CyberPulse

CVE fact check, deterministic. Answers "is CVE-XXXX-NNNN real", "is it exploited in the wild", "what version fixes it", "how severe is it". Joins the NVD record (CVSS score, vector, dates), the CISA KEV catalog (actively-exploited flag, remediation due date, ransomware use), and OSV (affected packages + fixed versions per ecosystem). No LLM. Distinguishes "not a known CVE" from "registry unreachable" — never a false not-found.

External attack-surface assessment (EASM) for any company and domain — internet-exposed assets, tech-stack fingerprinting, email-security posture, supply-chain and identity exposure, and a prioritized remediation roadmap, for security and red-team-context agents. Authorized defensive use only.

Data-breach lookup and credential-exposure check for any domain. Surfaces known data breaches, credential dumps, dark-web signals, and regulatory notification duties (GDPR, CCPA, PDPA, LGPD, POPIA), for security and compliance agents. Authorized security use only.

CISA Known Exploited Vulnerabilities (KEV) lookup and patch prioritization. Filter the KEV catalog by vendor, product, or time range; returns ransomware-linked flags, CISA federal due dates, CVSS, and patch priority. Updated daily, for vuln-management and security agents.

Compliance gap analysis for SOC2, ISO27001, GDPR, HIPAA, PCI-DSS, NIST CSF, NIS2, PDPA, POPIA, LGPD, CCPA, FISMA, and CMMC — control gaps, common audit failures, enforcement trends, cost to comply, and fastest path to certification, for compliance and CISO agents.

CVE lookup and severity brief for any CVE ID — CVSS score, exploit / CISA KEV / active-exploitation / PoC status, affected products, patch urgency, and remediation steps. Authoritative NVD + CISA data plus threat-intel context, for security and vuln-management agents.

Dark-web monitoring for any brand or domain — paste-site mentions, credential-dump signals, forum chatter, ransomware leak-site activity, brand impersonation, and initial-access-broker listings, for threat-intel and brand-protection agents. Ethical OSINT only.

OSINT lookup for any domain or IP — open ports and known CVEs (Shodan InternetDB), DNS and email posture (SPF/DMARC/DKIM), SSL grade, threat-feed status, and geolocation, for security and defensive agents. Authorized defensive use only.

Ransomware-group threat brief and tracking — victim patterns, TTPs, ransom economics, and defensive playbooks across LockBit, ALPHV, Cl0p, RansomHub, BlackBasta, Akira, and 50+ active groups, plus CISA KEV ransomware-linked CVEs. Global, for threat-intel and incident-response agents.

Threat-intelligence brief for any industry and region — active threat-actor campaigns, TTPs, nation-state APTs, eCrime/ransomware operators, and MITRE ATT&CK mapping, with recent CISA KEV and GDELT-scored news coverage. Worldwide sector-specific context, for threat-intel and SOC agents.

Vulnerability scan / known-CVE lookup for any software, product, or package version. Returns NVD CVEs, CISA KEV matches, OSV open-source/dependency vuln results, version risk assessment, and prioritized patch guidance, for vuln-management and dependency-security agents.