Skip to content
Overflo logo

Overflo

Tracks published CVEs from NVD, OSV and GitHub advisories, enriched with CISA KEV status and EPSS exploit likelihood scores.

Actively maintained

Developer toolsSecurityMonitoringSearch
overflo.ws ↗
Open overflo.wsAlternativesSet it up for my teamIs Overflo yours? Claim the card →
At a glanceswept Oct 27, 2026

not read yet

Use

For
Security teams deciding which newly published CVEs to patch first
Activity
Actively maintainedsite updated yesterday
Used for
  • check whether a CVE is actively exploited
  • rank vulnerabilities by EPSS exploitation likelihood
  • identify which product versions a CVE affects
Worth knowingcomputed from what we read · each with its source
  • Has an MCP server (1 in the registry)public registry →
How a program reaches itfound, not claimed · read Oct 27, 2026
  • MCP serverws.overflo/overflowsverified in the MCP registry
  • Stateanswers, 7 toolschecked 2026-10-27
  • Address to connectmcp.overflo.ws/mcp

MCP server details →

This card as JSON, for your agent →

Each line is something a program found when it went looking: the registry entry, the server's own answer, a spec that parses. A missing line means we did not find it, not that it does not exist.

Alternatives in Developer toolsby use, among tools still maintained

Figure and bar: visits/mo, estimate · year: online since

Compare Overflo with

Pick up to two.

All 10 alternatives to Overflo →

All Developer tools tools →

Not it? Say what you need

beta

Three tools from the Atlas for the job you describe, each with what fits and what does not.

From people who use itnot part of the reading

No notes yet. What do you use Overflo for?

Sign in to leave a note
Questions this page answers
  • What is Overflo?

    Tracks published CVEs from NVD, OSV and GitHub advisories, enriched with CISA KEV status and EPSS exploit likelihood scores. It is listed in the Atlas under Developer tools.

  • Who is Overflo for?

    Security teams deciding which newly published CVEs to patch first

  • Do people use Overflo?

    Little sign of use.

  • Is Overflo still maintained?

    Actively maintained: site updated yesterday.

  • What are alternatives to Overflo?

    In Developer tools, by use: Kodem, Vulnrable, DistributionOS, attestd, MergeGuard, Atatus.

How we read a tool

No votes, no reviews, no vendor claims. Every week a crawler reads each tool's own site and a few public registries, and the words on the card are bands over what it read.

  • Use: visits to the site (estimated), installs from npm and PyPI, presence in Chrome's usage report.
  • Activity: the newest release on GitHub, npm or PyPI; the newest dated page on the site; open roles on a public jobs board.
  • Price: the vendor's own pricing page, read with the date. A figure is printed only when it is on that page.
  • The line and the use cases are written by us from the homepage, one tool at a time, and refused when they repeat the vendor's marketing.

How AI assistants read each site — the reading vendors ask us about — is on each tool's own visibility page.

How we read every tool → · By INITE Atlas Desk