Problem view
Vulnerability Management
Tracking which known vulnerabilities affect your software, sharing machine-readable exploitability status, and cutting through false positives.
2 OpenSSF projects and publications help with Vulnerabilities, each with a one-sentence note on how. Prefer another way in? Browse by role →
GUAC
Joins vulnerability data to the dependency graph to reveal the blast radius of a newly disclosed flaw.
Full breakdown
OSV Schema & OpenVEX
Standardises how vulnerabilities and their exploitability status are described so tools can exchange them and suppress false positives.
Full breakdown