Skip to content

Vendor & Product Security

Vendor & Product Security

The challenge: Every vendor publishes security advisories differently — Siemens uses CSAF, Cisco uses CVRF, Microsoft uses their own schema, and most vendors publish free-text pages. Tracking them all means monitoring dozens of feeds with no unified format.
What you get: Consolidated vendor intelligence with structured affected-product data, linked to CVE records and patch availability. Query once, get the vendor's advisory and the vulnerability context together.
SourcePrefixDescription
ABB CSAFABB industrial automation PSIRT. CSAF-formatted advisories for SCADA, DCS, and industrial control systems.
SICK PSIRT AdvisorySICK AG Product Security Incident Response Team. Sensor and industrial device security advisories.
Nozomi Networks PSIRTNozomi Networks product security advisories for OT/IoT monitoring infrastructure.
Cisco CVRFCisco Systems security advisories in CVRF format. Network infrastructure, collaboration, and security products.
Siemens CSAFSiemens ProductCERT. CSAF-formatted advisories for industrial automation and healthcare technology.
ISC AdvisoryInternet Systems Consortium. Security advisories for BIND, ISC DHCP, and Kea DHCP.
Open-Xchange CSAFOpen-Xchange security advisories for OX App Suite and related collaboration products.
Red Hat Security ErrataRHSA-Red Hat security errata and advisories. RHEL, OpenShift, Ansible, and Red Hat product ecosystem.
Tailscale Security BulletinTailscale security bulletins for VPN and networking product vulnerabilities.
Binarly AdvisoryBRLY-Binarly firmware security advisories. UEFI, BIOS, and firmware vulnerability research.
Schneider ElectricSEVD-Schneider Electric Vulnerability Database. Industrial automation and energy management advisories.
SAP NetWeaverSAP security advisories and patch notes for NetWeaver and enterprise application stack.
Microsoft MSRCMSRC-Microsoft Security Response Center. Windows, Azure, Office, and Microsoft product security updates.
Tenable Security AdvisoriesTenable product security advisories for Nessus, Tenable.io, and related scanning infrastructure.
D-Link FirmwareD-Link firmware security advisories for routers, switches, and network devices.
SUSE CSAFSUSE product security advisories in CSAF format. SLES, openSUSE, and Rancher ecosystem.
Defiant WordfenceWORDFENCE-Wordfence WordPress vulnerability intelligence. Plugin, theme, and core vulnerability advisories.
Chromium SecurityCHROMIUM-Chromium project security advisories. Chrome, Edge, and Chromium-based browser vulnerabilities.
Mozilla SecurityMOZILLA-Mozilla Foundation security advisories. Firefox, Thunderbird, and NSS library vulnerabilities.
PatchstackPATCHSTACK-Patchstack WordPress security intelligence. Comprehensive WordPress ecosystem vulnerability database.
Source InciteSRC-Source Incite security research and vulnerability disclosures.
WLBWLB security advisory feed. Cross-vendor vulnerability intelligence aggregation.
OpenBSDOpenBSD security advisories and errata patches for the OpenBSD operating system.
Wiz Cloud AdvisoriesWiz cloud security advisories database. Cloud service provider vulnerability intelligence.

See the Licensing Appendix for redistribution terms applicable to each source.