CVE Security
Actively maintained
≈ 3visits/mo
Little sign of use · estimate, read Oct 13, 2026
- For
- security teams deciding which vulnerabilities to prioritize and patch
- Activity
- Actively maintainedsite updated 8 days ago
- Company
- InfoBakery LLC · Domain since 2026site footer · domain registered
- Runs as
- API
- Used for
- check whether a CVE is detectable with nuclei or Snort
- find CVEs affecting your vendors and products
- track whether a vulnerability is being exploited in the wild
- Has an MCP server (1 in the registry)public registry →
- Publishes llms.txt, a file written for AI assistantscve-security.com ↗
- Domain since2026domain registered
- HeadquartersConnecticutper their About page
- Run byInfoBakery LLCsite footer ↗
- Security contactsecurity.txt
These are CVE Security's own statements, read from its pages. We did not audit them. A line that is missing was not found on the pages we read; it does not mean the practice is absent.
- MCP servercom.cve-security/cve-intelligenceverified in the MCP registry
- Stateanswers, 9 toolschecked 2026-10-20
- Address to connectcve-security.com/api/mcp
- OpenAPI spec16 pathsthe spec ↗
- API docscve-security.com/apithe vendor's page ↗
This card as JSON, for your agent →
Each line is something a program found when it went looking: the registry entry, the server's own answer, a spec that parses. A missing line means we did not find it, not that it does not exist.
Figure and bar: visits/mo, estimate · year: online since
- #1
Autonomous pentesting, continuous monitoringMCP · sign-in
Scans web apps, networks and cloud for vulnerabilities, then exploits them where supported to prove risk, with reports and an autonomous pentest agent.
107kActiveFrom $96/mo2017 - #2
Snyk
Scans source code, open source dependencies, container images and infrastructure-as-code for vulnerabilities, and suggests fixes in the IDE, CLI and pull requests.
63.1kActiveFrom $25/mo2015 - #3
Fluid Attacks
Scans applications for vulnerabilities with automated tools and human penetration testing, ranks findings by exploitability and tracks their remediation.
4.3kActiveFree plan - #4
OpenCTI Agent
Unifies threat intelligence, validates exposures, and orchestrates security responses across your security stack.
2kActive2022 - #5
StrixMCP · sign-in
Runs automated penetration tests across code, APIs, web apps, and infrastructure, validating findings and generating merge-ready fixes.
1.4kActiveFrom $29/user/mo - #6
XposedOrNotMCP · open
Searches indexed data breach records for an email address or domain and reports which breaches, leaked fields and a risk score appear.
1.3kActiveFrom $9/mo2017
Not it? Say what you need
betaThree tools from the Atlas for the job you describe, each with what fits and what does not.
No notes yet. What do you use CVE Security for?
Sign in to leave a noteWhat is CVE Security?
Tracks CVE exploitation evidence, detection signals and vendor fixes, flagging which vulnerabilities are exploited and detectable. It is listed in the Atlas under Security and made by InfoBakery LLC.
Who is CVE Security for?
security teams deciding which vulnerabilities to prioritize and patch
Do people use CVE Security?
Little sign of use: ≈ 3 visits/mo · estimate, 2026-10.
Is CVE Security still maintained?
Actively maintained: site updated 8 days ago.
Who owns CVE Security?
CVE Security is run by InfoBakery LLC, per its site footer (2026-10-20).
What are alternatives to CVE Security?
In Security, by use: Autonomous pentesting, continuous monitoring, Snyk, Fluid Attacks, OpenCTI Agent, Strix, XposedOrNot.
How we read a tool
No votes, no reviews, no vendor claims. Every week a crawler reads each tool's own site and a few public registries, and the words on the card are bands over what it read.
- Use: visits to the site (estimated), installs from npm and PyPI, presence in Chrome's usage report.
- Activity: the newest release on GitHub, npm or PyPI; the newest dated page on the site; open roles on a public jobs board.
- Price: the vendor's own pricing page, read with the date. A figure is printed only when it is on that page.
- The line and the use cases are written by us from the homepage, one tool at a time, and refused when they repeat the vendor's marketing.
How AI assistants read each site — the reading vendors ask us about — is on each tool's own visibility page.
How we read every tool → · By INITE Atlas Desk
Cookies
Before we count this visit
Analytics and ad measurement tell us which pages and which of our ads do their job: Google Analytics and Google Ads, the Meta pixel, Yandex Metrica, and one first-party id of our own. Nothing is stored until you answer, and declining changes nothing about the site.