls: [{ url: "https://www.cert.hr/feed/", kind: security }] } }
77 + - { name: SI-CERT, domain: cert.si, country: SI, importance: 2, aliases: [si-cert, si cert, cert.si], hints: { urls: [{ url: "https://www.cert.si/en/feed/", kind: security }] } }
78 + - { name: National CERT of Serbia, domain: cert.rs, country: RS, language: sr, importance: 1, aliases: [cert.rs, cert-rs, ratel cert], note: "/feed returns 404." }
79 + - { name: National CSIRT Greece, domain: csirt.gr, country: GR, language: el, importance: 1, aliases: [csirt-gr, national csirt-gr] }
80 + - { name: National CSIRT Cyprus, domain: csirt.cy, country: CY, language: el, importance: 1, aliases: [csirt-cy, national csirt-cy, dsa cyprus] }
81 + - { name: CSIRTMalta, domain: mita.gov.mt, country: MT, importance: 1, aliases: [csirtmalta, csirt malta, mita] }
82 + - { name: CERT-IS, domain: cert.is, country: IS, language: is, importance: 1, aliases: [cert-is, cert is, netoryggissveit] }
83 + - { name: CERT-UA, domain: cert.gov.ua, country: UA, language: uk, importance: 3, aliases: [cert-ua, cert ua, sssci cert], hints: { urls: [{ url: "https://cert.gov.ua/api/articles/all?page=1", kind: security }] }, note: "The articles API returns JSON with an application/xhtml+xml content-type; /articles is a JS shell." }
84 + - { name: USOM, domain: usom.gov.tr, country: TR, language: tr, importance: 2, aliases: [usom, tr-cert, ulusal siber olaylara mudahale merkezi], note: "/rss/*.rss paths serve the HTML homepage (no XML) on 2026-09-13." }
85 + - { name: Israel National Cyber Directorate, domain: cyber.gov.il, country: IL, importance: 2, aliases: [incd, israel national cyber directorate, govcert israel, cert-il], note: "gov.il returns 403 to non-browser clients." }
86 + - { name: NKTsKI, domain: gov-cert.ru, country: RU, language: ru, importance: 1, aliases: [nktski, nkcki, national coordination center for computer incidents, gov-cert], note: "Reachability varies by vantage point." }
87 + - { name: Safe-Surf FSTEC, domain: safe-surf.ru, country: RU, language: ru, importance: 1, aliases: [safe-surf, fstec safe surf], hints: { urls: [{ url: "https://safe-surf.ru/rss/", kind: news }] } }
88 + # ── Asia-Pacific ──
89 + - { name: JPCERT Coordination Center, domain: jpcert.or.jp, country: JP, importance: 3, aliases: [jpcert, jpcert/cc, jpcert cc], hints: { github_org: JPCERTCC, urls: [{ url: "https://www.jpcert.or.jp/english/rss/jpcert-en.rdf", kind: security }] } }
90 + - { name: National center of Incident readiness and Strategy for Cybersecurity, domain: nisc.go.jp, country: JP, language: ja, importance: 2, aliases: [nisc, ncso japan, national cybersecurity office] }
91 + - { name: Information-technology Promotion Agency Japan, domain: ipa.go.jp, country: JP, language: ja, importance: 2, aliases: [ipa, ipa japan, ipa security center], hints: { urls: [{ url: "https://www.ipa.go.jp/security/rss/alert.rdf", kind: security }] } }
92 + - { name: KrCERT/CC, domain: boho.or.kr, country: KR, language: ko, importance: 2, aliases: [krcert, krcert/cc, kisa krcert, boho], hints: { urls: [{ url: "https://www.boho.or.kr/kr/rss.do?bbsId=B0000133", kind: security }] } }
93 + - { name: Korea Internet & Security Agency, domain: kisa.or.kr, country: KR, language: ko, importance: 2, aliases: [kisa, korea internet and security agency] }
94 + - { name: National Cyber Security Center Korea, domain: ncsc.go.kr, country: KR, language: ko, importance: 1, aliases: [ncsc korea, ncsc-kr, nis ncsc] }
95 + - { name: CNCERT/CC, domain: cert.org.cn, country: CN, language: zh, importance: 2, aliases: [cncert, cncert/cc, national computer network emergency response technical team] }
96 + - { name: TWCERT/CC, domain: twcert.org.tw, country: TW, language: zh, importance: 2, aliases: [twcert, twcert/cc, taiwan computer emergency response team], hints: { urls: [{ url: "https://www.twcert.org.tw/tw/rss-104-1.xml", kind: security }] } }
97 + - { name: National Institute of Cyber Security Taiwan, domain: nics.nat.gov.tw, country: TW, language: zh, importance: 1, aliases: [nics, twncert, taiwan national institute of cyber security] }
98 + - { name: HKCERT, domain: hkcert.org, country: HK, importance: 2, aliases: [hkcert, hong kong computer emergency response team], note: "Security bulletin list requires JavaScript; RSS endpoints return 404/500." }
99 + - { name: Cyber Security Agency of Singapore, domain: csa.gov.sg, country: SG, importance: 2, aliases: [csa, csa singapore, singcert], hints: { urls: [{ url: "https://www.csa.gov.sg/alerts-and-advisories/alerts", kind: security }] }, note: "No RSS (404); the alerts HTML list is server-rendered." }
100 + - { name: CERT-In, domain: cert-in.org.in, country: IN, importance: 2, aliases: [cert-in, cert in, indian computer emergency response team], note: "Site is a JS shell (447 bytes) for non-browser clients." }
101 + - { name: Australian Cyber Security Centre, domain: cyber.gov.au, country: AU, importance: 3, aliases: [acsc, asd acsc, cert australia, australian signals directorate acsc], note: "cyber.gov.au drops connections from non-Australian vantage points (geo-block) — no sensor possible from the cluster." }
102 + - { name: Australian Signals Directorate, domain: asd.gov.au, country: AU, importance: 1, aliases: [asd, australian signals directorate] }
103 + - { name: National Cyber Security Centre New Zealand, domain: ncsc.govt.nz, country: NZ, importance: 2, aliases: [ncsc nz, ncsc-nz, cert nz, cert.govt.nz], note: "CERT NZ merged into the NCSC; RSS endpoints return 404." }
104 + - { name: National Cyber Security Agency Malaysia, domain: nacsa.gov.my, country: MY, importance: 1, aliases: [nacsa, nacsa malaysia] }
105 + - { name: MyCERT, domain: mycert.org.my, country: MY, importance: 2, aliases: [mycert, cybersecurity malaysia mycert], note: "Advisory pages return 403 (Cloudflare)." }
106 + - { name: ThaiCERT, domain: thaicert.or.th, country: TH, language: th, importance: 2, aliases: [thaicert, thai cert, etda thaicert], hints: { urls: [{ url: "https://www.thaicert.or.th/feed/", kind: security }] } }
107 + - { name: National Cyber Security Agency Thailand, domain: ncsa.or.th, country: TH, language: th, importance: 1, aliases: [ncsa thailand, ncsa-th] }
108 + - { name: Badan Siber dan Sandi Negara, domain: bssn.go.id, country: ID, language: id, importance: 2, aliases: [bssn, id-sirtii, national cyber and crypto agency indonesia], note: "/feed/ returns 403." }
109 + - { name: ID-SIRTII/CC, domain: idsirtii.or.id, country: ID, language: id, importance: 1, aliases: [id-sirtii, idsirtii] }
110 + - { name: Department of Information and Communications Technology Philippines, domain: dict.gov.ph, country: PH, importance: 1, aliases: [dict, dict philippines, cicc], note: "/feed/ returns 403 (Cloudflare)." }
111 + - { name: National Computer Emergency Response Team Philippines, domain: ncert.gov.ph, country: PH, importance: 1, aliases: [ncert, ncert philippines], note: "/feed/ returns 403 (Cloudflare)." }
112 + - { name: National Cyber Security Center Vietnam, domain: ncsc.gov.vn, country: VN, language: vi, importance: 1, aliases: [ncsc vietnam, ncsc-vn, ais vietnam] }
113 + - { name: VNCERT/CC, domain: vncert.gov.vn, country: VN, language: vi, importance: 1, aliases: [vncert, vncert/cc] }
114 + - { name: BGD e-GOV CIRT, domain: cirt.gov.bd, country: BD, importance: 1, aliases: [bgd e-gov cirt, cirt bangladesh, bd cirt] }
115 + - { name: Sri Lanka CERT, domain: cert.gov.lk, country: LK, importance: 1, aliases: [sri lanka cert, slcert, cert|cc sri lanka] }
116 + - { name: NPCERT, domain: npcert.gov.np, country: NP, importance: 1, aliases: [npcert, nepal cert] }
117 + - { name: Mongolia CERT, domain: cert.gov.mn, country: MN, language: mn, importance: 1, aliases: [mncert, mongolia cert] }
118 + - { name: mmCERT, domain: mmcert.org.mm, country: MM, importance: 1, aliases: [mmcert, myanmar cert] }
119 + - { name: BruCERT, domain: brucert.org.bn, country: BN, importance: 1, aliases: [brucert, brunei cert] }
120 + - { name: BtCIRT, domain: btcirt.bt, country: BT, importance: 1, aliases: [btcirt, bhutan cirt] }
121 + - { name: LaoCERT, domain: laocert.gov.la, country: LA, importance: 1, aliases: [laocert, lao cert] }
122 + - { name: KZ-CERT, domain: kz-cert.kz, country: KZ, language: ru, importance: 1, aliases: [kz-cert, kz cert, kazakhstan cert], note: "Site is a JS shell (1.4 kB) for non-browser clients." }
123 + - { name: UZCERT, domain: uzcert.uz, country: UZ, language: ru, importance: 1, aliases: [uzcert, uzbekistan cert] }
124 + - { name: CERT.GOV.GE, domain: cert.gov.ge, country: GE, importance: 1, aliases: [cert-ge, cert georgia, dea cert] }
125 + - { name: CERT.GOV.AZ, domain: cert.gov.az, country: AZ, importance: 1, aliases: [cert-az, cert azerbaijan] }
126 + - { name: CERT-GOV-MD, domain: cert.gov.md, country: MD, language: ro, importance: 1, aliases: [cert-gov-md, cert moldova, stisc] }
127 + - { name: CERT.BY, domain: cert.by, country: BY, language: ru, importance: 1, aliases: [cert.by, cert-by, cert belarus] }
128 + # ── Middle East & Africa ──
129 + - { name: National Cybersecurity Authority Saudi Arabia, domain: nca.gov.sa, country: SA, importance: 2, aliases: [nca, nca saudi, saudi national cybersecurity authority], note: "/en/rss serves the HTML site." }
130 + - { name: Saudi CERT, domain: cert.gov.sa, country: SA, importance: 2, aliases: [saudi cert, cert-sa, nca cert], note: "Security warnings list is a Blazor/JS app; /en/rss.xml serves HTML." }
131 + - { name: UAE Cybersecurity Council, domain: csc.gov.ae, country: AE, importance: 2, aliases: [csc, uae cyber security council, cybersecurity council uae], note: "csc.gov.ae did not answer HTTPS from the cluster on 2026-09-13 (DNS resolves)." }
132 + - { name: aeCERT, domain: cert.ae, country: AE, importance: 2, aliases: [aecert, uae cert, tdra cert] }
133 + - { name: National Cyber Security Agency Qatar, domain: ncsa.gov.qa, country: QA, importance: 2, aliases: [ncsa qatar, ncsa-qa, q-cert, qcert], note: "Alerts pages are a JS shell (5 kB) for non-browser clients." }
134 + - { name: Oman National CERT, domain: cert.gov.om, country: OM, importance: 1, aliases: [ocert, oman cert] }
135 + - { name: National Cyber Security Center Bahrain, domain: ncsc.gov.bh, country: BH, importance: 1, aliases: [ncsc bahrain, ncsc-bh] }
136 + - { name: National Cyber Security Centre Jordan, domain: ncsc.jo, country: JO, importance: 1, aliases: [ncsc jordan, ncsc-jo, jo-cert] }
137 + - { name: CITRA Kuwait, domain: citra.gov.kw, country: KW, importance: 1, aliases: [citra, kuwait citra, cert-kw] }
138 + - { name: EG-CERT, domain: egcert.eg, country: EG, importance: 1, aliases: [eg-cert, egcert, egyptian computer emergency readiness team] }
139 + - { name: Tunisian CERT, domain: cert.tn, country: TN, language: fr, importance: 1, aliases: [tuncert, cert-tcc, ansi tunisia] }
140 + - { name: DGSSI Morocco, domain: dgssi.gov.ma, country: MA, language: fr, importance: 1, aliases: [dgssi, macert, ma-cert, direction generale de la securite des systemes d'information], note: "/fr/rss.xml serves the HTML homepage (bulletin list embedded), no XML." }
141 + - { name: ngCERT, domain: cert.gov.ng, country: NG, importance: 1, aliases: [ngcert, nigeria cert], note: "403 (Cloudflare) to non-browser clients." }
142 + - { name: NITDA, domain: nitda.gov.ng, country: NG, importance: 1, aliases: [nitda, national information technology development agency] }
143 + - { name: National KE-CIRT/CC, domain: ke-cirt.go.ke, country: KE, importance: 1, aliases: [ke-cirt, ke-cirt/cc, kenya cirt], hints: { urls: [{ url: "https://www.ke-cirt.go.ke/feed/", kind: security }] } }
144 + - { name: Cybersecurity Hub South Africa, domain: cybersecurityhub.gov.za, country: ZA, importance: 1, aliases: [cybersecurity hub, csirt south africa, cert-za], note: "Returned 503 on 2026-09-13." }
145 + - { name: Cyber Security Authority Ghana, domain: csa.gov.gh, country: GH, importance: 1, aliases: [csa ghana, cert-gh] }
146 + - { name: National Cyber Security Authority Rwanda, domain: cyber.gov.rw, country: RW, importance: 1, aliases: [ncsa rwanda, rw-csirt] }
147 + - { name: TZ-CERT, domain: tzcert.go.tz, country: TZ, importance: 1, aliases: [tz-cert, tanzania cert] }
148 + - { name: Uganda National CERT, domain: cert.ug, country: UG, importance: 1, aliases: [cert.ug, cert-ug, uganda cert] }
149 + - { name: CERT-MU, domain: cert-mu.govmu.org, country: MU, importance: 1, aliases: [cert-mu, mauritius cert] }
150 + # ── Latin America ──
151 + - { name: CERT.br, domain: cert.br, country: BR, language: pt, importance: 2, aliases: [cert.br, cert-br, cert br, nic.br cert], hints: { urls: [{ url: "https://cert.br/rss/certbr-rss.xml", kind: news }] } }
152 + - { name: CTIR Gov, domain: ctir.gov.br, country: BR, language: pt, importance: 1, aliases: [ctir gov, ctir.gov.br, gsi ctir] }
153 + - { name: CSIRT Gobierno de Chile, domain: csirt.gob.cl, country: CL, language: es, importance: 2, aliases: [csirt chile, csirt gob cl, csirt de gobierno], note: "Feeds and alert pages return 403 (Cloudflare)." }
154 + - { name: ColCERT, domain: colcert.gov.co, country: CO, language: es, importance: 1, aliases: [colcert, grupo de respuesta a emergencias ciberneticas de colombia], note: "Site is a JS shell (402 bytes) for non-browser clients." }
155 + - { name: CERT.ar, domain: cert.ar, country: AR, language: es, importance: 1, aliases: [cert.ar, cert-ar, arcert] }
156 + - { name: PeCERT, domain: pecert.gob.pe, country: PE, language: es, importance: 1, aliases: [pecert, pe-cert, peru cert] }
157 + - { name: EcuCERT, domain: ecucert.gob.ec, country: EC, language: es, importance: 1, aliases: [ecucert, ecuador cert] }
158 + - { name: CERTuy, domain: cert.uy, country: UY, language: es, importance: 1, aliases: [certuy, cert-uy, agesic certuy] }
159 + - { name: CERT-PY, domain: cert.gov.py, country: PY, language: es, importance: 1, aliases: [cert-py, cert paraguay, mitic cert] }
160 + - { name: VenCERT, domain: vencert.gob.ve, country: VE, language: es, importance: 1, aliases: [vencert, venezuela cert] }
161 + - { name: CSIRT-RD, domain: csirt.gob.do, country: DO, language: es, importance: 1, aliases: [csirt-rd, csirt dominican republic] }
162 + - { name: CSIRT-CR, domain: micitt.go.cr, country: CR, language: es, importance: 1, aliases: [csirt-cr, micitt, costa rica csirt] }
163 + - { name: TT-CSIRT, domain: ttcsirt.gov.tt, country: TT, importance: 1, aliases: [tt-csirt, trinidad and tobago csirt] }
164 + - { name: CIRT.GY, domain: cirt.gy, country: GY, importance: 1, aliases: [cirt.gy, guyana cirt] }
165 + # ── International bodies & ISACs ──
166 + - { name: International Telecommunication Union, domain: itu.int, country: INT, importance: 2, aliases: [itu, itu-d cybersecurity, global cybersecurity index] }
167 + - { name: INTERPOL, domain: interpol.int, country: INT, importance: 2, aliases: [interpol, interpol cybercrime directorate, interpol global complex for innovation] }
168 + - { name: NATO Cooperative Cyber Defence Centre of Excellence, domain: ccdcoe.org, country: INT, importance: 2, aliases: [ccdcoe, nato ccdcoe, locked shields, cycon], note: "/feed/ returns 404." }
169 + - { name: Global Forum on Cyber Expertise, domain: thegfce.org, country: INT, importance: 1, aliases: [gfce, global forum on cyber expertise] }
170 + - { name: CyberPeace Institute, domain: cyberpeaceinstitute.org, country: INT, importance: 1, aliases: [cyberpeace institute] }
171 + - { name: FS-ISAC, domain: fsisac.com, country: US, importance: 2, aliases: [fs-isac, financial services information sharing and analysis center] }
172 + - { name: Health-ISAC, domain: h-isac.org, country: US, importance: 1, aliases: [h-isac, health-isac, health isac], hints: { urls: [{ url: "https://h-isac.org/feed/", kind: news }] } }
173 + - { name: Auto-ISAC, domain: automotiveisac.com, country: US, importance: 1, aliases: [auto-isac, automotive isac] }
174 + - { name: NERC E-ISAC, domain: nerc.com, country: US, importance: 1, aliases: [nerc, e-isac, electricity information sharing and analysis center, nerc cip] }
175 + - key: vulnerability-databases-and-standards
176 + label: Vulnerability databases, scoring systems & security standards bodies
177 + description: CVE ecosystem, exploit and advisory databases, scoring systems, supply-chain security frameworks and standards organizations.
