Vulnetix by Vulnetix

Vulnerability intelligence for every CVE, GHSA and advisory ID on the page; severity, EPSS, KEV, exploits and fixes, on hover.


Vulnetix turns any web page that mentions a vulnerability into a triage
surface. Every identifier in the page text; CVE, GHSA, PYSEC, RUSTSEC, GO,
OSV, EUVD, vendor advisories and 20 more formats, is detected and underlined.
Hover one to see what the Vulnetix Vulnerability Database (VDB) knows about it,
without leaving the page.

Hover card
- CVSS score and severity, or EPSS when no CVSS exists
- CISA / VulnCheck KEV status, ransomware use, exploitation maturity
- Affected vendor, product and version
- Publication age
- Malicious-package flag for OSS malware entries
- One click through to the Resolve console for the full record

Sidebar
- Every identifier on the active tab, in document order
- Sort by severity, KEV first, or publication date
- Filter to KEV, malware, High+ or exploited
- Load summaries in batches, so a 60-CVE advisory page never spends your
whole daily quota by accident
- Export to CSV identity, aliases, CVSS and vector, EPSS, CWEs, dates,
package and purl, KEV, exploit intel, ATT&CK techniques, fixes,
workarounds, advisory links and more, ready for Excel

Built for analysts who read advisories all day
- Works on vendor security bulletins (MSRC, Red Hat, Cisco, Atlassian…),
GitHub advisories and issues, NVD, changelogs, mailing-list archives, ticket
trackers, anywhere identifiers appear as text
- Detection is free and local; the extension only fetches when you hover or
open the sidebar, and caches results for 24 hours
- Degrades gracefully when the daily quota is reached: links keep working,
and exports carry whatever is already cached

Privacy
- The page's identifiers are sent to api.vdb.vulnetix.com only when you ask
for a lookup. Nothing else about the page leaves the browser.
- Your API credential is held in the extension's background context and never
exposed to web pages.
- No analytics, no tracking, no third-party services.
- Full policy: https://www.vulnetix.com/privacy