Changelog

Release 2.4: AI assistance in the CSAF editor

Get suggestions for descriptions, remediations and product mappings – suggestions only, you stay in control.

Jonas Weber

18 June 2026· 3 min read

The CSAF editor gets an optional AI assistant via an OpenAI-compatible endpoint of your choice.

The assistant can be switched off per company.

Keep reading

Actively exploited vulnerabilities must now be reported within 24 hours. We explain the deadlines and how to meet them reliably.

Verify your domain, create keys, publish your first advisory: how to become a trusted provider – in one afternoon.

SBOMs show what's inside. VEX tells you whether it affects you. CSAF carries both. An overview.