178 + provenance: "CVE Program partners https://www.cve.org/PartnerInformation/ListofPartners + OpenSSF / OWASP / CIS / FIRST official sites + Wikipedia 'Vulnerability database' (retrieved 2026-09-13); feeds verified with curl 2026-09-13"
179 + members:
180 + - { name: National Institute of Standards and Technology, domain: nist.gov, country: US, importance: 3, aliases: [nist, nvd, national vulnerability database, nccoe, cybersecurity framework, csf, sp 800-53, fips], hints: { github_org: usnistgov, urls: [{ url: "https://services.nvd.nist.gov/rest/json/cves/2.0?resultsPerPage=200", kind: security, name: nvd cve api }, { url: "https://www.nist.gov/blogs/cybersecurity-insights/rss.xml", kind: blog }] }, note: "NVD RSS feeds were retired (404); the REST API 2.0 is the source. nccoe.nist.gov returns 403 to non-browser clients." }
181 + - { name: MITRE, domain: mitre.org, country: US, importance: 3, aliases: [mitre, mitre att&ck, attack, cwe, common weakness enumeration, capec, d3fend, caldera, engenuity], hints: { github_org: mitre, github_repos: [mitre/cti, mitre-attack/attack-stix-data] }, note: "mitre.org RSS returns 403 (Akamai); attack.mitre.org and cwe.mitre.org are static HTML." }
182 + - { name: CVE Program, domain: cve.org, country: US, importance: 3, aliases: [cve, cve.org, cve program, cve list, cna, cve numbering authority, cve records], hints: { github_org: CVEProject, github_repos: [CVEProject/cvelistV5, CVEProject/cve-schema] }, note: "www.cve.org is an Angular shell (880 bytes); the Services API (cveawg.mitre.org) requires CNA credentials for listing; the cvelistV5 GitHub mirror is the public feed." }
183 + - { name: FIRST, domain: first.org, country: INT, importance: 3, aliases: [first, forum of incident response and security teams, epss, exploit prediction scoring system, cvss, tlp, traffic light protocol], hints: { github_org: FIRSTdotorg, urls: [{ url: "https://api.first.org/data/v1/epss?days=1&limit=100", kind: security, name: epss daily }, { url: "https://www.first.org/newsroom/releases/rss.xml", kind: press }] } }
184 + - { name: OSV, domain: osv.dev, country: US, importance: 3, aliases: [osv, open source vulnerabilities, osv.dev, osv-scanner, osv schema], hints: { github_repos: [google/osv.dev, google/osv-scanner, ossf/osv-schema] }, note: "Query API is POST-only; the web front end is server-rendered HTML." }
185 + - { name: GitHub, domain: github.com, country: US, importance: 3, aliases: [github, github advisory database, ghsa, github security lab, dependabot, codeql, npm advisories], hints: { github_org: github, github_repos: [github/advisory-database], status_url: "https://www.githubstatus.com", urls: [{ url: "https://github.com/advisories", kind: security }, { url: "https://github.com/github/advisory-database/commits/main.atom", kind: security, name: advisory database commits }] } }
186 + - { name: Snyk, domain: snyk.io, country: US, importance: 2, aliases: [snyk, snyk vulnerability database, snyk labs, snyk security], hints: { github_org: snyk, status_url: "https://status.snyk.io", urls: [{ url: "https://security.snyk.io/vuln", kind: security }, { url: "https://snyk.io/blog/feed/", kind: blog }] } }
187 + - { name: VulnCheck, domain: vulncheck.com, country: US, importance: 2, aliases: [vulncheck, vulncheck kev, nvd++, vulncheck xdb], hints: { github_org: vulncheck-oss, status_url: "https://status.vulncheck.com" }, note: "Data APIs require an API key; the KEV/XDB indexes are gated." }
188 + - { name: Vulners, domain: vulners.com, country: US, importance: 2, aliases: [vulners, vulners database], hints: { urls: [{ url: "https://vulners.com/rss.xml", kind: security }] } }
189 + - { name: Exploit Database, domain: exploit-db.com, country: US, importance: 2, aliases: [exploit-db, exploitdb, edb, google hacking database, ghdb, searchsploit], hints: { github_repos: [offensive-security/exploitdb], urls: [{ url: "https://www.exploit-db.com/rss.xml", kind: security }] } }
190 + - { name: OffSec, domain: offsec.com, country: US, importance: 1, aliases: [offsec, offensive security, kali linux, oscp] }
191 + - { name: Zero Day Initiative, domain: zerodayinitiative.com, country: US, importance: 3, aliases: [zdi, zero day initiative, trend micro zdi], hints: { urls: [{ url: "https://www.zerodayinitiative.com/rss/published/", kind: security }, { url: "https://www.zerodayinitiative.com/rss/upcoming/", kind: security, name: upcoming advisories }] } }
192 + - { name: Packet Storm Security, domain: packetstormsecurity.com, country: US, importance: 2, aliases: [packet storm, packetstorm, packet storm security], note: "Homepage renders (file list) but the RSS host rss.packetstormsecurity.com does not resolve and deep pages sit behind a TOS wall (2026-09-11)." }
193 + - { name: Openwall, domain: openwall.com, country: US, importance: 2, aliases: [openwall, oss-security, oss-sec, john the ripper, linux-distros list], hints: { urls: [{ url: "https://www.openwall.com/lists/oss-security/", kind: security, name: oss-security archive }] } }
194 + - { name: OWASP Foundation, domain: owasp.org, country: US, importance: 2, aliases: [owasp, owasp top 10, owasp zap, zaproxy, asvs, dependency-check, cheat sheet series], hints: { github_org: OWASP }, note: "owasp.org/feed.xml returns 404; the site is generated from GitHub." }
195 + - { name: Center for Internet Security, domain: cisecurity.org, country: US, importance: 2, aliases: [cis, center for internet security, cis benchmarks, cis controls, ms-isac, multi-state isac, ei-isac], hints: { urls: [{ url: "https://www.cisecurity.org/feed/advisories", kind: security }] } }
196 + - { name: SANS Internet Storm Center, domain: sans.edu, country: US, importance: 2, aliases: [sans isc, internet storm center, isc diary, dshield, isc stormcast], hints: { urls: [{ url: "https://isc.sans.edu/rssfeed_full.xml", kind: security }] } }
197 + - { name: SANS Institute, domain: sans.org, country: US, importance: 1, aliases: [sans, sans institute, giac, sans newsbites], note: "/blog/feed/ returns 404." }
198 + - { name: OpenSSF, domain: openssf.org, country: INT, importance: 2, aliases: [openssf, open source security foundation, scorecard, sigstore, slsa, osv schema, alpha-omega], hints: { github_org: ossf, urls: [{ url: "https://openssf.org/feed/", kind: blog }] } }
199 + - { name: Sigstore, domain: sigstore.dev, country: INT, importance: 2, aliases: [sigstore, cosign, fulcio, rekor, gitsign], hints: { github_org: sigstore }, note: "blog.sigstore.dev/rss/ returns 404." }
200 + - { name: SLSA, domain: slsa.dev, country: INT, importance: 1, aliases: [slsa, supply-chain levels for software artifacts], hints: { github_repos: [slsa-framework/slsa] } }
201 + - { name: CycloneDX, domain: cyclonedx.org, country: INT, importance: 2, aliases: [cyclonedx, owasp cyclonedx, sbom, vex, bom], hints: { github_org: CycloneDX } }
202 + - { name: SPDX, domain: spdx.dev, country: INT, importance: 2, aliases: [spdx, software package data exchange, spdx license list], hints: { github_org: spdx, urls: [{ url: "https://spdx.dev/feed/", kind: news }] } }
203 + - { name: OASIS Open, domain: oasis-open.org, country: US, importance: 2, aliases: [oasis, oasis open, csaf, common security advisory framework, stix, taxii, openc2, sarif], hints: { github_org: oasis-tcs } }
204 + - { name: PCI Security Standards Council, domain: pcisecuritystandards.org, country: US, importance: 2, aliases: [pci ssc, pci dss, pci security standards council, pci], hints: { urls: [{ url: "https://blog.pcisecuritystandards.org/rss.xml", kind: blog }] } }
205 + - { name: International Organization for Standardization, domain: iso.org, country: INT, importance: 2, aliases: [iso, iso/iec jtc 1/sc 27, iso 27001, iso/iec 27001, iec], note: "iso.org returns 403 (Cloudflare) to non-browser clients." }
206 + - { name: Cloud Security Alliance, domain: cloudsecurityalliance.org, country: US, importance: 1, aliases: [csa, cloud security alliance, ccm, cloud controls matrix, star registry], hints: { urls: [{ url: "https://cloudsecurityalliance.org/blog/feed", kind: blog }] } }
207 + - { name: Internet Engineering Task Force, domain: ietf.org, country: INT, importance: 2, aliases: [ietf, rfc, rfc editor, tls working group, security area directorate] }
208 + - { name: CA/Browser Forum, domain: cabforum.org, country: INT, importance: 1, aliases: [ca/browser forum, cabforum, cab forum, baseline requirements], note: "/feed/ returns 404." }
209 + - { name: FIDO Alliance, domain: fidoalliance.org, country: US, importance: 1, aliases: [fido alliance, fido2, webauthn, passkeys], hints: { urls: [{ url: "https://fidoalliance.org/feed/", kind: news }] } }
210 + - { name: Common Criteria Portal, domain: commoncriteriaportal.org, country: INT, importance: 1, aliases: [common criteria, ccra, cc portal, eal], note: "Homepage is a 154-byte JS shell for non-browser clients." }
211 + - { name: JVN, domain: jvn.jp, country: JP, language: ja, importance: 2, aliases: [jvn, japan vulnerability notes, jvn ipedia, jvndb], hints: { urls: [{ url: "https://jvn.jp/rss/jvn.rdf", kind: security }] } }
212 + - { name: CNNVD, domain: cnnvd.org.cn, country: CN, language: zh, importance: 1, aliases: [cnnvd, china national vulnerability database of information security], note: "Not fetched from the cluster; JS-heavy portal." }
213 + - { name: CNVD, domain: cnvd.org.cn, country: CN, language: zh, importance: 1, aliases: [cnvd, china national vulnerability database], note: "Not fetched from the cluster; JS-heavy portal." }
214 + - { name: FSTEC BDU, domain: fstec.ru, country: RU, language: ru, importance: 1, aliases: [fstec, bdu, bdu fstec, data security threats database], note: "Not fetched from the cluster." }
215 + - { name: VulDB, domain: vuldb.com, country: CH, importance: 2, aliases: [vuldb, vulnerability database vuldb, scip vuldb], hints: { urls: [{ url: "https://vuldb.com/?rss.recent", kind: security }] }, note: "HTML pages return 403 to non-browser clients; the RSS endpoint works." }
216 + - { name: CVE Details, domain: cvedetails.com, country: US, first_party: false, importance: 1, aliases: [cvedetails, cve details, securityscorecard cvedetails], note: "403 (Cloudflare) to non-browser clients." }
217 + - { name: AttackerKB, domain: attackerkb.com, country: US, importance: 1, aliases: [attackerkb, rapid7 attackerkb], hints: { urls: [{ url: "https://attackerkb.com/", kind: security }] } }
218 + - { name: Metasploit, domain: metasploit.com, country: US, importance: 2, aliases: [metasploit, metasploit framework, msf], hints: { github_repos: [rapid7/metasploit-framework] } }
219 + - { name: Wordfence, domain: wordfence.com, country: US, importance: 2, aliases: [wordfence, wordfence intelligence, defiant], hints: { urls: [{ url: "https://www.wordfence.com/feed/", kind: security }] } }
220 + - { name: Patchstack, domain: patchstack.com, country: EE, importance: 2, aliases: [patchstack, patchstack vulnerability database], hints: { urls: [{ url: "https://patchstack.com/feed/", kind: security }] } }
221 + - { name: WPScan, domain: wpscan.com, country: GB, importance: 1, aliases: [wpscan, wpvulndb, wordpress vulnerability database], hints: { github_org: wpscanteam, urls: [{ url: "https://wpscan.com/feed/", kind: security }] } }
222 + - { name: Sonatype, domain: sonatype.com, country: US, importance: 2, aliases: [sonatype, oss index, nexus repository, maven central, nexus lifecycle], hints: { github_org: sonatype, urls: [{ url: "https://www.sonatype.com/blog/rss.xml", kind: blog }] } }
223 + - { name: RustSec, domain: rustsec.org, country: INT, importance: 1, aliases: [rustsec, rustsec advisory database, cargo-audit], hints: { github_repos: [rustsec/advisory-db], urls: [{ url: "https://rustsec.org/feed.xml", kind: security }] } }
224 + - { name: OpenCVE, domain: opencve.io, country: FR, importance: 1, aliases: [opencve], hints: { github_repos: [opencve/opencve] } }
225 + - key: vendor-psirts
226 + label: Vendor product-security teams (PSIRT) & advisory feeds
227 + description: Software, hardware, network, industrial, IoT, automotive and medical-device vendors that publish security advisories.
228 + provenance: "CISA KEV vendor column https://www.cisa.gov/known-exploited-vulnerabilities-catalog + CVE Program CNA list https://www.cve.org/PartnerInformation/ListofPartners + FIRST PSIRT members (retrieved 2026-09-13); advisory URLs verified with curl 2026-09-13"
229 + members:
230 + # ── Platform & software majors ──
231 + - { name: Microsoft, domain: microsoft.com, country: US, importance: 3, aliases: [microsoft, msrc, microsoft security response center, patch tuesday, windows, azure, office, exchange, .net, dotnet, microsoft threat intelligence, mstic, defender], hints: { github_org: microsoft, cik: "789019", ticker: MSFT, urls: [{ url: "https://api.msrc.microsoft.com/update-guide/rss", kind: security }, { url: "https://www.microsoft.com/en-us/security/blog/feed/", kind: blog }] } }
232 + - { name: Apple, domain: apple.com, country: US, importance: 3, aliases: [apple, apple security releases, ios, macos, safari, webkit, apple product security, apple security engineering], hints: { github_org: apple, cik: "320193", ticker: AAPL, urls: [{ url: "https://support.apple.com/en-us/100100", kind: security }] } }
233 + - { name: Google, domain: google.com, country: US, importance: 3, aliases: [google, alphabet, chrome, chrome releases, google cloud, gcp, gke, google security blog, fitbit, nest, google play protect, project zero], hints: { github_org: google, cik: "1652044", ticker: GOOGL, urls: [{ url: "https://cloud.google.com/feeds/google-cloud-security-bulletins.xml", kind: security, name: google cloud security bulletins }, { url: "https://chromereleases.googleblog.com/feeds/posts/default", kind: releases, name: chrome releases }, { url: "https://security.googleblog.com/feeds/posts/default", kind: blog }] } }
234 + - { name: Android Open Source Project, domain: android.com, country: US, importance: 3, aliases: [android, aosp, android security bulletin, pixel update bulletin], hints: { urls: [{ url: "https://source.android.com/docs/security/bulletin", kind: security }] } }
235 + - { name: Chromium Projects, domain: chromium.org, country: US, importance: 2, aliases: [chromium, chromium security, chromeos, v8], hints: { github_org: chromium } }
236 + - { name: Mozilla, domain: mozilla.org, country: US, importance: 3, aliases: [mozilla, firefox, thunderbird, mfsa, mozilla foundation security advisories, nss], hints: { github_org: mozilla, urls: [{ url: "https://www.mozilla.org/en-US/security/advisories/", kind: security }, { url: "https://blog.mozilla.org/security/feed/", kind: blog }] } }
237 + - { name: Adobe, domain: adobe.com, country: US, importance: 3, aliases: [adobe, adobe psirt, acrobat, reader, coldfusion, adobe commerce, magento, adobe experience manager, aem], hints: { cik: "796343", ticker: ADBE }, note: "helpx.adobe.com/security returns 403 (Akamai) to non-browser clients (also on 2026-09-11)." }
238 + - { name: Oracle, domain: oracle.com, country: US, importance: 3, aliases: [oracle, critical patch update, cpu, oracle security alert, java, mysql, weblogic, oracle linux, virtualbox, oracle health, cerner], hints: { cik: "1341439", ticker: ORCL, urls: [{ url: "https://www.oracle.com/ocom/groups/public/@otn/documents/webcontent/rss-otn-sec.xml", kind: security }, { url: "https://www.oracle.com/security-alerts/", kind: security }] } }
239 + - { name: SAP, domain: sap.com, country: DE, importance: 3, aliases: [sap, sap security notes, sap patch day, sap netweaver, s/4hana, hana], hints: { ticker: SAP }, note: "Security Notes news page is JS-rendered (support.sap.com); the Security Notes API requires an S-user." }
240 + - { name: IBM, domain: ibm.com, country: US, importance: 3, aliases: [ibm, ibm psirt, ibm security bulletins, ibm x-force, websphere, db2, aix, qradar, hcl], hints: { github_org: IBM, cik: "51143", ticker: IBM }, note: "IBM Product Security Central (/support/pages/bulletin/) is an Angular shell; the old PSIRT blog feed redirects to it." }
241 + - { name: Cisco, domain: cisco.com, country: US, importance: 3, aliases: [cisco, cisco psirt, cisco security advisories, ios xe, asa, ftd, webex, meraki, appdynamics, snort], hints: { github_org: cisco, cik: "858877", ticker: CSCO, urls: [{ url: "https://sec.cloudapps.cisco.com/security/center/psirtrss20/CiscoSecurityAdvisory.xml", kind: security }] } }
242 + - { name: Juniper Networks, domain: juniper.net, country: US, importance: 3, aliases: [juniper, juniper sirt, junos, jsa, juniper security advisories, mist], hints: { cik: "1043604", ticker: JNPR }, note: "Security advisories live in a Salesforce Knowledge portal (supportportal.juniper.net, JS shell); advisory.juniper.net is a redirect stub." }
243 + - { name: Arista Networks, domain: arista.com, country: US, importance: 2, aliases: [arista, arista eos, arista security advisories, untangle], hints: { cik: "1596532", ticker: ANET }, note: "arista.com returns 406 to non-browser clients." }
244 + - { name: Palo Alto Networks, domain: paloaltonetworks.com, country: US, importance: 3, aliases: [palo alto networks, pan-os, panos, globalprotect, prisma, cortex, unit 42, unit42], hints: { cik: "1327567", ticker: PANW, status_url: "https://status.paloaltonetworks.com", urls: [{ url: "https://security.paloaltonetworks.com/rss.xml", kind: security }, { url: "https://unit42.paloaltonetworks.com/feed/", kind: blog, name: unit 42 }] } }
245 + - { name: Fortinet, domain: fortinet.com, country: US, importance: 3, aliases: [fortinet, fortiguard psirt, fortios, fortigate, fortimanager, forticlient, fortiweb], hints: { cik: "1262039", ticker: FTNT, urls: [{ url: "https://filestore.fortinet.com/fortiguard/rss/ir.xml", kind: security, name: psirt advisories }] } }
246 + - { name: Check Point Software, domain: checkpoint.com, country: IL, importance: 3, aliases: [check point, checkpoint, check point research, cpr, quantum gateway, harmony, infinity], hints: { ticker: CHKP, urls: [{ url: "https://advisories.checkpoint.com/", kind: security }, { url: "https://research.checkpoint.com/feed/", kind: blog, name: check point research }] } }
247 + - { name: SonicWall, domain: sonicwall.com, country: US, importance: 3, aliases: [sonicwall, sonicwall psirt, sonicos, sma, global management system], note: "psirt.global.sonicwall.com is a JS shell (729 bytes) — no static advisory list." }
248 + - { name: WatchGuard, domain: watchguard.com, country: US, importance: 2, aliases: [watchguard, watchguard psirt, fireware, firebox], hints: { urls: [{ url: "https://www.watchguard.com/wgrd-psirt/advisories", kind: security }] } }
249 + - { name: Sophos, domain: sophos.com, country: GB, importance: 3, aliases: [sophos, sophos firewall, xg firewall, intercept x, sophos x-ops, sophos ctu, secureworks], note: "sophos.com timed out (TLS handshake) from the cluster on 2026-09-13; advisories at /en-us/security-advisories were verified on 2026-09-11 in the registry." }
