Vendor & Product Security
Vendor & Product Security
The challenge: Every vendor publishes security advisories differently — Siemens uses CSAF, Cisco uses CVRF, Microsoft uses their own schema, and most vendors publish free-text pages. Tracking them all means monitoring dozens of feeds with no unified format.
What you get: Consolidated vendor intelligence with structured affected-product data, linked to CVE records and patch availability. Query once, get the vendor's advisory and the vulnerability context together.
| Source | Prefix | Description | |
|---|---|---|---|
| ABB CSAF | ABB industrial automation PSIRT. CSAF-formatted advisories for SCADA, DCS, and industrial control systems. | ||
| SICK PSIRT Advisory | SICK AG Product Security Incident Response Team. Sensor and industrial device security advisories. | ||
| Nozomi Networks PSIRT | Nozomi Networks product security advisories for OT/IoT monitoring infrastructure. | ||
| Cisco CVRF | Cisco Systems security advisories in CVRF format. Network infrastructure, collaboration, and security products. | ||
| Siemens CSAF | Siemens ProductCERT. CSAF-formatted advisories for industrial automation and healthcare technology. | ||
| ISC Advisory | Internet Systems Consortium. Security advisories for BIND, ISC DHCP, and Kea DHCP. | ||
| Open-Xchange CSAF | Open-Xchange security advisories for OX App Suite and related collaboration products. | ||
| Red Hat Security Errata | RHSA- | Red Hat security errata and advisories. RHEL, OpenShift, Ansible, and Red Hat product ecosystem. | |
| Tailscale Security Bulletin | Tailscale security bulletins for VPN and networking product vulnerabilities. | ||
| Binarly Advisory | BRLY- | Binarly firmware security advisories. UEFI, BIOS, and firmware vulnerability research. | |
| Schneider Electric | SEVD- | Schneider Electric Vulnerability Database. Industrial automation and energy management advisories. | |
| SAP NetWeaver | SAP security advisories and patch notes for NetWeaver and enterprise application stack. | ||
| Microsoft MSRC | MSRC- | Microsoft Security Response Center. Windows, Azure, Office, and Microsoft product security updates. | |
| Tenable Security Advisories | Tenable product security advisories for Nessus, Tenable.io, and related scanning infrastructure. | ||
| D-Link Firmware | D-Link firmware security advisories for routers, switches, and network devices. | ||
| SUSE CSAF | SUSE product security advisories in CSAF format. SLES, openSUSE, and Rancher ecosystem. | ||
| Defiant Wordfence | WORDFENCE- | Wordfence WordPress vulnerability intelligence. Plugin, theme, and core vulnerability advisories. | |
| Chromium Security | CHROMIUM- | Chromium project security advisories. Chrome, Edge, and Chromium-based browser vulnerabilities. | |
| Mozilla Security | MOZILLA- | Mozilla Foundation security advisories. Firefox, Thunderbird, and NSS library vulnerabilities. | |
| Patchstack | PATCHSTACK- | Patchstack WordPress security intelligence. Comprehensive WordPress ecosystem vulnerability database. | |
| Source Incite | SRC- | Source Incite security research and vulnerability disclosures. | |
| WLB | WLB security advisory feed. Cross-vendor vulnerability intelligence aggregation. | ||
| OpenBSD | OpenBSD security advisories and errata patches for the OpenBSD operating system. | ||
| Wiz Cloud Advisories | Wiz cloud security advisories database. Cloud service provider vulnerability intelligence. |
See the Licensing Appendix for redistribution terms applicable to each source.