Features
One platform for the entire lifecycle
Create, review, distribute, notify and report – Secvisory covers every step a manufacturer has to take under the CRA.
Create
The CSAF editor you always wanted
Three views – guided, all fields, JSON – and validation that thinks along. Errors appear right at the field, not in a log.
All mandatory and optional CSAF 2.0 tests
AI suggestions via your own endpoint
JSON and ZIP upload
app.secvisory.com/advisories/SVY-2026-0142/edit
GuidedAll fieldsJSON
Title
Authentication bypass in web interface
CVE
CVE-2026-31337
CVSS v3.1
9.8
Product
Controller X200 · Firmware < 4.2.1
Remediation
Update to firmware 4.2.1 or later
Apply AI suggestion?
Validation0/5
- 6.1.1 Missing definition of product ID
- 6.1.7 Multiple scores with same version
- 6.1.13 PURL syntax
- 6.1.27 Profile tests (security advisory)
- 6.3.x Informative tests
Submit for review
Distribute
Trusted provider at the push of a button
Every approval creates canonical files, hashes, signatures and updated feeds. Your customers and aggregators find everything on your domain.
provider-metadata.json & ROLIE
OpenPGP with rotation & Vault Transit
index.txt & changes.csv
example-corp.csaf.secvisory.com/.well-known/csaf/
/.well-known/csaf/
provider-metadata.json
white/
2026/
svy-2026-0142.json
svy-2026-0142.json.sha512
svy-2026-0142.json.asc
index.txt
changes.csv
feed-tlp-white.json
Canonicalised
SHA-512 created
OpenPGP signed
ROLIE feed updated
CDN invalidated
0x7A3F…C91E
Ed25519 · rotated 2026-09
Present
A security portal in your brand
Vendor page with logo and colors, CPE and PURL search, product pages, PDF export, CVD policy and a hall of fame for researchers.
Branding per vendor
PDF export of every advisory
Hall of fame
security.example-corp.com
EC
Example Corp · Security Center
CSAF trusted provider · 128 advisories
pkg:generic/x200@4.2.0
Authentication bypass in web interface
SVY-2026-0142·Controller X200
Buffer overflow in Modbus parser
SVY-2026-0139·Gateway G5
Disclosure of configuration data
SVY-2026-0131·HMI Panel 7
Weak TLS configuration
SVY-2026-0127·Cloud Connector
All features
In detail
Sorted by area.
CSAF editor with live validation
Guided form, all fields or raw JSON – every input is checked against all CSAF 2.0 tests instantly. Optional AI suggestions speed up descriptions and remediations.
JSON & ZIP upload
Upload existing advisories and validate them in seconds. Errors are shown line by line – not after publishing.
TLP enforcement
Only TLP:CLEAR becomes public. TLP:AMBER and TLP:RED stay in the protected area – enforced technically, not by convention.
See it in action.
In 30 minutes we'll show you the path from finding to signed feed.