250 + - { name: Barracuda Networks, domain: barracuda.com, country: US, importance: 2, aliases: [barracuda, barracuda esg, email security gateway, barracuda waf], note: "Trust-center security advisories page is a JS shell." }
251 + - { name: Zyxel, domain: zyxel.com, country: TW, importance: 2, aliases: [zyxel, zyxel security advisories, zyxel networks, nebula], hints: { urls: [{ url: "https://www.zyxel.com/global/en/support/security-advisories", kind: security }] } }
252 + - { name: Netgear, domain: netgear.com, country: US, importance: 2, aliases: [netgear, netgear security advisories, orbi, nighthawk], hints: { ticker: NTGR, urls: [{ url: "https://www.netgear.com/about/security/", kind: security }] } }
253 + - { name: TP-Link, domain: tp-link.com, country: CN, importance: 2, aliases: [tp-link, tplink, omada, archer, tapo, kasa], hints: { urls: [{ url: "https://www.tp-link.com/us/press/security-advisory/", kind: security }] } }
254 + - { name: D-Link, domain: dlink.com, country: TW, importance: 2, aliases: [d-link, dlink, d-link security announcements], hints: { urls: [{ url: "https://supportannouncement.us.dlink.com/security/", kind: security }] } }
255 + - { name: Ubiquiti, domain: ui.com, country: US, importance: 2, aliases: [ubiquiti, ubnt, unifi, edgerouter, airmax, ubiquiti security advisory bulletins], hints: { ticker: UI }, note: "community.ui.com/releases is a JS shell; security bulletins are Zendesk help-center articles." }
256 + - { name: MikroTik, domain: mikrotik.com, country: LV, importance: 2, aliases: [mikrotik, routeros, routerboard, winbox], hints: { urls: [{ url: "https://mikrotik.com/download/changelogs", kind: changelog }] } }
257 + - { name: Huawei, domain: huawei.com, country: CN, importance: 2, aliases: [huawei, huawei psirt, harmonyos, huawei cloud, emui], hints: { urls: [{ url: "https://www.huawei.com/en/rss-feeds/psirt/rss", kind: security }] } }
258 + - { name: ZTE, domain: zte.com.cn, country: CN, importance: 1, aliases: [zte, zte psirt, zte security bulletins], note: "Security bulletin pages return a browser-version wall / 404 to non-browser clients." }
259 + - { name: Nokia, domain: nokia.com, country: FI, importance: 2, aliases: [nokia, nokia psirt, nokia deepfield, alcatel-lucent enterprise, nokia product security advisory], hints: { ticker: NOK, urls: [{ url: "https://www.nokia.com/about-us/security-and-privacy/product-security-advisory/", kind: security }] } }
260 + - { name: Ericsson, domain: ericsson.com, country: SE, importance: 2, aliases: [ericsson, ericsson psirt, cradlepoint], hints: { ticker: ERIC }, note: "PSIRT bulletins return 403 (Cloudflare) to non-browser clients." }
261 + - { name: F5, domain: f5.com, country: US, importance: 3, aliases: [f5, f5 networks, big-ip, bigip, nginx plus, myf5, f5 labs, k000], hints: { cik: "1048695", ticker: FFIV, urls: [{ url: "https://www.f5.com/labs/rss-feeds/all.xml", kind: blog, name: f5 labs }] }, note: "MyF5 security advisories (my.f5.com) are a Salesforce shell (404 to non-browser clients)." }
262 + - { name: Citrix, domain: citrix.com, country: US, importance: 3, aliases: [citrix, cloud software group, netscaler, netscaler adc, citrix gateway, xenapp, citrix bleed, ctx], note: "support.citrix.com security bulletins (incl. the RSS path) are a JS shell (8 kB)." }
263 + - { name: VMware, domain: vmware.com, country: US, importance: 3, aliases: [vmware, vmsa, vmware security advisories, vcenter, esxi, vsphere, workspace one, horizon, tanzu, spring by vmware], note: "vmware.com/security/advisories is a title-only JS shell; advisories moved to support.broadcom.com (JS-rendered)." }
264 + - { name: Broadcom, domain: broadcom.com, country: US, importance: 3, aliases: [broadcom, broadcom support portal, symantec, carbon black, ca technologies, brocade, vmware by broadcom, velocloud], hints: { cik: "1730168", ticker: AVGO }, note: "support.broadcom.com/web/ecx/security-advisory is JS-rendered (bot challenge markers)." }
265 + - { name: Ivanti, domain: ivanti.com, country: US, importance: 3, aliases: [ivanti, ivanti connect secure, pulse secure, ivanti epmm, mobileiron, ivanti endpoint manager, avalanche, ivanti security advisory], note: "Security advisory list (forums.ivanti.com Salesforce, ivanti.com/blog/topics/security-advisory) is JS-rendered — 'No results found' without JavaScript." }
266 + - { name: Progress Software, domain: progress.com, country: US, importance: 3, aliases: [progress, progress software, moveit, moveit transfer, whatsup gold, telerik, kemp loadmaster, sitefinity, chef], hints: { cik: "876167", ticker: PRGS }, note: "progress.com/security is a general Trust Center page; product advisories are Community (Salesforce) articles." }
267 + - { name: Veeam, domain: veeam.com, country: US, importance: 3, aliases: [veeam, veeam backup & replication, veeam one, veeam kb], note: "Knowledge base security list is JS-rendered (bot challenge markers); /kb-rss returns 404." }
268 + - { name: Commvault, domain: commvault.com, country: US, importance: 2, aliases: [commvault, metallic, commvault security advisories], hints: { ticker: CVLT, urls: [{ url: "https://documentation.commvault.com/securityadvisories/index.html", kind: security }] } }
269 + - { name: Veritas Technologies, domain: veritas.com, country: US, importance: 2, aliases: [veritas, netbackup, backup exec, cohesity veritas], note: "veritas.com/support/en_US/security.html returned 503 on 2026-09-13." }
270 + - { name: Atlassian, domain: atlassian.com, country: AU, importance: 3, aliases: [atlassian, jira, confluence, bitbucket, bamboo, crowd, atlassian security advisories], hints: { github_org: atlassian, cik: "1650372", ticker: TEAM, status_url: "https://status.atlassian.com", urls: [{ url: "https://www.atlassian.com/trust/security/advisories", kind: security }] } }
271 + - { name: GitLab, domain: gitlab.com, country: US, importance: 3, aliases: [gitlab, gitlab security releases, gitlab patch releases], hints: { github_org: gitlabhq, cik: "1653482", ticker: GTLB, urls: [{ url: "https://about.gitlab.com/security-releases.xml", kind: security }] } }
272 + - { name: JetBrains, domain: jetbrains.com, country: CZ, importance: 2, aliases: [jetbrains, teamcity, intellij, youtrack, kotlin, jetbrains security], hints: { github_org: JetBrains }, note: "'Fixed security issues' page is JS-rendered (title only without JavaScript)." }
273 + - { name: HashiCorp, domain: hashicorp.com, country: US, importance: 2, aliases: [hashicorp, terraform, vault, consul, nomad, boundary, packer, hcsec], hints: { github_org: hashicorp, status_url: "https://status.hashicorp.com", urls: [{ url: "https://discuss.hashicorp.com/c/security/52.rss", kind: security }] } }
274 + - { name: Docker, domain: docker.com, country: US, importance: 3, aliases: [docker, docker desktop, docker hub, docker engine, moby], hints: { github_org: docker, status_url: "https://www.dockerstatus.com", urls: [{ url: "https://docs.docker.com/security/security-announcements/", kind: security }] } }
275 + - { name: Salesforce, domain: salesforce.com, country: US, importance: 2, aliases: [salesforce, heroku, mulesoft, tableau, slack technologies parent], hints: { cik: "1108524", ticker: CRM } }
276 + - { name: ServiceNow, domain: servicenow.com, country: US, importance: 2, aliases: [servicenow, now platform], hints: { cik: "1373715", ticker: NOW } }
277 + - { name: Workday, domain: workday.com, country: US, importance: 1, aliases: [workday], hints: { cik: "1327811", ticker: WDAY } }
278 + - { name: Autodesk, domain: autodesk.com, country: US, importance: 2, aliases: [autodesk, autocad, revit, fusion 360, autodesk trust center], hints: { cik: "769397", ticker: ADSK } }
279 + - { name: Meta Platforms, domain: meta.com, country: US, importance: 2, aliases: [meta, facebook, whatsapp, instagram, oculus, meta bug bounty, react], hints: { github_org: facebook, cik: "1326801", ticker: META } }
280 + - { name: Zoom, domain: zoom.com, country: US, importance: 3, aliases: [zoom, zoom video communications, zoom security bulletins, zoom.us, zoom workplace], hints: { cik: "1585521", ticker: ZM, urls: [{ url: "https://www.zoom.com/en/trust/security-bulletin/", kind: security }] } }
281 + - { name: Slack, domain: slack.com, country: US, importance: 2, aliases: [slack, slack technologies] }
282 + - { name: RingCentral, domain: ringcentral.com, country: US, importance: 1, aliases: [ringcentral, ringex], hints: { ticker: RNG } }
283 + - { name: Twilio, domain: twilio.com, country: US, importance: 2, aliases: [twilio, sendgrid, authy, segment], hints: { cik: "1447669", ticker: TWLO, status_url: "https://status.twilio.com" } }
284 + - { name: Dropbox, domain: dropbox.com, country: US, importance: 1, aliases: [dropbox], hints: { cik: "1467623", ticker: DBX, status_url: "https://status.dropbox.com" } }
285 + - { name: Box, domain: box.com, country: US, importance: 1, aliases: [box], hints: { ticker: BOX, status_url: "https://status.box.com" } }
286 + - { name: Zendesk, domain: zendesk.com, country: US, importance: 1, aliases: [zendesk] }
287 + - { name: Snowflake, domain: snowflake.com, country: US, importance: 2, aliases: [snowflake], hints: { cik: "1640147", ticker: SNOW, status_url: "https://status.snowflake.com" } }
288 + - { name: Databricks, domain: databricks.com, country: US, importance: 1, aliases: [databricks] }
289 + - { name: Vercel, domain: vercel.com, country: US, importance: 1, aliases: [vercel, next.js, nextjs], hints: { github_org: vercel, status_url: "https://www.vercel-status.com" } }
290 + - { name: Netlify, domain: netlify.com, country: US, importance: 1, aliases: [netlify], hints: { status_url: "https://www.netlifystatus.com" } }
291 + - { name: DigitalOcean, domain: digitalocean.com, country: US, importance: 1, aliases: [digitalocean], hints: { ticker: DOCN, status_url: "https://status.digitalocean.com" } }
292 + - { name: OVHcloud, domain: ovhcloud.com, country: FR, importance: 1, aliases: [ovh, ovhcloud] }
293 + - { name: Hetzner, domain: hetzner.com, country: DE, importance: 1, aliases: [hetzner, hetzner online] }
294 + - { name: Scaleway, domain: scaleway.com, country: FR, importance: 1, aliases: [scaleway] }
295 + - { name: Vultr, domain: vultr.com, country: US, importance: 1, aliases: [vultr] }
296 + - { name: GoDaddy, domain: godaddy.com, country: US, importance: 1, aliases: [godaddy], hints: { ticker: GDDY } }
297 + - { name: Namecheap, domain: namecheap.com, country: US, importance: 1, aliases: [namecheap] }
298 + - { name: cPanel, domain: cpanel.net, country: US, importance: 1, aliases: [cpanel, whm, cpanel & whm] }
299 + - { name: Plesk, domain: plesk.com, country: CH, importance: 1, aliases: [plesk, plesk obsidian] }
300 + - { name: WHMCS, domain: whmcs.com, country: GB, importance: 1, aliases: [whmcs] }
301 + - { name: Webmin, domain: webmin.com, country: INT, importance: 1, aliases: [webmin, virtualmin, usermin], hints: { github_repos: [webmin/webmin] } }
302 + - { name: Portainer, domain: portainer.io, country: NZ, importance: 1, aliases: [portainer], hints: { github_org: portainer } }
303 + - { name: Mirantis, domain: mirantis.com, country: US, importance: 1, aliases: [mirantis, lens, mke] }
304 + - { name: Alibaba Cloud, domain: alibabacloud.com, country: CN, importance: 2, aliases: [alibaba cloud, aliyun, alibaba] }
305 + - { name: Tencent, domain: tencent.com, country: CN, importance: 2, aliases: [tencent, tencent cloud, wechat, tencent security] }
306 + - { name: ByteDance, domain: bytedance.com, country: CN, importance: 1, aliases: [bytedance, tiktok, douyin] }
307 + - { name: Baidu, domain: baidu.com, country: CN, importance: 1, aliases: [baidu, baidu security] }
308 + - { name: Foxit Software, domain: foxit.com, country: US, importance: 1, aliases: [foxit, foxit pdf editor, foxit reader, phantompdf] }
309 + - { name: Telegram, domain: telegram.org, country: AE, importance: 1, aliases: [telegram, telegram messenger] }
310 + - { name: Signal, domain: signal.org, country: US, importance: 1, aliases: [signal, signal messenger, signal foundation], hints: { github_org: signalapp } }
311 + - { name: Proton, domain: proton.me, country: CH, importance: 1, aliases: [proton, proton mail, protonmail, proton vpn], hints: { github_org: ProtonMail } }
312 + - { name: Zimbra, domain: zimbra.com, country: US, importance: 2, aliases: [zimbra, zimbra collaboration suite, zcs, synacor zimbra] }
313 + - { name: Roundcube, domain: roundcube.net, country: INT, importance: 1, aliases: [roundcube, roundcube webmail], hints: { github_org: roundcube } }
314 + - { name: Exim, domain: exim.org, country: INT, importance: 1, aliases: [exim, exim mta], hints: { github_repos: [Exim/exim] } }
315 + - { name: Postfix, domain: postfix.org, country: INT, importance: 1, aliases: [postfix, postfix mta] }
316 + - { name: Dovecot, domain: dovecot.org, country: FI, importance: 1, aliases: [dovecot, dovecot imap, open-xchange dovecot], hints: { github_repos: [dovecot/core] } }
317 + # ── Operating systems & distributions ──
318 + - { name: Red Hat, domain: redhat.com, country: US, importance: 3, aliases: [red hat, rhel, red hat enterprise linux, rhsa, openshift, ansible, jboss, keycloak by red hat, quay, podman], hints: { github_org: RedHatOfficial, status_url: "https://status.redhat.com", urls: [{ url: "https://access.redhat.com/hydra/rest/securitydata/csaf.json?per_page=100", kind: security, name: csaf advisories }] }, note: "securitydata/cve.json is double-encoded JSON; csaf.json is a proper array." }
319 + - { name: SUSE, domain: suse.com, country: DE, importance: 2, aliases: [suse, sles, suse linux enterprise, opensuse, rancher, neuvector, suse-su], hints: { github_org: SUSE, urls: [{ url: "https://www.suse.com/c/tag/security/feed/", kind: blog }] }, note: "The update advisories list (/support/update/) is JS-rendered; announcements are on lists.suse.com (HTML archive)." }
320 + - { name: Canonical, domain: ubuntu.com, country: GB, importance: 3, aliases: [canonical, ubuntu, ubuntu security notices, usn, snapcraft, launchpad], hints: { github_org: canonical, urls: [{ url: "https://ubuntu.com/security/notices/rss.xml", kind: security }] } }
321 + - { name: Debian, domain: debian.org, country: INT, importance: 3, aliases: [debian, dsa, debian security advisory, debian security tracker, dla], hints: { urls: [{ url: "https://www.debian.org/security/dsa", kind: security }] }, note: "The /security/dsa URL serves the RSS 2.0 feed; dsa.en.rdf returns 404." }
322 + - { name: Fedora Project, domain: fedoraproject.org, country: US, importance: 2, aliases: [fedora, fedora security updates, bodhi, fedora project], hints: { urls: [{ url: "https://bodhi.fedoraproject.org/rss/updates/?type=security", kind: security }] } }
323 + - { name: Alpine Linux, domain: alpinelinux.org, country: INT, importance: 2, aliases: [alpine, alpine linux, alpine secdb, apk], hints: { urls: [{ url: "https://secdb.alpinelinux.org/", kind: data, name: secdb index }] } }
324 + - { name: Arch Linux, domain: archlinux.org, country: INT, importance: 2, aliases: [arch linux, arch, asa, arch security tracker], hints: { urls: [{ url: "https://security.archlinux.org/advisory/feed.atom", kind: security }] } }
325 + - { name: FreeBSD, domain: freebsd.org, country: INT, importance: 2, aliases: [freebsd, freebsd security advisories, freebsd-sa], hints: { github_repos: [freebsd/freebsd-src], urls: [{ url: "https://www.freebsd.org/security/feed.xml", kind: security }] } }
326 + - { name: OpenBSD, domain: openbsd.org, country: CA, importance: 2, aliases: [openbsd, openbsd errata, libressl, openssh project], hints: { urls: [{ url: "https://www.openbsd.org/errata.html", kind: security }] } }
327 + - { name: NetBSD, domain: netbsd.org, country: INT, importance: 1, aliases: [netbsd, netbsd security advisories], hints: { urls: [{ url: "https://www.netbsd.org/support/security/advisory.html", kind: security }] } }
328 + - { name: Gentoo Linux, domain: gentoo.org, country: INT, importance: 2, aliases: [gentoo, glsa, gentoo linux security advisories], hints: { github_org: gentoo, urls: [{ url: "https://security.gentoo.org/glsa/feed.rss", kind: security }] } }
329 + - { name: Rocky Linux, domain: rockylinux.org, country: US, importance: 2, aliases: [rocky linux, rocky, rlsa, rocky enterprise software foundation], hints: { github_org: rocky-linux, urls: [{ url: "https://errata.rockylinux.org/api/v2/advisories?filters.type=TYPE_SECURITY", kind: security }] } }
330 + - { name: AlmaLinux, domain: almalinux.org, country: US, importance: 2, aliases: [almalinux, alma linux, alsa, almalinux os foundation], hints: { github_org: AlmaLinux }, note: "errata.almalinux.org is a JS shell (643 bytes)." }
331 + - { name: Amazon Web Services, domain: amazon.com, country: US, importance: 3, aliases: [aws, amazon web services, amazon linux, alas, aws security bulletins, amazon], hints: { github_org: aws, cik: "1018724", ticker: AMZN, urls: [{ url: "https://aws.amazon.com/security/security-bulletins/rss/feed/", kind: security }, { url: "https://alas.aws.amazon.com/AL2023/alas.rss", kind: security, name: amazon linux 2023 alas }] } }
332 + - { name: Linux Kernel Organization, domain: kernel.org, country: US, importance: 3, aliases: [linux kernel, kernel.org, linux cna, linux-cve-announce, greg kroah-hartman], hints: { urls: [{ url: "https://lore.kernel.org/linux-cve-announce/new.atom", kind: security }] } }
333 + - { name: OpenStack, domain: openstack.org, country: INT, importance: 1, aliases: [openstack, ossa, openstack security advisories, openinfra foundation], hints: { github_org: openstack } }
334 + - { name: Proxmox, domain: proxmox.com, country: AT, importance: 1, aliases: [proxmox, proxmox ve, pve, proxmox backup server] }
335 + - { name: QEMU, domain: qemu.org, country: INT, importance: 1, aliases: [qemu], hints: { github_repos: [qemu/qemu] } }
336 + - { name: Xen Project, domain: xenproject.org, country: INT, importance: 2, aliases: [xen, xen project, xsa, xen security advisories], hints: { urls: [{ url: "https://xenbits.xen.org/xsa/", kind: security }] } }
337 + - { name: Kubernetes, domain: kubernetes.io, country: INT, importance: 3, aliases: [kubernetes, k8s, kubernetes security response committee, kubernetes cve feed], hints: { github_org: kubernetes, urls: [{ url: "https://kubernetes.io/docs/reference/issues-security/official-cve-feed/index.json", kind: security }] } }
338 + - { name: Istio, domain: istio.io, country: INT, importance: 1, aliases: [istio, istio security bulletins], hints: { github_org: istio, urls: [{ url: "https://istio.io/latest/news/security/", kind: security }] }, note: "/news/security/feed.xml returns 404; the HTML bulletin index is server-rendered." }
339 + - { name: Helm, domain: helm.sh, country: INT, importance: 1, aliases: [helm, helm charts], hints: { github_org: helm } }
340 + - { name: containerd, domain: containerd.io, country: INT, importance: 1, aliases: [containerd], hints: { github_repos: [containerd/containerd] } }
