Cisa Kev Python Packages

package-doctor

Scan Python dependencies for exploited CVEs and abandoned packages that handle untrusted input, ranked by CISA KEV and EPSS. Runs in CI and as a Claude Code hook.

cve-riskengine-rf

Leakage-free evaluation of a Recursive Feature Elimination Random Forest for CVE exploitability prioritization: code, data, results and a calibrated scoring package.

cve-prioritizer

Streamline vulnerability patching with CVSS, EPSS, and CISA's Known Exploited Vulnerabilities. Prioritize actions based on real-time threat information, gain a competitive advantage, and stay informed about the latest trends.

vamp-cve-oracle

VampSecure Labs: CVE intelligence engine — NVD API v2 + OTX (AsyncIO)

patch-tuesday-mcp

MCP server for Microsoft Patch Tuesday - query MSRC security updates, CVEs, and KBs with EPSS + CISA KEV enrichment. No API keys. Works with Claude, Copilot, Cursor, and any MCP client.

opencra

Sovereign SBOM scanner & Cyber Resilience Act (CRA) compliance toolkit. Generate CycloneDX/SPDX, detect supply chain CVEs/KEVs, and automate 24-hour incident reporting workflows for EU software vendors.

truesignal-cli

OSINT/security intelligence CLI: CISA-KEV, Cloudflare Radar, Reddit, Telegram, GDELT feeds, no fabricated data, ever

vuln-prioritizer-workbench

Local-first workbench for explainable CVE prioritization from scanner, SBOM, VEX, and asset evidence.

patrowl-intel-mcp

A thin, read-only MCP server that brings PatrowlIntel CVE, EPSS, CISA KEV, exploit, and trending-attack data into Claude and any MCP client.

patchrank

Rank Microsoft Patch Tuesday by evidence of real-world exploitation, not vendor severity. Joins MSRC + FIRST.org EPSS + CISA KEV. Zero dependencies.