CSAF, CRA, SBOM and VEX – explained clearly, plus news from product development.
Actively exploited vulnerabilities must now be reported within 24 hours. We explain the deadlines and how to meet them reliably.
Verify your domain, create keys, publish your first advisory: how to become a trusted provider – in one afternoon.
SBOMs show what's inside. VEX tells you whether it affects you. CSAF carries both. An overview.
Get suggestions for descriptions, remediations and product mappings – suggestions only, you stay in control.
New articles and releases once a month by email.