341 + - { name: Open Container Initiative, domain: opencontainers.org, country: INT, importance: 1, aliases: [oci, open container initiative, runc, image-spec], hints: { github_org: opencontainers } }
342 + - { name: Cilium, domain: cilium.io, country: INT, importance: 1, aliases: [cilium, ebpf cilium, isovalent], hints: { github_repos: [cilium/cilium] } }
343 + - { name: Tigera, domain: tigera.io, country: US, importance: 1, aliases: [tigera, calico, project calico], hints: { github_repos: [projectcalico/calico] } }
344 + - { name: Linkerd, domain: linkerd.io, country: INT, importance: 1, aliases: [linkerd, buoyant], hints: { github_repos: [linkerd/linkerd2] } }
345 + - { name: Ceph, domain: ceph.io, country: INT, importance: 1, aliases: [ceph, ceph storage], hints: { github_repos: [ceph/ceph] } }
346 + - { name: MinIO, domain: min.io, country: US, importance: 1, aliases: [minio], hints: { github_repos: [minio/minio] } }
347 + - { name: Keycloak, domain: keycloak.org, country: INT, importance: 2, aliases: [keycloak], hints: { github_repos: [keycloak/keycloak], urls: [{ url: "https://www.keycloak.org/security", kind: security }] } }
348 + # ── Mobile & consumer electronics ──
349 + - { name: Samsung Electronics, domain: samsung.com, country: KR, importance: 3, aliases: [samsung, samsung mobile security, samsung security updates, smr, galaxy, knox, samsung smart tv], hints: { urls: [{ url: "https://security.samsungmobile.com/securityUpdate.smsb", kind: security }] } }
350 + - { name: Xiaomi, domain: mi.com, country: CN, importance: 2, aliases: [xiaomi, mi, misrc, xiaomi security center, hyperos, miui, redmi, poco], hints: { urls: [{ url: "https://trust.mi.com/misrc/bulletins/advisory", kind: security }] } }
351 + - { name: OPPO, domain: oppo.com, country: CN, importance: 1, aliases: [oppo, oppo security response center, osrc, oneplus, realme, coloros], note: "security.oppo.com advisory list is JS-rendered (menu only without JavaScript)." }
352 + - { name: vivo, domain: vivo.com, country: CN, importance: 1, aliases: [vivo, vivo security response center, iqoo, originos], note: "security.vivo.com returns 403 to non-browser clients." }
353 + - { name: HONOR, domain: hihonor.com, country: CN, importance: 1, aliases: [honor, hihonor, honor security bulletin, magicos] }
354 + - { name: Lenovo, domain: lenovo.com, country: CN, importance: 2, aliases: [lenovo, lenovo psirt, thinkpad, motorola mobility, lenovo security advisories, len-], note: "support.lenovo.com product_security returns 403 (Akamai) to non-browser clients." }
355 + - { name: Dell Technologies, domain: dell.com, country: US, importance: 2, aliases: [dell, dell psirt, dell security advisories, dsa-, poweredge, idrac, dell emc], hints: { cik: "1571996", ticker: DELL }, note: "dell.com/support/security answers 'Access Denied' (Akamai) to non-browser clients." }
356 + - { name: HP, domain: hp.com, country: US, importance: 2, aliases: [hp, hp inc, hp psirt, hp security bulletins, hpsbhf, hpsbpi, poly], hints: { cik: "47217", ticker: HPQ }, note: "support.hp.com security bulletins page is a JS shell (7 kB)." }
357 + - { name: Hewlett Packard Enterprise, domain: hpe.com, country: US, importance: 2, aliases: [hpe, hewlett packard enterprise, hpe psirt, hpesbhf, aruba, aruba networks, ilo, hpe security bulletin library, zerto], hints: { cik: "1645590", ticker: HPE }, note: "Security Bulletin Library (support.hpe.com Salesforce) is a JS shell (9 kB)." }
358 + - { name: Supermicro, domain: supermicro.com, country: US, importance: 2, aliases: [supermicro, super micro computer, supermicro security center, bmc firmware], hints: { cik: "1375365", ticker: SMCI }, note: "supermicro.com returns 403 (Akamai) to non-browser clients." }
359 + - { name: ASUS, domain: asus.com, country: TW, importance: 2, aliases: [asus, asustek, asus security advisory, asus router, rog] }
360 + - { name: MSI, domain: msi.com, country: TW, importance: 1, aliases: [msi, micro-star international] }
361 + - { name: GIGABYTE, domain: gigabyte.com, country: TW, importance: 1, aliases: [gigabyte, gigabyte technology] }
362 + - { name: ASRock, domain: asrock.com, country: TW, importance: 1, aliases: [asrock] }
363 + - { name: Sony, domain: sony.com, country: JP, importance: 1, aliases: [sony, sony group, playstation, sony psirt], hints: { ticker: SONY } }
364 + - { name: LG Electronics, domain: lg.com, country: KR, importance: 1, aliases: [lg, lg electronics, webos, lg psirt] }
365 + - { name: Panasonic, domain: panasonic.com, country: JP, importance: 1, aliases: [panasonic, panasonic psirt, panasonic connect] }
366 + - { name: Fujitsu, domain: fujitsu.com, country: JP, importance: 1, aliases: [fujitsu, fujitsu psirt] }
367 + - { name: NEC, domain: nec.com, country: JP, importance: 1, aliases: [nec, nec corporation, nec psirt] }
368 + - { name: Hitachi, domain: hitachi.com, country: JP, importance: 1, aliases: [hitachi, hitachi software vulnerability information, hitachi vantara] }
369 + - { name: Canon, domain: canon.com, country: JP, importance: 1, aliases: [canon, canon psirt, canon printers, imagerunner] }
370 + - { name: Brother Industries, domain: brother.com, country: JP, importance: 1, aliases: [brother, brother printers] }
371 + - { name: Ricoh, domain: ricoh.com, country: JP, importance: 1, aliases: [ricoh, ricoh psirt] }
372 + - { name: Kyocera Document Solutions, domain: kyoceradocumentsolutions.com, country: JP, importance: 1, aliases: [kyocera, kyocera document solutions, taskalfa] }
373 + - { name: Epson, domain: epson.com, country: JP, importance: 1, aliases: [epson, seiko epson] }
374 + - { name: Lexmark, domain: lexmark.com, country: US, importance: 1, aliases: [lexmark, lexmark security advisories] }
375 + - { name: Xerox, domain: xerox.com, country: US, importance: 1, aliases: [xerox, xerox security bulletins, altalink, versalink], hints: { ticker: XRX } }
376 + - { name: Logitech, domain: logitech.com, country: CH, importance: 1, aliases: [logitech, logi] }
377 + - { name: Sonos, domain: sonos.com, country: US, importance: 1, aliases: [sonos], hints: { ticker: SONO } }
378 + - { name: Roku, domain: roku.com, country: US, importance: 1, aliases: [roku], hints: { ticker: ROKU } }
379 + - { name: Garmin, domain: garmin.com, country: US, importance: 1, aliases: [garmin, garmin connect], hints: { ticker: GRMN } }
380 + - { name: Peloton, domain: onepeloton.com, country: US, importance: 1, aliases: [peloton, peloton interactive], hints: { ticker: PTON } }
381 + - { name: Anker, domain: anker.com, country: CN, importance: 1, aliases: [anker, eufy, eufy security, soundcore] }
382 + - { name: Wyze Labs, domain: wyze.com, country: US, importance: 1, aliases: [wyze, wyze cam] }
383 + - { name: Reolink, domain: reolink.com, country: CN, importance: 1, aliases: [reolink] }
384 + - { name: Arlo Technologies, domain: arlo.com, country: US, importance: 1, aliases: [arlo], hints: { ticker: ARLO } }
385 + - { name: Signify, domain: signify.com, country: NL, importance: 1, aliases: [signify, philips hue, hue bridge, wiz lighting] }
386 + - { name: ecobee, domain: ecobee.com, country: CA, importance: 1, aliases: [ecobee, generac ecobee] }
387 + - { name: Resideo, domain: resideo.com, country: US, importance: 1, aliases: [resideo, honeywell home, first alert], hints: { ticker: REZI } }
388 + - { name: Chamberlain Group, domain: chamberlaingroup.com, country: US, importance: 1, aliases: [chamberlain, myq, liftmaster] }
389 + # ── Networking (long tail) ──
390 + - { name: Linksys, domain: linksys.com, country: US, importance: 1, aliases: [linksys, velop] }
391 + - { name: Tenda, domain: tendacn.com, country: CN, importance: 1, aliases: [tenda, shenzhen tenda] }
392 + - { name: TOTOLINK, domain: totolink.net, country: CN, importance: 1, aliases: [totolink, zioncom] }
393 + - { name: Edimax, domain: edimax.com, country: TW, importance: 1, aliases: [edimax] }
394 + - { name: Buffalo, domain: buffalo.jp, country: JP, language: ja, importance: 1, aliases: [buffalo, buffalo inc, airstation, terastation] }
395 + - { name: I-O DATA, domain: iodata.jp, country: JP, language: ja, importance: 1, aliases: [i-o data, iodata] }
396 + - { name: ELECOM, domain: elecom.co.jp, country: JP, language: ja, importance: 1, aliases: [elecom] }
397 + - { name: DrayTek, domain: draytek.com, country: TW, importance: 1, aliases: [draytek, vigor] }
398 + - { name: Peplink, domain: peplink.com, country: HK, importance: 1, aliases: [peplink, pepwave] }
399 + - { name: Cambium Networks, domain: cambiumnetworks.com, country: US, importance: 1, aliases: [cambium, cambium networks, cnpilot, cnmaestro], hints: { ticker: CMBM } }
400 + - { name: Extreme Networks, domain: extremenetworks.com, country: US, importance: 1, aliases: [extreme networks, extreme, exos, voss], hints: { ticker: EXTR } }
401 + - { name: CommScope, domain: commscope.com, country: US, importance: 1, aliases: [commscope, ruckus, ruckus networks, arris], hints: { ticker: COMM } }
402 + - { name: Radware, domain: radware.com, country: IL, importance: 1, aliases: [radware, defensepro, alteon], hints: { ticker: RDWR } }
403 + - { name: A10 Networks, domain: a10networks.com, country: US, importance: 1, aliases: [a10 networks, a10, thunder adc], hints: { ticker: ATEN } }
404 + - { name: Array Networks, domain: arraynetworks.com, country: US, importance: 1, aliases: [array networks, array ag] }
405 + - { name: Avaya, domain: avaya.com, country: US, importance: 1, aliases: [avaya, avaya aura, avaya psirt] }
406 + - { name: Mitel, domain: mitel.com, country: CA, importance: 1, aliases: [mitel, micollab, mivoice, mitel product security advisories] }
407 + - { name: Yealink, domain: yealink.com, country: CN, importance: 1, aliases: [yealink] }
408 + - { name: Grandstream, domain: grandstream.com, country: US, importance: 1, aliases: [grandstream, grandstream networks, ucm] }
409 + - { name: Motorola Solutions, domain: motorolasolutions.com, country: US, importance: 1, aliases: [motorola solutions, avigilon, pelco], hints: { ticker: MSI } }
410 + - { name: Digi International, domain: digi.com, country: US, importance: 1, aliases: [digi, digi international, digi psirt], hints: { ticker: DGII } }
411 + - { name: Lantronix, domain: lantronix.com, country: US, importance: 1, aliases: [lantronix], hints: { ticker: LTRX } }
412 + - { name: Sierra Wireless, domain: sierrawireless.com, country: CA, importance: 1, aliases: [sierra wireless, airlink, semtech sierra wireless] }
413 + - { name: Teltonika Networks, domain: teltonika-networks.com, country: LT, importance: 1, aliases: [teltonika, teltonika networks, rutos] }
414 + - { name: InHand Networks, domain: inhandnetworks.com, country: CN, importance: 1, aliases: [inhand, inhand networks] }
415 + - { name: Westermo, domain: westermo.com, country: SE, importance: 1, aliases: [westermo, weos] }
416 + - { name: Belden, domain: belden.com, country: US, importance: 1, aliases: [belden, hirschmann, tofino, prosoft, belden security bulletins], hints: { ticker: BDC } }
417 + - { name: Red Lion Controls, domain: redlion.net, country: US, importance: 1, aliases: [red lion, red lion controls, sixnet] }
418 + - { name: Netgate, domain: netgate.com, country: US, importance: 1, aliases: [netgate, pfsense plus, tnsr] }
419 + - { name: pfSense, domain: pfsense.org, country: US, importance: 1, aliases: [pfsense, pfsense ce], hints: { github_repos: [pfsense/pfsense], urls: [{ url: "https://www.pfsense.org/security/advisories/", kind: security }] } }
420 + - { name: OPNsense, domain: opnsense.org, country: NL, importance: 1, aliases: [opnsense, deciso], hints: { github_repos: [opnsense/core] } }
421 + # ── Semiconductors ──
422 + - { name: Intel, domain: intel.com, country: US, importance: 3, aliases: [intel, intel psirt, intel-sa, intel security center, ipu, intel platform update], hints: { cik: "50863", ticker: INTC }, note: "intel.com security center returns 403 (Akamai) to non-browser clients." }
423 + - { name: AMD, domain: amd.com, country: US, importance: 3, aliases: [amd, amd product security, amd-sb, ryzen, epyc, xilinx], hints: { cik: "2488", ticker: AMD, urls: [{ url: "https://www.amd.com/en/resources/product-security.html", kind: security }] } }
424 + - { name: NVIDIA, domain: nvidia.com, country: US, importance: 3, aliases: [nvidia, nvidia psirt, nvidia security bulletins, geforce driver, cuda, dgx, mellanox], hints: { github_org: NVIDIA, cik: "1045810", ticker: NVDA, urls: [{ url: "https://www.nvidia.com/en-us/security/", kind: security }] } }
425 + - { name: Arm, domain: arm.com, country: GB, importance: 2, aliases: [arm, arm security center, arm psirt, mali gpu, trustzone, cortex], hints: { ticker: ARM }, note: "developer.arm.com Security Center returns 403 (Akamai) to non-browser clients." }
426 + - { name: Qualcomm, domain: qualcomm.com, country: US, importance: 3, aliases: [qualcomm, qualcomm security bulletin, snapdragon, qti], hints: { cik: "804328", ticker: QCOM }, note: "docs.qualcomm.com security bulletin index is a JS shell." }
427 + - { name: MediaTek, domain: mediatek.com, country: TW, importance: 2, aliases: [mediatek, mediatek product security bulletin, dimensity, helio], hints: { urls: [{ url: "https://corp.mediatek.com/product-security-bulletin", kind: security }] } }
428 + - { name: Marvell, domain: marvell.com, country: US, importance: 1, aliases: [marvell, marvell technology, cavium], hints: { ticker: MRVL }, note: "marvell.com returns 403 (Akamai) to non-browser clients." }
429 + - { name: Realtek, domain: realtek.com, country: TW, importance: 2, aliases: [realtek, realtek sdk, realtek semiconductor] }
430 + - { name: Infineon Technologies, domain: infineon.com, country: DE, importance: 1, aliases: [infineon, infineon psirt, optiga, cypress], hints: { ticker: IFX } }
431 + - { name: NXP Semiconductors, domain: nxp.com, country: NL, importance: 1, aliases: [nxp, nxp psirt, i.mx, mifare], hints: { cik: "1413447", ticker: NXPI }, note: "/psirt returns 404; PSIRT page path has changed." }
432 + - { name: STMicroelectronics, domain: st.com, country: CH, importance: 1, aliases: [stmicroelectronics, stmicro, st psirt, stm32], hints: { cik: "932787", ticker: STM }, note: "st.com timed out from the cluster on 2026-09-13." }
433 + - { name: Texas Instruments, domain: ti.com, country: US, importance: 1, aliases: [texas instruments, ti, ti psirt], hints: { cik: "97476", ticker: TXN } }
434 + - { name: Microchip Technology, domain: microchip.com, country: US, importance: 1, aliases: [microchip, microchip psirt, atmel, microsemi], hints: { cik: "827054", ticker: MCHP }, note: "PSIRT page returns 403 (Akamai) to non-browser clients." }
435 + - { name: Renesas Electronics, domain: renesas.com, country: JP, importance: 1, aliases: [renesas, renesas psirt] }
436 + # ── Industrial control systems & building automation ──
437 + - { name: Siemens, domain: siemens.com, country: DE, importance: 3, aliases: [siemens, siemens productcert, ssa-, simatic, sinec, siemens security advisories], hints: { ticker: SIE, urls: [{ url: "https://cert-portal.siemens.com/productcert/rss/advisories.atom", kind: security }] } }
438 + - { name: Schneider Electric, domain: se.com, country: FR, importance: 3, aliases: [schneider electric, schneider, sevd, modicon, ecostruxure, apc], hints: { ticker: SU }, note: "se.com security notifications page returns 403 (Akamai) to non-browser clients." }
439 + - { name: ABB, domain: abb.com, country: CH, importance: 2, aliases: [abb, abb cyber security, abb alerts and notifications, b&r parent], hints: { ticker: ABBN, urls: [{ url: "https://global.abb/group/en/technology/cyber-security/alerts-and-notifications", kind: security }] } }
440 + - { name: Rockwell Automation, domain: rockwellautomation.com, country: US, importance: 3, aliases: [rockwell automation, rockwell, allen-bradley, factorytalk, controllogix, logix], hints: { cik: "1024478", ticker: ROK, urls: [{ url: "https://www.rockwellautomation.com/en-us/trust-center/security-advisories.html", kind: security }] } }
441 + - { name: Honeywell, domain: honeywell.com, country: US, importance: 2, aliases: [honeywell, honeywell product security, experion, honeywell productivity solutions, tridium, niagara], hints: { cik: "773840", ticker: HON, urls: [{ url: "https://www.honeywell.com/us/en/product-security", kind: security }] } }
442 + - { name: Emerson, domain: emerson.com, country: US, importance: 2, aliases: [emerson, emerson electric, deltav, ovation, rosemount, emerson security notifications], hints: { cik: "32604", ticker: EMR }, note: "Security notifications page is JS-rendered (empty body without JavaScript)." }
443 + - { name: GE Vernova, domain: gevernova.com, country: US, importance: 2, aliases: [ge vernova, ge grid solutions, ge digital, cimplicity, proficy], hints: { ticker: GEV, urls: [{ url: "https://www.gevernova.com/security", kind: security }] } }
444 + - { name: Hitachi Energy, domain: hitachienergy.com, country: CH, importance: 2, aliases: [hitachi energy, hitachi abb power grids, microscada, relion], note: "Alerts and notifications page path returned 404 on 2026-09-13." }
445 + - { name: Mitsubishi Electric, domain: mitsubishielectric.com, country: JP, importance: 2, aliases: [mitsubishi electric, mitsubishi electric psirt, melsec, gx works, iconics], hints: { urls: [{ url: "https://www.mitsubishielectric.com/en/psirt/vulnerability/index.html", kind: security }] } }
446 + - { name: OMRON, domain: omron.com, country: JP, importance: 2, aliases: [omron, omron psirt, omron automation, sysmac, cx-programmer], note: "omron.com and ia.omron.com return 403 (Akamai) to non-browser clients." }
447 + - { name: Yokogawa Electric, domain: yokogawa.com, country: JP, importance: 2, aliases: [yokogawa, ysar, yokogawa security advisory report, centum], hints: { urls: [{ url: "https://www.yokogawa.com/library/resources/white-papers/yokogawa-security-advisory-report-list/", kind: security }] } }
448 + - { name: Phoenix Contact, domain: phoenixcontact.com, country: DE, importance: 2, aliases: [phoenix contact, phoenix contact psirt, plcnext, mguard], hints: { urls: [{ url: "https://www.phoenixcontact.com/en-pc/psirt", kind: security }] } }
449 + - { name: WAGO, domain: wago.com, country: DE, importance: 1, aliases: [wago, wago psirt, wago pfc], note: "/global/psirt returned 404 on 2026-09-13 (path changed)." }
450 + - { name: Moxa, domain: moxa.com, country: TW, importance: 2, aliases: [moxa, moxa security advisory, moxa psirt, nport, eds], hints: { urls: [{ url: "https://www.moxa.com/en/support/product-support/security-advisory", kind: security }] } }
451 + - { name: Advantech, domain: advantech.com, country: TW, importance: 2, aliases: [advantech, advantech psirt, webaccess, r-seenet], note: "Security advisory URLs returned 404 on 2026-09-13." }
452 + - { name: Beckhoff Automation, domain: beckhoff.com, country: DE, importance: 1, aliases: [beckhoff, twincat, beckhoff advisories], note: "Product-security advisories URL returned 404 on 2026-09-13." }
453 + - { name: B&R Industrial Automation, domain: br-automation.com, country: AT, importance: 1, aliases: [b&r, br automation, b&r industrial automation, automation runtime], hints: { urls: [{ url: "https://www.br-automation.com/en/service/cyber-security/", kind: security }] } }
454 + - { name: Bosch, domain: bosch.com, country: DE, importance: 2, aliases: [bosch, bosch psirt, bosch rexroth, bosch security advisories, bsa-, ctrlx], hints: { urls: [{ url: "https://psirt.bosch.com/security-advisories/", kind: security }] } }
455 + - { name: Bosch Security and Safety Systems, domain: boschsecurity.com, country: DE, importance: 1, aliases: [bosch security, bosch building technologies, bosch video systems, bvms], hints: { urls: [{ url: "https://www.boschsecurity.com/xc/en/support/product-security/security-advisories.html", kind: security }] } }
456 + - { name: Johnson Controls, domain: johnsoncontrols.com, country: IE, importance: 2, aliases: [johnson controls, jci, metasys, tyco, exacq, software house, johnson controls product security advisories], hints: { cik: "833444", ticker: JCI, urls: [{ url: "https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories", kind: security }] } }
457 + - { name: Carrier, domain: carrier.com, country: US, importance: 1, aliases: [carrier, carrier global, lenel, lenels2, automated logic, carrier product security], hints: { cik: "1783180", ticker: CARR } }
458 + - { name: Trane Technologies, domain: tranetechnologies.com, country: IE, importance: 1, aliases: [trane, trane technologies, tracer], hints: { ticker: TT } }
459 + - { name: Daikin, domain: daikin.com, country: JP, importance: 1, aliases: [daikin, daikin industries] }
460 + - { name: Eaton, domain: eaton.com, country: IE, importance: 1, aliases: [eaton, eaton cybersecurity, intelligent power manager], hints: { ticker: ETN } }
461 + - { name: Vertiv, domain: vertiv.com, country: US, importance: 1, aliases: [vertiv, liebert, avocent], hints: { ticker: VRT } }
462 + - { name: Legrand, domain: legrand.com, country: FR, importance: 1, aliases: [legrand, raritan, server technology] }
463 + - { name: Delta Electronics, domain: deltaww.com, country: TW, importance: 1, aliases: [delta electronics, delta, dopsoft, cncsoft] }
464 + - { name: Festo, domain: festo.com, country: DE, importance: 1, aliases: [festo, festo psirt] }
465 + - { name: SICK, domain: sick.com, country: DE, importance: 1, aliases: [sick, sick ag, sick psirt] }
466 + - { name: Pepperl+Fuchs, domain: pepperl-fuchs.com, country: DE, importance: 1, aliases: [pepperl+fuchs, pepperl fuchs] }
467 + - { name: Endress+Hauser, domain: endress.com, country: CH, importance: 1, aliases: [endress+hauser, endress hauser] }
468 + - { name: Weidmuller, domain: weidmueller.com, country: DE, importance: 1, aliases: [weidmuller, weidmueller] }
469 + - { name: Schweitzer Engineering Laboratories, domain: selinc.com, country: US, importance: 1, aliases: [sel, schweitzer engineering laboratories, sel relays] }
470 + - { name: AVEVA, domain: aveva.com, country: GB, importance: 1, aliases: [aveva, wonderware, aveva security bulletins, aveva pi] }
471 + - { name: Inductive Automation, domain: inductiveautomation.com, country: US, importance: 1, aliases: [inductive automation, ignition scada] }
472 + - { name: PTC, domain: ptc.com, country: US, importance: 1, aliases: [ptc, kepware, thingworx, kepserverex], hints: { cik: "857005", ticker: PTC } }
473 + - { name: CODESYS, domain: codesys.com, country: DE, importance: 1, aliases: [codesys, codesys group, 3s-smart software solutions] }
474 + - { name: Softing, domain: softing.com, country: DE, importance: 1, aliases: [softing, softing industrial, edgeconnector] }
475 + - { name: COPA-DATA, domain: copadata.com, country: AT, importance: 1, aliases: [copa-data, zenon] }
476 + - { name: Trihedral Engineering, domain: trihedral.com, country: CA, importance: 1, aliases: [trihedral, vtscada] }
477 + - { name: Fuji Electric, domain: fujielectric.com, country: JP, importance: 1, aliases: [fuji electric, tellus, v-server] }
478 + - { name: KUKA, domain: kuka.com, country: DE, importance: 1, aliases: [kuka, kuka robotics] }
479 + - { name: FANUC, domain: fanuc.com, country: JP, importance: 1, aliases: [fanuc] }
480 + - { name: Yaskawa Electric, domain: yaskawa.com, country: JP, importance: 1, aliases: [yaskawa, motoman] }
481 + - { name: Universal Robots, domain: universal-robots.com, country: DK, importance: 1, aliases: [universal robots, ur cobots] }
482 + - { name: Cognex, domain: cognex.com, country: US, importance: 1, aliases: [cognex], hints: { ticker: CGNX } }
483 + - { name: KEYENCE, domain: keyence.com, country: JP, importance: 1, aliases: [keyence] }
484 + # ── Physical security & video ──
485 + - { name: Axis Communications, domain: axis.com, country: SE, importance: 2, aliases: [axis, axis communications, axis os, axis security advisories, acap], hints: { urls: [{ url: "https://www.axis.com/support/product-security", kind: security }] } }
486 + - { name: Hikvision, domain: hikvision.com, country: CN, importance: 2, aliases: [hikvision, hikvision security advisory, hik-connect], note: "Security advisory page is JS-rendered (empty body without JavaScript)." }
487 + - { name: Dahua Technology, domain: dahuasecurity.com, country: CN, importance: 2, aliases: [dahua, dahua technology, dahua security advisory, imou], note: "Cybersecurity announcement pages return 404/JS shell to non-browser clients." }
488 + - { name: Hanwha Vision, domain: hanwhavision.com, country: KR, importance: 1, aliases: [hanwha vision, hanwha techwin, wisenet], hints: { urls: [{ url: "https://www.hanwhavision.com/en/support/cybersecurity/", kind: security }] } }
489 + - { name: Genetec, domain: genetec.com, country: CA, importance: 1, aliases: [genetec, security center genetec], note: "Trust-center advisory URLs returned 404 on 2026-09-13." }
490 + - { name: Verkada, domain: verkada.com, country: US, importance: 1, aliases: [verkada] }
491 + - { name: Zebra Technologies, domain: zebra.com, country: US, importance: 1, aliases: [zebra, zebra technologies, lifeguard, zebra security bulletins], hints: { cik: "877212", ticker: ZBRA, urls: [{ url: "https://www.zebra.com/us/en/support-downloads/lifeguard-security.html", kind: security }] } }
492 + - { name: Crestron, domain: crestron.com, country: US, importance: 1, aliases: [crestron, crestron security advisories] }
493 + - { name: Extron, domain: extron.com, country: US, importance: 1, aliases: [extron] }
494 + - { name: Ingenico, domain: ingenico.com, country: FR, importance: 1, aliases: [ingenico, worldline terminals] }
495 + - { name: Verifone, domain: verifone.com, country: US, importance: 1, aliases: [verifone] }
496 + - { name: NCR Atleos, domain: ncratleos.com, country: US, importance: 1, aliases: [ncr atleos, ncr, ncr voyix], hints: { ticker: NATL } }
497 + - { name: Diebold Nixdorf, domain: dieboldnixdorf.com, country: US, importance: 1, aliases: [diebold nixdorf, diebold, wincor], hints: { ticker: DBD } }
498 + # ── Identity, access & secrets ──
499 + - { name: Okta, domain: okta.com, country: US, importance: 3, aliases: [okta, auth0, okta security advisories, okta trust], hints: { cik: "1660134", ticker: OKTA, urls: [{ url: "https://trust.okta.com/security-advisories/", kind: security }] } }
500 + - { name: Ping Identity, domain: pingidentity.com, country: US, importance: 2, aliases: [ping identity, pingfederate, pingone, forgerock, pingam], note: "Security advisories page path returned 404 on 2026-09-13." }
501 + - { name: CyberArk, domain: cyberark.com, country: US, importance: 2, aliases: [cyberark, cyberark psirt, conjur, venafi, idira], hints: { ticker: CYBR }, note: "cyberark.com now serves the Palo Alto Networks 'Idira' brand shell; the advisories page is JS-rendered." }
502 + - { name: BeyondTrust, domain: beyondtrust.com, country: US, importance: 2, aliases: [beyondtrust, bomgar, remote support, privileged remote access, beyondtrust security advisories], note: "Trust-center advisories return 403 (Cloudflare) to non-browser clients." }
503 + - { name: Delinea, domain: delinea.com, country: US, importance: 2, aliases: [delinea, thycotic, centrify, secret server], hints: { urls: [{ url: "https://trust.delinea.com/", kind: security }] } }
504 + - { name: SailPoint, domain: sailpoint.com, country: US, importance: 1, aliases: [sailpoint, identitynow, identityiq], hints: { ticker: SAIL } }
505 + - { name: Saviynt, domain: saviynt.com, country: US, importance: 1, aliases: [saviynt] }
506 + - { name: One Identity, domain: oneidentity.com, country: US, importance: 1, aliases: [one identity, onelogin, safeguard, quest one identity] }
507 + - { name: Quest Software, domain: quest.com, country: US, importance: 1, aliases: [quest, quest software, kace, toad] }
508 + - { name: JumpCloud, domain: jumpcloud.com, country: US, importance: 1, aliases: [jumpcloud] }
509 + - { name: WALLIX, domain: wallix.com, country: FR, importance: 1, aliases: [wallix, wallix bastion] }
510 + - { name: Teleport, domain: goteleport.com, country: US, importance: 1, aliases: [teleport, gravitational teleport], hints: { github_repos: [gravitational/teleport] } }
511 + - { name: RSA Security, domain: rsa.com, country: US, importance: 1, aliases: [rsa, rsa securid, rsa security] }
512 + - { name: Keyfactor, domain: keyfactor.com, country: US, importance: 1, aliases: [keyfactor, ejbca, signserver] }
513 + - { name: 1Password, domain: 1password.com, country: CA, importance: 2, aliases: [1password, agilebits], hints: { status_url: "https://status.1password.com" } }
514 + - { name: Bitwarden, domain: bitwarden.com, country: US, importance: 2, aliases: [bitwarden], hints: { github_org: bitwarden } }
515 + - { name: LastPass, domain: lastpass.com, country: US, importance: 2, aliases: [lastpass], note: "status.lastpass.com returns 403 to non-browser clients." }
516 + - { name: Keeper Security, domain: keepersecurity.com, country: US, importance: 1, aliases: [keeper, keeper security] }
517 + - { name: Dashlane, domain: dashlane.com, country: FR, importance: 1, aliases: [dashlane] }
518 + - { name: KeePass, domain: keepass.info, country: DE, importance: 1, aliases: [keepass, keepass password safe] }
519 + - { name: Yubico, domain: yubico.com, country: SE, importance: 2, aliases: [yubico, yubikey, ysa, yubico security advisories], hints: { github_org: Yubico, urls: [{ url: "https://www.yubico.com/support/security-advisories/", kind: security }] } }
520 + - { name: Feitian Technologies, domain: ftsafe.com, country: CN, importance: 1, aliases: [feitian, ftsafe] }
521 + - { name: Ledger, domain: ledger.com, country: FR, importance: 1, aliases: [ledger, ledger nano, ledger donjon] }
522 + - { name: Trezor, domain: trezor.io, country: CZ, importance: 1, aliases: [trezor, satoshilabs] }
523 + - { name: Thales, domain: thalesgroup.com, country: FR, importance: 2, aliases: [thales, thales cpl, gemalto, safenet, luna hsm, imperva by thales], hints: { ticker: HO } }
524 + - { name: Entrust, domain: entrust.com, country: US, importance: 1, aliases: [entrust, entrust datacard, nshield], note: "entrust.com returns 403 to non-browser clients." }
525 + - { name: DigiCert, domain: digicert.com, country: US, importance: 2, aliases: [digicert, digicert certcentral] }
526 + - { name: Sectigo, domain: sectigo.com, country: US, importance: 1, aliases: [sectigo, comodo ca] }
527 + - { name: Let's Encrypt, domain: letsencrypt.org, country: US, importance: 2, aliases: [let's encrypt, letsencrypt, isrg, internet security research group, boulder], hints: { github_org: letsencrypt } }
528 + # ── Endpoint, network & cloud security vendors ──
529 + - { name: CrowdStrike, domain: crowdstrike.com, country: US, importance: 3, aliases: [crowdstrike, falcon, crowdstrike intelligence, crowdstrike security advisories, overwatch], hints: { cik: "1535527", ticker: CRWD, urls: [{ url: "https://www.crowdstrike.com/security-advisories/", kind: security }, { url: "https://www.crowdstrike.com/en-us/blog/feed/", kind: blog }] } }
530 + - { name: SentinelOne, domain: sentinelone.com, country: US, importance: 3, aliases: [sentinelone, sentinellabs, singularity], hints: { cik: "1583708", ticker: S, status_url: "https://status.sentinelone.com", urls: [{ url: "https://www.sentinelone.com/labs/feed/", kind: blog, name: sentinellabs }] }, note: "/security-advisories/ returns 404; no public advisory list." }
531 + - { name: Trellix, domain: trellix.com, country: US, importance: 2, aliases: [trellix, mcafee enterprise, fireeye products, trellix advanced research center], note: "trellix.com timed out from the cluster on 2026-09-13 (also blocked on 2026-09-11)." }
532 + - { name: McAfee, domain: mcafee.com, country: US, importance: 1, aliases: [mcafee, mcafee consumer] }
533 + - { name: Trend Micro, domain: trendmicro.com, country: JP, importance: 3, aliases: [trend micro, trendmicro, apex one, deep security, trend vision one, trend micro research], hints: { ticker: "4704" }, note: "Security bulletins live in success.trendmicro.com (Salesforce, JS-rendered); research RSS paths return 404." }
534 + - { name: ESET, domain: eset.com, country: SK, importance: 2, aliases: [eset, eset customer advisories, eset research], note: "Customer advisories KB (support.eset.com/en/ca8775) returned 404 on 2026-09-13." }
535 + - { name: Kaspersky, domain: kaspersky.com, country: RU, importance: 3, aliases: [kaspersky, kaspersky lab, kaspersky great, kaspersky security advisories, ksn], hints: { urls: [{ url: "https://support.kaspersky.com/vulnerability/list-of-advisories/12430", kind: security }] } }
536 + - { name: Bitdefender, domain: bitdefender.com, country: RO, importance: 2, aliases: [bitdefender, bitdefender labs, gravityzone, hot for security], hints: { urls: [{ url: "https://www.bitdefender.com/support/security-advisories/", kind: security }, { url: "https://www.bitdefender.com/nuxt/api/en-us/rss/hotforsecurity/", kind: blog }] } }
537 + - { name: Gen Digital, domain: gendigital.com, country: US, importance: 2, aliases: [gen digital, gen, nortonlifelock, avira, avg, ccleaner], hints: { cik: "849399", ticker: GEN } }
538 + - { name: Norton, domain: norton.com, country: US, importance: 1, aliases: [norton, norton 360, symantec consumer], hints: { urls: [{ url: "https://support.norton.com/sp/static/external/tools/security-advisories.html", kind: security }] } }
539 + - { name: Avast, domain: avast.com, country: CZ, importance: 1, aliases: [avast, avast threat labs, decoded avast] }
540 + - { name: Malwarebytes, domain: malwarebytes.com, country: US, importance: 2, aliases: [malwarebytes, malwarebytes labs, threatdown], hints: { urls: [{ url: "https://www.malwarebytes.com/blog/feed/index.xml", kind: blog }] } }
541 + - { name: Cybereason, domain: cybereason.com, country: US, importance: 1, aliases: [cybereason, cybereason nocturnus], hints: { urls: [{ url: "https://www.cybereason.com/blog/rss.xml", kind: blog }] } }
542 + - { name: WithSecure, domain: withsecure.com, country: FI, importance: 1, aliases: [withsecure, with secure, f-secure business, withsecure labs], note: "Labs RSS paths return HTML/404." }
543 + - { name: F-Secure, domain: f-secure.com, country: FI, importance: 1, aliases: [f-secure, fsecure] }
544 + - { name: BlackBerry, domain: blackberry.com, country: CA, importance: 1, aliases: [blackberry, cylance, qnx, blackberry psirt], hints: { ticker: BB } }
545 + - { name: Rapid7, domain: rapid7.com, country: US, importance: 2, aliases: [rapid7, insightvm, nexpose, rapid7 labs, velociraptor], hints: { github_org: rapid7, cik: "1560327", ticker: RPD, status_url: "https://status.rapid7.com", urls: [{ url: "https://www.rapid7.com/blog/rss/", kind: blog }] } }
546 + - { name: Tenable, domain: tenable.com, country: US, importance: 2, aliases: [tenable, nessus, tenable.io, tenable research, tns-], hints: { github_org: tenable, cik: "1660280", ticker: TENB, status_url: "https://status.tenable.com", urls: [{ url: "https://www.tenable.com/security/feed", kind: security }, { url: "https://www.tenable.com/blog/feed", kind: blog }] } }
547 + - { name: Qualys, domain: qualys.com, country: US, importance: 2, aliases: [qualys, qualys tru, qualys threat research unit, qualys security advisories], hints: { cik: "1107843", ticker: QLYS, urls: [{ url: "https://www.qualys.com/security-advisories/", kind: security }, { url: "https://blog.qualys.com/feed", kind: blog }] } }
548 + - { name: Greenbone, domain: greenbone.net, country: DE, importance: 1, aliases: [greenbone, openvas, greenbone community edition], hints: { github_org: greenbone } }
549 + - { name: Elastic, domain: elastic.co, country: US, importance: 2, aliases: [elastic, elasticsearch, kibana, elastic security labs, esa-], hints: { github_org: elastic, cik: "1707753", ticker: ESTC, status_url: "https://status.elastic.co", urls: [{ url: "https://discuss.elastic.co/c/announcements/security-announcements/31.rss", kind: security }, { url: "https://www.elastic.co/security-labs/rss/feed.xml", kind: blog, name: elastic security labs }] } }
550 + - { name: Splunk, domain: splunk.com, country: US, importance: 3, aliases: [splunk, splunk security advisories, svd-, splunk enterprise, splunk by cisco], hints: { urls: [{ url: "https://advisory.splunk.com/feed", kind: security }] } }
551 + - { name: Datadog, domain: datadoghq.com, country: US, importance: 2, aliases: [datadog, datadog security labs, datadog security research], hints: { github_org: DataDog, cik: "1561550", ticker: DDOG, status_url: "https://status.datadoghq.com", urls: [{ url: "https://securitylabs.datadoghq.com/rss/feed.xml", kind: blog }] } }
552 + - { name: Sumo Logic, domain: sumologic.com, country: US, importance: 1, aliases: [sumo logic, sumologic], hints: { status_url: "https://status.sumologic.com" } }
553 + - { name: Dynatrace, domain: dynatrace.com, country: US, importance: 1, aliases: [dynatrace], hints: { ticker: DT } }
554 + - { name: New Relic, domain: newrelic.com, country: US, importance: 1, aliases: [new relic, newrelic], hints: { status_url: "https://status.newrelic.com" } }
555 + - { name: PagerDuty, domain: pagerduty.com, country: US, importance: 1, aliases: [pagerduty], hints: { ticker: PD } }
556 + - { name: Cribl, domain: cribl.io, country: US, importance: 1, aliases: [cribl, cribl stream] }
557 + - { name: Graylog, domain: graylog.org, country: US, importance: 1, aliases: [graylog], hints: { github_repos: [Graylog2/graylog2-server] } }
558 + - { name: Prometheus, domain: prometheus.io, country: INT, importance: 1, aliases: [prometheus, prometheus monitoring], hints: { github_org: prometheus } }
559 + - { name: Wazuh, domain: wazuh.com, country: US, importance: 1, aliases: [wazuh], hints: { github_repos: [wazuh/wazuh] } }
560 + - { name: Open Information Security Foundation, domain: suricata.io, country: US, importance: 1, aliases: [suricata, oisf], hints: { github_repos: [OISF/suricata] } }
561 + - { name: Snort, domain: snort.org, country: US, importance: 1, aliases: [snort, snort rules, talos snort], hints: { github_repos: [snort3/snort3] } }
562 + - { name: Zeek, domain: zeek.org, country: US, importance: 1, aliases: [zeek, bro ids], hints: { github_repos: [zeek/zeek] } }
563 + - { name: Security Onion Solutions, domain: securityonion.net, country: US, importance: 1, aliases: [security onion], hints: { github_repos: [Security-Onion-Solutions/securityonion] } }
564 + - { name: Nmap Project, domain: nmap.org, country: US, importance: 1, aliases: [nmap, npcap, zenmap], hints: { github_repos: [nmap/nmap] } }
565 + - { name: Wireshark Foundation, domain: wireshark.org, country: US, importance: 1, aliases: [wireshark, wnpa-sec, tshark] }
566 + - { name: Kali Linux, domain: kali.org, country: US, importance: 1, aliases: [kali, kali linux] }
567 + - { name: Zscaler, domain: zscaler.com, country: US, importance: 2, aliases: [zscaler, zscaler threatlabz, zia, zpa, zscaler trust], hints: { cik: "1713683", ticker: ZS, urls: [{ url: "https://www.zscaler.com/blogs/feeds/security-research", kind: blog, name: threatlabz }] }, note: "trust.zscaler.com security advisories are a JS shell." }
568 + - { name: Netskope, domain: netskope.com, country: US, importance: 2, aliases: [netskope, netskope threat labs], note: "Security advisories URL returned 404 on 2026-09-13." }
569 + - { name: Cato Networks, domain: catonetworks.com, country: IL, importance: 1, aliases: [cato networks, cato ctrl, cato sase] }
570 + - { name: Versa Networks, domain: versa-networks.com, country: US, importance: 1, aliases: [versa networks, versa director, versa sase] }
571 + - { name: Forcepoint, domain: forcepoint.com, country: US, importance: 1, aliases: [forcepoint, websense, stonesoft] }
572 + - { name: Cloudflare, domain: cloudflare.com, country: US, importance: 3, aliases: [cloudflare, cloudflare radar, cloudflare one, warp, workers], hints: { github_org: cloudflare, cik: "1477333", ticker: NET, status_url: "https://www.cloudflarestatus.com", urls: [{ url: "https://blog.cloudflare.com/tag/security/rss/", kind: blog }] }, note: "radar.cloudflare.com returns 403 to non-browser clients." }
573 + - { name: Akamai, domain: akamai.com, country: US, importance: 3, aliases: [akamai, akamai sirt, akamai security research, linode, guardicore], hints: { cik: "1086222", ticker: AKAM, urls: [{ url: "https://feeds.feedburner.com/akamai/blog", kind: blog }] }, note: "akamai.com blog RSS returns 403 (Akamai bot manager); the FeedBurner mirror is the only working feed." }
574 + - { name: Fastly, domain: fastly.com, country: US, importance: 2, aliases: [fastly, fastly security research, signal sciences], hints: { cik: "1517413", ticker: FSLY }, note: "/security-advisories redirects to the blog 'Security' category (no advisory list)." }
575 + - { name: Imperva, domain: imperva.com, country: US, importance: 1, aliases: [imperva, incapsula, imperva waf] }
576 + - { name: Proofpoint, domain: proofpoint.com, country: US, importance: 2, aliases: [proofpoint, proofpoint security advisories, proofpoint threat insight], hints: { urls: [{ url: "https://www.proofpoint.com/us/security/security-advisories", kind: security }, { url: "https://www.proofpoint.com/us/rss.xml", kind: news }] } }
577 + - { name: Mimecast, domain: mimecast.com, country: GB, importance: 1, aliases: [mimecast] }
578 + - { name: Abnormal AI, domain: abnormal.ai, country: US, importance: 1, aliases: [abnormal, abnormal security, abnormal ai], hints: { status_url: "https://status.abnormalsecurity.com" } }
579 + - { name: KnowBe4, domain: knowbe4.com, country: US, importance: 1, aliases: [knowbe4], hints: { status_url: "https://status.knowbe4.com" } }
580 + - { name: Tanium, domain: tanium.com, country: US, importance: 1, aliases: [tanium] }
581 + - { name: Automox, domain: automox.com, country: US, importance: 1, aliases: [automox] }
582 + - { name: NinjaOne, domain: ninjaone.com, country: US, importance: 1, aliases: [ninjaone, ninjarmm], hints: { status_url: "https://status.ninjaone.com" } }
583 + - { name: Kaseya, domain: kaseya.com, country: US, importance: 2, aliases: [kaseya, kaseya vsa, it glue, unitrends], hints: { status_url: "https://status.kaseya.com" }, note: "/security-advisories/ is a JS shell (814 bytes)." }
584 + - { name: Datto, domain: datto.com, country: US, importance: 1, aliases: [datto, datto rmm, autotask], note: "Trust/security advisories URL returned 404 on 2026-09-13." }
585 + - { name: ConnectWise, domain: connectwise.com, country: US, importance: 2, aliases: [connectwise, screenconnect, connectwise control, automate, connectwise security bulletins], hints: { urls: [{ url: "https://www.connectwise.com/company/trust/security-bulletins", kind: security }] } }
586 + - { name: N-able, domain: n-able.com, country: US, importance: 2, aliases: [n-able, nable, n-central, take control], hints: { ticker: NABL }, note: "Security bulletins return 403 (Cloudflare) to non-browser clients." }
587 + - { name: SolarWinds, domain: solarwinds.com, country: US, importance: 3, aliases: [solarwinds, orion, serv-u, web help desk, solarwinds security advisories], hints: { urls: [{ url: "https://www.solarwinds.com/trust-center/security-advisories", kind: security }] } }
588 + - { name: ManageEngine, domain: manageengine.com, country: IN, importance: 2, aliases: [manageengine, zoho manageengine, adselfservice plus, servicedesk plus, desktop central, endpoint central], hints: { urls: [{ url: "https://www.manageengine.com/security/advisory/", kind: security }] } }
589 + - { name: Zoho, domain: zoho.com, country: IN, importance: 1, aliases: [zoho, zoho corporation] }
590 + - { name: BMC Software, domain: bmc.com, country: US, importance: 1, aliases: [bmc, bmc helix, control-m, remedy] }
591 + - { name: OpenText, domain: opentext.com, country: CA, importance: 1, aliases: [opentext, micro focus, netiq, arcsight, fortify, webroot, carbonite], hints: { ticker: OTEX } }
592 + - { name: Nagios, domain: nagios.com, country: US, importance: 1, aliases: [nagios, nagios xi, nagios core], note: "/security/ returned 404 on 2026-09-13." }
593 + - { name: Zabbix, domain: zabbix.com, country: LV, importance: 1, aliases: [zabbix], hints: { urls: [{ url: "https://www.zabbix.com/security_advisories", kind: security }] } }
594 + - { name: Paessler, domain: paessler.com, country: DE, importance: 1, aliases: [paessler, prtg, prtg network monitor], hints: { urls: [{ url: "https://www.paessler.com/prtg/history/stable", kind: changelog }] } }
595 + - { name: Grafana Labs, domain: grafana.com, country: US, importance: 2, aliases: [grafana, grafana labs, loki, tempo, mimir], hints: { github_org: grafana, status_url: "https://status.grafana.com", urls: [{ url: "https://grafana.com/security/security-advisories/", kind: security }] } }
596 + - { name: Jenkins, domain: jenkins.io, country: INT, importance: 2, aliases: [jenkins, jenkins security advisories, cloudbees jenkins], hints: { github_org: jenkinsci, urls: [{ url: "https://www.jenkins.io/security/advisories/rss.xml", kind: security }] } }
597 + - { name: CircleCI, domain: circleci.com, country: US, importance: 1, aliases: [circleci] }
598 + - { name: Gitea, domain: gitea.com, country: INT, importance: 1, aliases: [gitea, forgejo], hints: { github_repos: [go-gitea/gitea] } }
599 + - { name: SonarSource, domain: sonarsource.com, country: CH, importance: 1, aliases: [sonarsource, sonarqube, sonarcloud] }
600 + - { name: Puppet, domain: puppet.com, country: US, importance: 1, aliases: [puppet, perforce puppet] }
601 + - { name: Chef, domain: chef.io, country: US, importance: 1, aliases: [chef, progress chef, chef infra] }
602 + # ── Backup, storage & remote access ──
603 + - { name: Nextcloud, domain: nextcloud.com, country: DE, importance: 2, aliases: [nextcloud, nextcloud hub], hints: { github_org: nextcloud }, note: "/security/advisories/ returned 404 on 2026-09-13; advisories are GitHub security advisories (GHSA)." }
604 + - { name: ownCloud, domain: owncloud.com, country: DE, importance: 1, aliases: [owncloud, kiteworks owncloud], hints: { github_org: owncloud, urls: [{ url: "https://owncloud.com/security-advisories/", kind: security }] } }
605 + - { name: Synology, domain: synology.com, country: TW, importance: 2, aliases: [synology, dsm, diskstation, synology-sa, synology security advisory], hints: { urls: [{ url: "https://www.synology.com/en-global/security/advisory", kind: security }] } }
606 + - { name: QNAP, domain: qnap.com, country: TW, importance: 2, aliases: [qnap, qts, quts hero, qnap security advisories, qsa-], hints: { urls: [{ url: "https://www.qnap.com/en/security-advisories", kind: security }] } }
607 + - { name: ASUSTOR, domain: asustor.com, country: TW, importance: 1, aliases: [asustor, adm] }
608 + - { name: TerraMaster, domain: terra-master.com, country: CN, importance: 1, aliases: [terramaster, tos] }
609 + - { name: iXsystems, domain: truenas.com, country: US, importance: 1, aliases: [truenas, ixsystems, freenas], hints: { github_repos: [truenas/middleware] } }
610 + - { name: Lime Technology, domain: unraid.net, country: US, importance: 1, aliases: [unraid, lime technology] }
611 + - { name: Western Digital, domain: westerndigital.com, country: US, importance: 2, aliases: [western digital, wd, my cloud, sandisk], hints: { cik: "106040", ticker: WDC }, note: "Product security page is JS-rendered (no advisory list without JavaScript)." }
612 + - { name: Seagate Technology, domain: seagate.com, country: IE, importance: 1, aliases: [seagate, lyve], hints: { cik: "1137789", ticker: STX }, note: "seagate.com answered 429 to the cluster on 2026-09-13." }
613 + - { name: NetApp, domain: netapp.com, country: US, importance: 2, aliases: [netapp, ontap, netapp security advisories, ntap-], hints: { cik: "1002047", ticker: NTAP }, note: "security.netapp.com is a JS shell (1.2 kB) to non-browser clients." }
614 + - { name: Pure Storage, domain: purestorage.com, country: US, importance: 1, aliases: [pure storage, flasharray, purity], hints: { cik: "1474432", ticker: PSTG } }
615 + - { name: Nutanix, domain: nutanix.com, country: US, importance: 2, aliases: [nutanix, aos, prism, nutanix security advisories], hints: { cik: "1618732", ticker: NTNX }, note: "Security advisories live in portal.nutanix.com (login/JS)." }
616 + - { name: Hitachi Vantara, domain: hitachivantara.com, country: US, importance: 1, aliases: [hitachi vantara, pentaho] }
617 + - { name: Quantum Corporation, domain: quantum.com, country: US, importance: 1, aliases: [quantum, quantum corporation, stornext] }
618 + - { name: Acronis, domain: acronis.com, country: CH, importance: 1, aliases: [acronis, acronis cyber protect] }
619 + - { name: Arcserve, domain: arcserve.com, country: US, importance: 1, aliases: [arcserve, arcserve udp] }
620 + - { name: Rubrik, domain: rubrik.com, country: US, importance: 1, aliases: [rubrik], hints: { ticker: RBRK } }
621 + - { name: Cohesity, domain: cohesity.com, country: US, importance: 1, aliases: [cohesity] }
622 + - { name: Fortra, domain: fortra.com, country: US, importance: 2, aliases: [fortra, helpsystems, goanywhere, cobalt strike, filecatalyst, globalscape], note: "fortra.com/security/advisories returns 403 (Cloudflare) to non-browser clients." }
623 + - { name: Kiteworks, domain: kiteworks.com, country: US, importance: 1, aliases: [kiteworks, accellion, accellion fta] }
624 + - { name: Parallels, domain: parallels.com, country: US, importance: 1, aliases: [parallels, parallels desktop, parallels ras, alludo], note: "/security/ returned 404 on 2026-09-13." }
625 + - { name: TeamViewer, domain: teamviewer.com, country: DE, importance: 2, aliases: [teamviewer, tv-], hints: { ticker: TMV, urls: [{ url: "https://www.teamviewer.com/en/trust-center/security-bulletins/", kind: security }] } }
626 + - { name: AnyDesk, domain: anydesk.com, country: DE, importance: 1, aliases: [anydesk], note: "anydesk.com returns 403 (Cloudflare) to non-browser clients." }
627 + - { name: Splashtop, domain: splashtop.com, country: US, importance: 1, aliases: [splashtop] }
628 + - { name: Syncthing Foundation, domain: syncthing.net, country: INT, importance: 1, aliases: [syncthing], hints: { github_repos: [syncthing/syncthing] } }
629 + - { name: FileZilla, domain: filezilla-project.org, country: INT, importance: 1, aliases: [filezilla] }
630 + - { name: WinSCP, domain: winscp.net, country: CZ, importance: 1, aliases: [winscp] }
631 + - { name: OpenVPN, domain: openvpn.net, country: US, importance: 1, aliases: [openvpn, openvpn access server], hints: { github_org: OpenVPN } }
632 + - { name: WireGuard, domain: wireguard.com, country: INT, importance: 1, aliases: [wireguard] }
633 + - { name: Tailscale, domain: tailscale.com, country: CA, importance: 1, aliases: [tailscale, headscale], hints: { github_org: tailscale, status_url: "https://status.tailscale.com" } }
634 + - { name: Tor Project, domain: torproject.org, country: US, importance: 1, aliases: [tor, tor project, tor browser] }
635 + - { name: Mullvad, domain: mullvad.net, country: SE, importance: 1, aliases: [mullvad, mullvad vpn] }
636 + - { name: NordVPN, domain: nordvpn.com, country: PA, importance: 1, aliases: [nordvpn, nord security] }
637 + # ── Web servers, languages, frameworks, CMS & databases ──
638 + - { name: Apache Software Foundation, domain: apache.org, country: US, importance: 3, aliases: [apache, asf, apache security team, httpd, tomcat, struts, log4j, kafka, activemq, airflow, superset], hints: { github_org: apache, urls: [{ url: "https://www.apache.org/security/", kind: security }] } }
639 + - { name: Eclipse Foundation, domain: eclipse.org, country: BE, importance: 2, aliases: [eclipse, eclipse foundation, jetty, eclipse ide, jakarta ee, mosquitto], hints: { github_org: eclipse, urls: [{ url: "https://www.eclipse.org/security/", kind: security }] } }
640 + - { name: Eclipse Adoptium, domain: adoptium.net, country: BE, importance: 1, aliases: [adoptium, temurin, eclipse temurin, openjdk builds], hints: { github_org: adoptium } }
641 + - { name: OpenSSL, domain: openssl.org, country: INT, importance: 3, aliases: [openssl, openssl library, openssl security advisory], hints: { github_repos: [openssl/openssl], urls: [{ url: "https://openssl-library.org/news/vulnerabilities/", kind: security }] } }
642 + - { name: curl, domain: curl.se, country: SE, importance: 2, aliases: [curl, libcurl, daniel stenberg], hints: { github_repos: [curl/curl], urls: [{ url: "https://curl.se/docs/security.html", kind: security }] }, note: "/docs/vuln.rss returns 404." }
643 + - { name: OpenSSH, domain: openssh.com, country: CA, importance: 3, aliases: [openssh, portable openssh, sshd], hints: { urls: [{ url: "https://www.openssh.com/security.html", kind: security }] } }
644 + - { name: nginx, domain: nginx.org, country: US, importance: 2, aliases: [nginx, nginx open source, nginx security advisories], hints: { github_repos: [nginx/nginx], urls: [{ url: "https://nginx.org/en/security_advisories.html", kind: security }] } }
645 + - { name: HAProxy, domain: haproxy.org, country: FR, importance: 1, aliases: [haproxy, haproxy technologies], hints: { github_repos: [haproxy/haproxy] } }
646 + - { name: Envoy Proxy, domain: envoyproxy.io, country: INT, importance: 1, aliases: [envoy, envoy proxy], hints: { github_repos: [envoyproxy/envoy] } }
647 + - { name: Kong, domain: konghq.com, country: US, importance: 1, aliases: [kong, kong gateway], hints: { github_repos: [Kong/kong] } }
648 + - { name: Traefik Labs, domain: traefik.io, country: FR, importance: 1, aliases: [traefik, traefik proxy], hints: { github_repos: [traefik/traefik] } }
649 + - { name: Caddy, domain: caddyserver.com, country: US, importance: 1, aliases: [caddy, caddy server], hints: { github_repos: [caddyserver/caddy] } }
650 + - { name: LiteSpeed Technologies, domain: litespeedtech.com, country: US, importance: 1, aliases: [litespeed, openlitespeed, lsws] }
651 + - { name: WordPress, domain: wordpress.org, country: US, importance: 3, aliases: [wordpress, wordpress core, wordpress security release], hints: { github_repos: [WordPress/WordPress], urls: [{ url: "https://wordpress.org/news/category/security/feed/", kind: security }] } }
652 + - { name: Automattic, domain: automattic.com, country: US, importance: 1, aliases: [automattic, woocommerce, wordpress.com, jetpack, wpscan parent], hints: { github_org: Automattic } }
653 + - { name: Drupal, domain: drupal.org, country: US, importance: 2, aliases: [drupal, drupal security team, sa-core, sa-contrib], hints: { urls: [{ url: "https://www.drupal.org/security/rss.xml", kind: security }] } }
654 + - { name: Joomla, domain: joomla.org, country: US, importance: 2, aliases: [joomla, joomla security strike team, jsst], hints: { github_repos: [joomla/joomla-cms], urls: [{ url: "https://developer.joomla.org/security-centre.feed?type=rss", kind: security }] } }
655 + - { name: TYPO3, domain: typo3.org, country: DE, importance: 1, aliases: [typo3, typo3 security advisories, typo3-core-sa], hints: { github_org: TYPO3, urls: [{ url: "https://typo3.org/help/security-advisories", kind: security }] } }
656 + - { name: Shopify, domain: shopify.com, country: CA, importance: 1, aliases: [shopify], hints: { github_org: Shopify, cik: "1594805", ticker: SHOP } }
657 + - { name: PrestaShop, domain: prestashop-project.org, country: FR, importance: 1, aliases: [prestashop, prestashop project], hints: { github_repos: [PrestaShop/PrestaShop] } }
658 + - { name: Django Software Foundation, domain: djangoproject.com, country: US, importance: 2, aliases: [django, django security releases], hints: { github_repos: [django/django], urls: [{ url: "https://www.djangoproject.com/rss/weblog/", kind: news }] } }
659 + - { name: Ruby on Rails, domain: rubyonrails.org, country: US, importance: 2, aliases: [rails, ruby on rails, rails security announcements], hints: { github_repos: [rails/rails], urls: [{ url: "https://discuss.rubyonrails.org/c/security-announcements/9.rss", kind: security }] } }
660 + - { name: Laravel, domain: laravel.com, country: US, importance: 1, aliases: [laravel, laravel framework], hints: { github_repos: [laravel/framework] } }
661 + - { name: Spring, domain: spring.io, country: US, importance: 2, aliases: [spring, spring framework, spring boot, spring security, spring cve reports, pivotal], hints: { github_org: spring-projects, urls: [{ url: "https://spring.io/security.atom", kind: security }] } }
662 + - { name: Node.js, domain: nodejs.org, country: US, importance: 3, aliases: [node.js, nodejs, node, openjs foundation, node security releases], hints: { github_repos: [nodejs/node], urls: [{ url: "https://nodejs.org/en/feed/vulnerability.xml", kind: security }] } }
663 + - { name: Deno, domain: deno.com, country: US, importance: 1, aliases: [deno, deno land], hints: { github_repos: [denoland/deno] } }
664 + - { name: Python Software Foundation, domain: python.org, country: US, importance: 2, aliases: [python, cpython, psf, pypi, pip, security-announce], hints: { github_org: python } }
665 + - { name: PHP, domain: php.net, country: INT, importance: 2, aliases: [php, php group, php security releases], hints: { github_repos: [php/php-src], urls: [{ url: "https://www.php.net/releases/feed.php", kind: releases }] } }
666 + - { name: Ruby, domain: ruby-lang.org, country: JP, importance: 1, aliases: [ruby, ruby-lang, rubygems], hints: { github_repos: [ruby/ruby] } }
667 + - { name: Perl, domain: perl.org, country: INT, importance: 1, aliases: [perl, cpan, perl security], hints: { github_repos: [Perl/perl5] } }
668 + - { name: Go, domain: go.dev, country: US, importance: 2, aliases: [go, golang, go vulnerability database, govulncheck], hints: { github_repos: [golang/go, golang/vulndb], urls: [{ url: "https://vuln.go.dev/index/vulns.json", kind: security, name: go vulnerability database index }] } }
669 + - { name: Rust Foundation, domain: rust-lang.org, country: US, importance: 2, aliases: [rust, rust-lang, rustc, cargo, rust security response wg], hints: { github_org: rust-lang } }
670 + - { name: Erlang Ecosystem Foundation, domain: erlang.org, country: SE, importance: 1, aliases: [erlang, otp, erlang/otp, elixir ecosystem], hints: { github_repos: [erlang/otp] } }
671 + - { name: Electron, domain: electronjs.org, country: US, importance: 1, aliases: [electron, electronjs], hints: { github_repos: [electron/electron] } }
672 + - { name: Qt Group, domain: qt.io, country: FI, importance: 1, aliases: [qt, qt group, qt framework], hints: { ticker: QTCOM } }
673 + - { name: GNOME Foundation, domain: gnome.org, country: INT, importance: 1, aliases: [gnome, gtk, glib, libsoup], hints: { github_org: GNOME } }
674 + - { name: KDE, domain: kde.org, country: INT, importance: 1, aliases: [kde, kde security advisories, plasma], hints: { github_org: KDE, urls: [{ url: "https://kde.org/info/security/", kind: security }] } }
675 + - { name: PostgreSQL, domain: postgresql.org, country: INT, importance: 2, aliases: [postgresql, postgres, postgresql security], hints: { github_repos: [postgres/postgres], urls: [{ url: "https://www.postgresql.org/support/security/", kind: security }] } }
676 + - { name: MongoDB, domain: mongodb.com, country: US, importance: 2, aliases: [mongodb, mongo, atlas, mongodb security], hints: { github_org: mongodb, cik: "1441816", ticker: MDB, status_url: "https://status.mongodb.com", urls: [{ url: "https://jira.mongodb.org/sr/jira.issueviews:searchrequest-rss/temp/SearchRequest.xml?jqlQuery=project+%3D+SERVER+AND+labels+%3D+security&tempMax=50", kind: security }] } }
677 + - { name: MariaDB Foundation, domain: mariadb.org, country: FI, importance: 1, aliases: [mariadb, mariadb server], hints: { github_repos: [MariaDB/server] } }
678 + - { name: Redis, domain: redis.io, country: US, importance: 2, aliases: [redis, redis labs, redis security advisories, valkey alternative], hints: { github_repos: [redis/redis] } }
679 + - { name: SQLite, domain: sqlite.org, country: US, importance: 1, aliases: [sqlite] }
680 + - { name: ClickHouse, domain: clickhouse.com, country: US, importance: 1, aliases: [clickhouse], hints: { github_repos: [ClickHouse/ClickHouse] } }
681 + - { name: OpenSearch, domain: opensearch.org, country: US, importance: 1, aliases: [opensearch, opensearch project], hints: { github_org: opensearch-project } }
682 + - { name: Couchbase, domain: couchbase.com, country: US, importance: 1, aliases: [couchbase], hints: { ticker: BASE } }
683 + - { name: Neo4j, domain: neo4j.com, country: SE, importance: 1, aliases: [neo4j] }
684 + - { name: InfluxData, domain: influxdata.com, country: US, importance: 1, aliases: [influxdata, influxdb, telegraf], hints: { github_org: influxdata } }
685 + - { name: Cockroach Labs, domain: cockroachlabs.com, country: US, importance: 1, aliases: [cockroachdb, cockroach labs], hints: { github_repos: [cockroachdb/cockroach] } }
686 + - { name: Supabase, domain: supabase.com, country: SG, importance: 1, aliases: [supabase], hints: { github_org: supabase, status_url: "https://status.supabase.com" } }
687 + - { name: Homebrew, domain: brew.sh, country: INT, importance: 1, aliases: [homebrew, brew], hints: { github_org: Homebrew } }
688 + - { name: Chocolatey Software, domain: chocolatey.org, country: US, importance: 1, aliases: [chocolatey, choco] }
689 + - { name: Jamf, domain: jamf.com, country: US, importance: 2, aliases: [jamf, jamf pro, jamf threat labs, jamf protect], hints: { cik: "1721947", ticker: JAMF, status_url: "https://status.jamf.com", urls: [{ url: "https://www.jamf.com/blog/rss/", kind: blog }] } }
690 + - { name: Duo Security, domain: duo.com, country: US, importance: 1, aliases: [duo, duo security, cisco duo, duo labs, decipher], hints: { status_url: "https://status.duo.com" } }
691 + # ── Automotive & aerospace ──
692 + - { name: Tesla, domain: tesla.com, country: US, importance: 2, aliases: [tesla, tesla product security, tesla bug bounty], hints: { cik: "1318605", ticker: TSLA }, note: "tesla.com returns 403 (Akamai) to non-browser clients." }
693 + - { name: Ford Motor Company, domain: ford.com, country: US, importance: 1, aliases: [ford, ford motor, ford sync], hints: { cik: "37996", ticker: F } }
694 + - { name: General Motors, domain: gm.com, country: US, importance: 1, aliases: [gm, general motors, onstar], hints: { cik: "1467858", ticker: GM } }
695 + - { name: Stellantis, domain: stellantis.com, country: NL, importance: 1, aliases: [stellantis, fca, psa, jeep, chrysler, peugeot, uconnect], hints: { ticker: STLA } }
696 + - { name: Toyota Motor Corporation, domain: global.toyota, country: JP, importance: 1, aliases: [toyota, toyota motor, lexus, woven], hints: { ticker: TM } }
697 + - { name: BMW Group, domain: bmwgroup.com, country: DE, importance: 1, aliases: [bmw, bmw group, mini, rolls-royce motor cars] }
698 + - { name: Mercedes-Benz Group, domain: mercedes-benz.com, country: DE, importance: 1, aliases: [mercedes-benz, mercedes, daimler] }
699 + - { name: Volkswagen Group, domain: volkswagen-group.com, country: DE, importance: 1, aliases: [volkswagen, vw, volkswagen group, audi, porsche, cariad] }
700 + - { name: Rivian, domain: rivian.com, country: US, importance: 1, aliases: [rivian], hints: { cik: "1874178", ticker: RIVN } }
701 + - { name: Lucid Motors, domain: lucidmotors.com, country: US, importance: 1, aliases: [lucid, lucid motors], hints: { ticker: LCID } }
702 + - { name: Nissan Motor, domain: nissan-global.com, country: JP, importance: 1, aliases: [nissan, nissan motor, infiniti] }
703 + - { name: Hyundai Motor Company, domain: hyundai.com, country: KR, importance: 1, aliases: [hyundai, hyundai motor, bluelink] }
704 + - { name: Kia, domain: kia.com, country: KR, importance: 1, aliases: [kia, kia connect] }
705 + - { name: Volvo Cars, domain: volvocars.com, country: SE, importance: 1, aliases: [volvo cars, volvo], note: "volvocars.com returns 403 (Akamai) to non-browser clients." }
706 + - { name: Polestar, domain: polestar.com, country: SE, importance: 1, aliases: [polestar] }
707 + - { name: Boeing, domain: boeing.com, country: US, importance: 1, aliases: [boeing, jeppesen], hints: { cik: "12927", ticker: BA } }
708 + - { name: Airbus, domain: airbus.com, country: NL, importance: 1, aliases: [airbus, airbus cybersecurity, navblue], hints: { ticker: AIR } }
709 + # ── Medical devices & health IT ──
710 + - { name: Medtronic, domain: medtronic.com, country: IE, importance: 2, aliases: [medtronic, medtronic security bulletins, minimed, carelink], hints: { cik: "1613103", ticker: MDT }, note: "Security bulletins page (global.medtronic.com) is a JS shell (1.1 kB)." }
711 + - { name: Philips, domain: philips.com, country: NL, importance: 2, aliases: [philips, royal philips, philips product security, philips security advisories], hints: { ticker: PHIA, urls: [{ url: "https://www.philips.com/a-w/security/security-advisories.html", kind: security }] } }
712 + - { name: GE HealthCare, domain: gehealthcare.com, country: US, importance: 2, aliases: [ge healthcare, gehc, ge healthcare product security], hints: { cik: "1932393", ticker: GEHC, urls: [{ url: "https://www.gehealthcare.com/security", kind: security }] } }
713 + - { name: Siemens Healthineers, domain: siemens-healthineers.com, country: DE, importance: 2, aliases: [siemens healthineers, healthineers, shs cybersecurity], hints: { ticker: SHL, urls: [{ url: "https://www.siemens-healthineers.com/en-us/support-documentation/cybersecurity", kind: security }] } }
714 + - { name: Becton Dickinson, domain: bd.com, country: US, importance: 2, aliases: [bd, becton dickinson, bd product security, alaris, pyxis], hints: { cik: "10795", ticker: BDX }, note: "bd.com returns 403 (Akamai) to non-browser clients." }
715 + - { name: Baxter International, domain: baxter.com, country: US, importance: 2, aliases: [baxter, baxter product security, spectrum infusion, hillrom, welch allyn], hints: { cik: "10456", ticker: BAX, urls: [{ url: "https://www.baxter.com/product-security", kind: security }] } }
716 + - { name: Abbott, domain: abbott.com, country: US, importance: 1, aliases: [abbott, abbott laboratories, freestyle libre, abbott cybersecurity], hints: { cik: "1800", ticker: ABT } }
717 + - { name: Boston Scientific, domain: bostonscientific.com, country: US, importance: 1, aliases: [boston scientific, bsc product security], hints: { cik: "885725", ticker: BSX } }
718 + - { name: B. Braun, domain: bbraun.com, country: DE, importance: 1, aliases: [b. braun, b braun, bbraun, spacecom, infusomat] }
719 + - { name: Fresenius, domain: fresenius.com, country: DE, importance: 1, aliases: [fresenius, fresenius kabi, fresenius medical care], hints: { ticker: FRE } }
720 + - { name: Drager, domain: draeger.com, country: DE, importance: 1, aliases: [drager, draeger, dragerwerk], note: "draeger.com timed out from the cluster on 2026-09-13." }
721 + - { name: Mindray, domain: mindray.com, country: CN, importance: 1, aliases: [mindray] }
722 + - { name: Stryker, domain: stryker.com, country: US, importance: 1, aliases: [stryker, stryker product security, vocera], hints: { cik: "310764", ticker: SYK, urls: [{ url: "https://www.stryker.com/us/en/about/governance/cyber-security/product-security.html", kind: security }] } }
723 + - { name: Zimmer Biomet, domain: zimmerbiomet.com, country: US, importance: 1, aliases: [zimmer biomet, zimmer], hints: { cik: "1136869", ticker: ZBH } }
724 + - { name: Roche, domain: roche.com, country: CH, importance: 1, aliases: [roche, roche diagnostics, cobas], hints: { ticker: ROG } }
725 + - { name: Illumina, domain: illumina.com, country: US, importance: 1, aliases: [illumina, iseq, nextseq, universal copy service], hints: { cik: "1110803", ticker: ILMN } }
726 + - { name: Epic Systems, domain: epic.com, country: US, importance: 1, aliases: [epic, epic systems, mychart] }
727 + - { name: MEDITECH, domain: meditech.com, country: US, importance: 1, aliases: [meditech, meditech expanse] }
728 + - { name: athenahealth, domain: athenahealth.com, country: US, importance: 1, aliases: [athenahealth, athenaone], note: "athenahealth.com returns 403 (Akamai) to non-browser clients." }
729 + - { name: Veradigm, domain: veradigm.com, country: US, importance: 1, aliases: [veradigm, allscripts] }
730 + - key: security-research-and-threat-intel
731 + label: Security research teams, threat intelligence & security media
732 + description: Vendor research labs, independent researchers, threat-intelligence firms, internet-measurement services, non-profit trackers and the security press (media carry first_party false).
733 + provenance: "Curated from vendor research-blog directories, the Cyber Threat Alliance member list https://www.cyberthreatalliance.org/members/ and Feedspot 'Top cybersecurity blogs' (retrieved 2026-09-13); feeds verified with curl 2026-09-13"
734 + members:
735 + # ── Big-tech & vendor research teams with their own domain ──
736 + - { name: Google Project Zero, domain: googleprojectzero.blogspot.com, country: US, importance: 3, aliases: [project zero, p0, google project zero], hints: { github_org: googleprojectzero, urls: [{ url: "https://googleprojectzero.blogspot.com/feeds/posts/default", kind: blog }] }, note: "Official blog hosted on Blogspot (registrable domain blogspot.com)." }
737 + - { name: Google Threat Intelligence Group, domain: blog.google, country: US, importance: 3, aliases: [gtig, google threat intelligence group, google tag, threat analysis group], note: "blog.google/threat-analysis-group/ is HTML; its /rss/ path returns 404." }
738 + - { name: Mandiant, domain: mandiant.com, country: US, importance: 3, aliases: [mandiant, fireeye, mandiant intelligence, m-trends, google cloud mandiant], note: "mandiant.com redirects to cloud.google.com (JS-rendered blog); the old RSS path serves HTML." }
739 + - { name: Cisco Talos, domain: talosintelligence.com, country: US, importance: 3, aliases: [talos, cisco talos, talos intelligence, talos vulnerability reports], hints: { urls: [{ url: "https://blog.talosintelligence.com/rss/", kind: blog }] } }
740 + - { name: Secureworks, domain: secureworks.com, country: US, importance: 2, aliases: [secureworks, secureworks ctu, counter threat unit, taegis], note: "secureworks.com now redirects to sophos.com, which timed out from the cluster on 2026-09-13." }
741 + - { name: ESET WeLiveSecurity, domain: welivesecurity.com, country: SK, importance: 2, aliases: [welivesecurity, eset research, we live security], hints: { urls: [{ url: "https://www.welivesecurity.com/en/rss/feed/", kind: blog }] } }
742 + - { name: Kaspersky Securelist, domain: securelist.com, country: RU, importance: 3, aliases: [securelist, kaspersky great, global research and analysis team, kaspersky research], hints: { urls: [{ url: "https://securelist.com/feed/", kind: blog }] } }
743 + - { name: FortiGuard Labs, domain: fortiguard.com, country: US, importance: 2, aliases: [fortiguard, fortiguard labs, threat signal, outbreak alerts], hints: { urls: [{ url: "https://www.fortiguard.com/rss/threatsignal.xml", kind: blog }, { url: "https://filestore.fortinet.com/fortiguard/rss/outbreakalert.xml", kind: security, name: outbreak alerts }] } }
744 + # ── Threat-intelligence firms ──
745 + - { name: Recorded Future, domain: recordedfuture.com, country: US, importance: 2, aliases: [recorded future, insikt group, insikt], hints: { urls: [{ url: "https://www.recordedfuture.com/feed", kind: blog }] } }
746 + - { name: Flashpoint, domain: flashpoint.io, country: US, importance: 2, aliases: [flashpoint, flashpoint intel, risk based security], hints: { urls: [{ url: "https://flashpoint.io/feed/", kind: blog }] } }
747 + - { name: Intel 471, domain: intel471.com, country: US, importance: 2, aliases: [intel 471, intel471], hints: { urls: [{ url: "https://intel471.com/blog/feed", kind: blog }] } }
748 + - { name: Group-IB, domain: group-ib.com, country: SG, importance: 2, aliases: [group-ib, group ib], note: "Blog RSS paths return 404; the blog index is HTML." }
749 + - { name: Cyble, domain: cyble.com, country: US, importance: 1, aliases: [cyble, cyble research and intelligence labs, cril], hints: { urls: [{ url: "https://cyble.com/feed/", kind: blog }] } }
750 + - { name: SOCRadar, domain: socradar.io, country: US, importance: 1, aliases: [socradar], hints: { urls: [{ url: "https://socradar.io/feed/", kind: blog }] } }
751 + - { name: ZeroFox, domain: zerofox.com, country: US, importance: 1, aliases: [zerofox], hints: { urls: [{ url: "https://www.zerofox.com/feed/", kind: blog }] } }
752 + - { name: Silent Push, domain: silentpush.com, country: US, importance: 1, aliases: [silent push], hints: { urls: [{ url: "https://www.silentpush.com/feed/", kind: blog }] } }
753 + - { name: Team Cymru, domain: team-cymru.com, country: US, importance: 1, aliases: [team cymru, pure signal], hints: { urls: [{ url: "https://www.team-cymru.com/post/rss.xml", kind: blog }] } }
754 + - { name: EclecticIQ, domain: eclecticiq.com, country: NL, importance: 1, aliases: [eclecticiq], hints: { urls: [{ url: "https://blog.eclecticiq.com/rss.xml", kind: blog }] } }
755 + - { name: Resecurity, domain: resecurity.com, country: US, importance: 1, aliases: [resecurity], hints: { urls: [{ url: "https://www.resecurity.com/feed", kind: blog }] } }
756 + - { name: CloudSEK, domain: cloudsek.com, country: IN, importance: 1, aliases: [cloudsek], hints: { urls: [{ url: "https://www.cloudsek.com/blog/rss.xml", kind: blog }] } }
757 + - { name: Sygnia, domain: sygnia.co, country: IL, importance: 1, aliases: [sygnia], hints: { urls: [{ url: "https://www.sygnia.co/feed/", kind: blog }] } }
758 + - { name: Arctic Wolf, domain: arcticwolf.com, country: US, importance: 1, aliases: [arctic wolf, arctic wolf labs, cylance by arctic wolf], hints: { urls: [{ url: "https://arcticwolf.com/feed/", kind: blog }] } }
759 + - { name: AhnLab, domain: ahnlab.com, country: KR, importance: 1, aliases: [ahnlab, asec, ahnlab security intelligence center], hints: { urls: [{ url: "https://asec.ahnlab.com/en/feed/", kind: blog }] } }
760 + - { name: Positive Technologies, domain: ptsecurity.com, country: RU, importance: 1, aliases: [positive technologies, ptsecurity, pt expert security center], note: "ptsecurity.com did not answer from the cluster on 2026-09-13." }
761 + - { name: Sekoia.io, domain: sekoia.io, country: FR, importance: 1, aliases: [sekoia, sekoia.io, sekoia tdr], note: "blog.sekoia.io/feed/ serves HTML." }
762 + - { name: HarfangLab, domain: harfanglab.io, country: FR, importance: 1, aliases: [harfanglab], note: "/feed/ returns 403." }
763 + - { name: Deepwatch, domain: deepwatch.com, country: US, importance: 1, aliases: [deepwatch, deepwatch ati], hints: { urls: [{ url: "https://www.deepwatch.com/feed/", kind: blog }] } }
764 + - { name: Halcyon, domain: halcyon.ai, country: US, importance: 1, aliases: [halcyon, halcyon ransomware research], hints: { urls: [{ url: "https://www.halcyon.ai/blog/rss.xml", kind: blog }] } }
765 + - { name: Exodus Intelligence, domain: exodusintel.com, country: US, importance: 1, aliases: [exodus intelligence, exodus intel], hints: { urls: [{ url: "https://blog.exodusintel.com/feed/", kind: blog }] } }
766 + # ── Internet measurement, abuse tracking & non-profits ──
767 + - { name: The Shadowserver Foundation, domain: shadowserver.org, country: US, importance: 2, aliases: [shadowserver, shadowserver foundation], note: "News feeds return 404 with bot-challenge markers (also blocked on 2026-09-11)." }
768 + - { name: Spamhaus, domain: spamhaus.org, country: CH, importance: 2, aliases: [spamhaus, spamhaus project, sbl, dbl, drop list], note: "Resource-hub RSS returns 404; news page is HTML with bot-challenge markers." }
769 + - { name: abuse.ch, domain: abuse.ch, country: CH, importance: 2, aliases: [abuse.ch, urlhaus, threatfox, malwarebazaar, feodo tracker, sslbl], hints: { urls: [{ url: "https://feodotracker.abuse.ch/downloads/ipblocklist.json", kind: data, name: feodo tracker blocklist }] }, note: "URLhaus/ThreatFox/MalwareBazaar APIs require an Auth-Key since 2025." }
770 + - { name: GreyNoise Intelligence, domain: greynoise.io, country: US, importance: 2, aliases: [greynoise, greynoise labs], hints: { status_url: "https://status.greynoise.io", urls: [{ url: "https://www.greynoise.io/blog/rss.xml", kind: blog }] } }
771 + - { name: Censys, domain: censys.com, country: US, importance: 2, aliases: [censys, censys search, censys research], hints: { urls: [{ url: "https://censys.com/feed/", kind: blog }] } }
772 + - { name: Shodan, domain: shodan.io, country: US, importance: 2, aliases: [shodan, shodan monitor, internetdb], hints: { urls: [{ url: "https://blog.shodan.io/rss/", kind: blog }] } }
773 + - { name: BinaryEdge, domain: binaryedge.io, country: CH, importance: 1, aliases: [binaryedge, coalition binaryedge], note: "403 (Cloudflare) to non-browser clients." }
774 + - { name: Have I Been Pwned, domain: haveibeenpwned.com, country: AU, importance: 2, aliases: [hibp, have i been pwned, haveibeenpwned, pwned passwords], hints: { urls: [{ url: "https://haveibeenpwned.com/api/v3/latestbreach", kind: data, name: latest breach }, { url: "https://haveibeenpwned.com/api/v3/breaches", kind: data, name: breaches }] } }
775 + - { name: ransomware.live, domain: ransomware.live, country: FR, importance: 2, aliases: [ransomware.live, ransomware live, julien mousqueton], hints: { urls: [{ url: "https://ransomware.live/rss.xml", kind: security }, { url: "https://api.ransomware.live/v2/recentvictims", kind: data, name: recent victims }] } }
776 + - { name: The DFIR Report, domain: thedfirreport.com, country: US, importance: 1, aliases: [dfir report, the dfir report], hints: { urls: [{ url: "https://thedfirreport.com/feed/", kind: blog }] } }
777 + - { name: Citizen Lab, domain: citizenlab.ca, country: CA, importance: 2, aliases: [citizen lab, the citizen lab, munk school citizen lab], hints: { urls: [{ url: "https://citizenlab.ca/feed/", kind: blog }] } }
778 + - { name: Amnesty International Security Lab, domain: amnesty.org, country: GB, importance: 1, aliases: [amnesty security lab, amnesty tech, amnesty international], hints: { urls: [{ url: "https://securitylab.amnesty.org/feed/", kind: blog }] } }
779 + - { name: VirusTotal, domain: virustotal.com, country: ES, importance: 2, aliases: [virustotal, vt, virustotal intelligence], hints: { urls: [{ url: "https://blog.virustotal.com/feeds/posts/default", kind: blog }] } }
780 + - { name: ANY.RUN, domain: any.run, country: AE, importance: 1, aliases: [any.run, anyrun, any run sandbox], hints: { urls: [{ url: "https://any.run/cybersecurity-blog/feed/", kind: blog }] } }
781 + # ── Incident response, cloud & supply-chain research ──
782 + - { name: Huntress, domain: huntress.com, country: US, importance: 2, aliases: [huntress, huntress labs, huntress soc], hints: { urls: [{ url: "https://www.huntress.com/blog/rss.xml", kind: blog }] } }
783 + - { name: Volexity, domain: volexity.com, country: US, importance: 2, aliases: [volexity, volexity threat research], hints: { urls: [{ url: "https://www.volexity.com/feed/", kind: blog }] } }
784 + - { name: Cado Security, domain: cadosecurity.com, country: GB, importance: 1, aliases: [cado, cado security, cado labs, darktrace cado], note: "Blog RSS path serves HTML; Cado is now part of Darktrace." }
785 + - { name: Darktrace, domain: darktrace.com, country: GB, importance: 1, aliases: [darktrace, darktrace threat research], hints: { urls: [{ url: "https://www.darktrace.com/blog/rss.xml", kind: blog }] } }
786 + - { name: Wiz, domain: wiz.io, country: US, importance: 2, aliases: [wiz, wiz research, wiz threat research], hints: { status_url: "https://status.wiz.io", urls: [{ url: "https://www.wiz.io/feed/rss.xml", kind: blog }] } }
787 + - { name: Orca Security, domain: orca.security, country: US, importance: 1, aliases: [orca security, orca research pod], hints: { urls: [{ url: "https://orca.security/feed/", kind: blog }] } }
788 + - { name: Aqua Security, domain: aquasec.com, country: IL, importance: 2, aliases: [aqua security, aqua nautilus, team nautilus, trivy], hints: { github_org: aquasecurity, urls: [{ url: "https://blog.aquasec.com/rss.xml", kind: blog }] } }
789 + - { name: Sysdig, domain: sysdig.com, country: US, importance: 1, aliases: [sysdig, sysdig threat research team, sysdig trt, falco], hints: { github_org: sysdiglabs, urls: [{ url: "https://sysdig.com/feed/", kind: blog }] } }
790 + - { name: JFrog, domain: jfrog.com, country: US, importance: 2, aliases: [jfrog, jfrog security research, artifactory, xray], hints: { cik: "1800667", ticker: FROG, urls: [{ url: "https://jfrog.com/blog/feed/", kind: blog }] } }
791 + - { name: Socket, domain: socket.dev, country: US, importance: 1, aliases: [socket, socket security, socket threat research], note: "Blog RSS returns 403 (Cloudflare) / 404." }
792 + - { name: Phylum, domain: phylum.io, country: US, importance: 1, aliases: [phylum, phylum research, veracode phylum], note: "blog.phylum.io does not resolve; Phylum was acquired by Veracode." }
793 + - { name: ReversingLabs, domain: reversinglabs.com, country: US, importance: 1, aliases: [reversinglabs, reversing labs, spectra], hints: { urls: [{ url: "https://www.reversinglabs.com/blog/rss.xml", kind: blog }] } }
794 + - { name: Chainguard, domain: chainguard.dev, country: US, importance: 1, aliases: [chainguard, wolfi, chainguard images], hints: { github_org: chainguard-dev, urls: [{ url: "https://www.chainguard.dev/unchained/rss.xml", kind: blog }] } }
795 + - { name: Endor Labs, domain: endorlabs.com, country: US, importance: 1, aliases: [endor labs], hints: { urls: [{ url: "https://www.endorlabs.com/learn/rss.xml", kind: blog }] } }
796 + - { name: Legit Security, domain: legitsecurity.com, country: US, importance: 1, aliases: [legit security], hints: { urls: [{ url: "https://www.legitsecurity.com/blog/rss.xml", kind: blog }] } }
797 + - { name: Cycode, domain: cycode.com, country: US, importance: 1, aliases: [cycode], hints: { urls: [{ url: "https://cycode.com/feed/", kind: blog }] } }
798 + - { name: Mend.io, domain: mend.io, country: IL, importance: 1, aliases: [mend, mend.io, whitesource, renovate], hints: { urls: [{ url: "https://www.mend.io/blog/feed/", kind: blog }] } }
799 + - { name: Checkmarx, domain: checkmarx.com, country: US, importance: 1, aliases: [checkmarx, checkmarx research, checkmarx zero], hints: { urls: [{ url: "https://checkmarx.com/feed/", kind: blog }] } }
800 + - { name: Veracode, domain: veracode.com, country: US, importance: 1, aliases: [veracode, veracode research], note: "Blog RSS feed returns an empty channel (0 items)." }
801 + # ── Offensive research & consultancies ──
802 + - { name: Trail of Bits, domain: trailofbits.com, country: US, importance: 2, aliases: [trail of bits, tob, slither, echidna], hints: { github_org: trailofbits, urls: [{ url: "https://blog.trailofbits.com/feed/", kind: blog }] } }
803 + - { name: NCC Group, domain: nccgroup.com, country: GB, importance: 2, aliases: [ncc group, ncc group research, fox-it], hints: { ticker: NCC }, note: "research.nccgroup.com/feed/ serves HTML; the US research-blog feed returns 404." }
804 + - { name: Bishop Fox, domain: bishopfox.com, country: US, importance: 1, aliases: [bishop fox, bishopfox], hints: { github_org: BishopFox, urls: [{ url: "https://bishopfox.com/blog/rss.xml", kind: blog }] } }
805 + - { name: watchTowr, domain: watchtowr.com, country: SG, importance: 2, aliases: [watchtowr, watchtowr labs], hints: { github_org: watchtowrlabs, urls: [{ url: "https://labs.watchtowr.com/rss/", kind: blog }] } }
806 + - { name: Assetnote, domain: assetnote.io, country: AU, importance: 1, aliases: [assetnote, assetnote research, searchlight cyber assetnote], hints: { urls: [{ url: "https://www.assetnote.io/resources/research/rss.xml", kind: blog }] } }
807 + - { name: Horizon3.ai, domain: horizon3.ai, country: US, importance: 1, aliases: [horizon3, horizon3.ai, nodezero, horizon3 attack team], hints: { urls: [{ url: "https://www.horizon3.ai/feed/", kind: blog }] } }
808 + - { name: Praetorian, domain: praetorian.com, country: US, importance: 1, aliases: [praetorian], hints: { github_org: praetorian-inc, urls: [{ url: "https://www.praetorian.com/blog/feed/", kind: blog }] } }
809 + - { name: Synacktiv, domain: synacktiv.com, country: FR, importance: 1, aliases: [synacktiv], hints: { github_org: synacktiv, urls: [{ url: "https://www.synacktiv.com/en/feed/lastblog.xml", kind: blog }] } }
810 + - { name: Quarkslab, domain: quarkslab.com, country: FR, importance: 1, aliases: [quarkslab, qb], hints: { github_org: quarkslab, urls: [{ url: "https://blog.quarkslab.com/feeds/all.atom.xml", kind: blog }] } }
811 + - { name: PortSwigger, domain: portswigger.net, country: GB, importance: 2, aliases: [portswigger, burp suite, portswigger research, the daily swig], hints: { urls: [{ url: "https://portswigger.net/research/rss", kind: blog }] } }
812 + - { name: ProjectDiscovery, domain: projectdiscovery.io, country: US, importance: 1, aliases: [projectdiscovery, nuclei, nuclei templates, subfinder], hints: { github_org: projectdiscovery, urls: [{ url: "https://blog.projectdiscovery.io/rss/", kind: blog }] } }
813 + - { name: MDSec, domain: mdsec.co.uk, country: GB, importance: 1, aliases: [mdsec, mdsec activebreach], hints: { urls: [{ url: "https://www.mdsec.co.uk/feed/", kind: blog }] } }
814 + - { name: Pen Test Partners, domain: pentestpartners.com, country: GB, importance: 1, aliases: [pen test partners, pentest partners, ptp], hints: { urls: [{ url: "https://www.pentestpartners.com/feed/", kind: blog }] } }
815 + # ── OT / IoT / mobile research ──
816 + - { name: Dragos, domain: dragos.com, country: US, importance: 2, aliases: [dragos, dragos worldview, dragos ot], note: "/feed/ returns 404; the blog index is HTML." }
817 + - { name: Claroty, domain: claroty.com, country: US, importance: 2, aliases: [claroty, team82, claroty team82], hints: { urls: [{ url: "https://claroty.com/team82/disclosure-dashboard", kind: security, name: team82 disclosure dashboard }] } }
818 + - { name: Nozomi Networks, domain: nozominetworks.com, country: US, importance: 1, aliases: [nozomi networks, nozomi labs], note: "Blog RSS path returns 404; /labs is HTML." }
819 + - { name: Armis, domain: armis.com, country: US, importance: 1, aliases: [armis, armis labs], note: "403 (Cloudflare) to non-browser clients." }
820 + - { name: Forescout, domain: forescout.com, country: US, importance: 1, aliases: [forescout, vedere labs, forescout research], hints: { urls: [{ url: "https://www.forescout.com/feed/", kind: blog }] } }
821 + - { name: Lookout, domain: lookout.com, country: US, importance: 1, aliases: [lookout, lookout threat lab], hints: { urls: [{ url: "https://www.lookout.com/blog/rss.xml", kind: blog }] } }
822 + - { name: Zimperium, domain: zimperium.com, country: US, importance: 1, aliases: [zimperium, zlabs], note: "Blog RSS paths return 404." }
823 + - { name: NETSCOUT, domain: netscout.com, country: US, importance: 1, aliases: [netscout, asert, arbor networks, netscout asert], hints: { ticker: NTCT, urls: [{ url: "https://www.netscout.com/blog/asert/rss.xml", kind: blog }] } }
824 + - { name: Corero Network Security, domain: corero.com, country: GB, importance: 1, aliases: [corero, corero ddos], note: "Blog RSS feed returns an empty channel (0 items)." }
825 + # ── Independent voices & security press (first_party false) ──
826 + - { name: Krebs on Security, domain: krebsonsecurity.com, country: US, first_party: false, importance: 2, aliases: [krebs on security, krebsonsecurity, brian krebs], hints: { urls: [{ url: "https://krebsonsecurity.com/feed/", kind: news }] } }
827 + - { name: Schneier on Security, domain: schneier.com, country: US, first_party: false, importance: 1, aliases: [schneier on security, bruce schneier], hints: { urls: [{ url: "https://www.schneier.com/feed/atom/", kind: blog }] } }
828 + - { name: Troy Hunt, domain: troyhunt.com, country: AU, first_party: false, importance: 1, aliases: [troy hunt, troyhunt], hints: { urls: [{ url: "https://www.troyhunt.com/rss/", kind: blog }] } }
829 + - { name: Graham Cluley, domain: grahamcluley.com, country: GB, first_party: false, importance: 1, aliases: [graham cluley, smashing security], hints: { urls: [{ url: "https://grahamcluley.com/feed/", kind: blog }] } }
830 + - { name: BleepingComputer, domain: bleepingcomputer.com, country: US, first_party: false, importance: 2, aliases: [bleepingcomputer, bleeping computer], hints: { urls: [{ url: "https://www.bleepingcomputer.com/feed/", kind: news }] } }
831 + - { name: The Record, domain: therecord.media, country: US, first_party: false, importance: 2, aliases: [the record, the record by recorded future, click here podcast], hints: { urls: [{ url: "https://therecord.media/feed", kind: news }] } }
832 + - { name: SecurityWeek, domain: securityweek.com, country: US, first_party: false, importance: 2, aliases: [securityweek, security week], hints: { urls: [{ url: "https://www.securityweek.com/feed/", kind: news }] } }
833 + - { name: Dark Reading, domain: darkreading.com, country: US, first_party: false, importance: 2, aliases: [dark reading, darkreading], hints: { urls: [{ url: "https://www.darkreading.com/rss.xml", kind: news }] } }
834 + - { name: The Hacker News, domain: thehackernews.com, country: IN, first_party: false, importance: 2, aliases: [the hacker news, thn, thehackernews], hints: { urls: [{ url: "https://feeds.feedburner.com/TheHackersNews", kind: news }] } }
835 + - { name: Risky Business, domain: risky.biz, country: AU, first_party: false, importance: 2, aliases: [risky business, risky biz, risky bulletin, patrick gray], hints: { urls: [{ url: "https://risky.biz/feeds/risky-business-news/", kind: news }] } }
836 + - { name: CyberScoop, domain: cyberscoop.com, country: US, first_party: false, importance: 2, aliases: [cyberscoop, scoop news group], hints: { urls: [{ url: "https://cyberscoop.com/feed/", kind: news }] } }
837 + - { name: Infosecurity Magazine, domain: infosecurity-magazine.com, country: GB, first_party: false, importance: 1, aliases: [infosecurity magazine, infosecurity-magazine], hints: { urls: [{ url: "https://www.infosecurity-magazine.com/rss/news/", kind: news }] } }
838 + - { name: Help Net Security, domain: helpnetsecurity.com, country: HR, first_party: false, importance: 1, aliases: [help net security, helpnetsecurity], hints: { urls: [{ url: "https://www.helpnetsecurity.com/feed/", kind: news }] } }
839 + - { name: Security Affairs, domain: securityaffairs.com, country: IT, first_party: false, importance: 1, aliases: [security affairs, pierluigi paganini], hints: { urls: [{ url: "https://securityaffairs.com/feed", kind: news }] } }
840 + - { name: CSO Online, domain: csoonline.com, country: US, first_party: false, importance: 1, aliases: [cso online, csoonline, cso], hints: { urls: [{ url: "https://www.csoonline.com/feed/", kind: news }] } }
841 + - { name: Cybersecurity Dive, domain: cybersecuritydive.com, country: US, first_party: false, importance: 1, aliases: [cybersecurity dive, industry dive], hints: { urls: [{ url: "https://www.cybersecuritydive.com/feeds/news/", kind: news }] } }
842 + - { name: DataBreaches.net, domain: databreaches.net, country: US, first_party: false, importance: 1, aliases: [databreaches.net, databreaches, dissent doe], hints: { urls: [{ url: "https://databreaches.net/feed/", kind: news }] } }
843 + - { name: heise Security, domain: heise.de, country: DE, language: de, first_party: false, importance: 1, aliases: [heise security, heise online, heisec], hints: { urls: [{ url: "https://www.heise.de/security/feed.xml", kind: news }] } }
844 + - { name: The Register, domain: theregister.com, country: GB, first_party: false, importance: 1, aliases: [the register, el reg], hints: { urls: [{ url: "https://www.theregister.com/security/headlines.atom", kind: news }] } }
845 + - { name: Ars Technica, domain: arstechnica.com, country: US, first_party: false, importance: 1, aliases: [ars technica, ars], hints: { urls: [{ url: "https://arstechnica.com/security/feed/", kind: news }] } }
846 + - { name: WIRED, domain: wired.com, country: US, first_party: false, importance: 1, aliases: [wired, wired security], hints: { urls: [{ url: "https://www.wired.com/feed/category/security/latest/rss", kind: news }] } }
847 + - key: bug-bounty-and-disclosure-platforms
848 + label: Bug-bounty & coordinated-disclosure platforms
849 + description: Crowdsourced security and vulnerability-disclosure platforms, hacking contests and disclosure standards.
850 + provenance: "Wikipedia 'Bug bounty program' + platform official sites (retrieved 2026-09-13); URLs verified with curl 2026-09-13"
851 + members:
852 + - { name: HackerOne, domain: hackerone.com, country: US, importance: 3, aliases: [hackerone, h1, hacktivity, hackerone hacktivity], note: "hackerone.com/hacktivity is a JS shell (1.8 kB); the GraphQL API requires a token. status.hackerone.com answered on the Statuspage API but with an empty HTTP status code from the cluster." }
853 + - { name: Bugcrowd, domain: bugcrowd.com, country: US, importance: 2, aliases: [bugcrowd, crowdcontrol, bugcrowd vrt], hints: { github_org: bugcrowd } }
854 + - { name: Intigriti, domain: intigriti.com, country: BE, importance: 2, aliases: [intigriti], note: "Researcher blog RSS path returns 404; already a registry source." }
855 + - { name: YesWeHack, domain: yeswehack.com, country: FR, importance: 2, aliases: [yeswehack, yes we hack, dojo yeswehack], note: "blog.yeswehack.com/feed/ serves HTML." }
856 + - { name: Synack, domain: synack.com, country: US, importance: 1, aliases: [synack, synack red team, srt] }
857 + - { name: Immunefi, domain: immunefi.com, country: SG, importance: 2, aliases: [immunefi, web3 bug bounty] }
858 + - { name: Zerocopter, domain: zerocopter.com, country: NL, importance: 1, aliases: [zerocopter] }
859 + - { name: Open Bug Bounty, domain: openbugbounty.org, country: INT, importance: 1, aliases: [open bug bounty, openbugbounty], note: "403 (Cloudflare) to non-browser clients, including the RSS feed." }
860 + - { name: huntr, domain: huntr.com, country: US, importance: 1, aliases: [huntr, huntr.dev, protect ai huntr] }
861 + - { name: disclose.io, domain: disclose.io, country: US, importance: 1, aliases: [disclose.io, disclose, safe harbor project], hints: { github_org: disclose } }
862 + - { name: Pwn2Own, domain: pwn2own.com, country: US, importance: 2, aliases: [pwn2own, pwn2own vancouver, pwn2own automotive, pwn2own ireland] }
863 + - { name: HackenProof, domain: hackenproof.com, country: EE, importance: 1, aliases: [hackenproof, hacken] }
864 + - { name: Code4rena, domain: code4rena.com, country: US, importance: 1, aliases: [code4rena, c4, code arena] }
865 + - { name: Cobalt, domain: cobalt.io, country: US, importance: 1, aliases: [cobalt, cobalt.io, pentest as a service] }
866