Vulnetix

Inline VDB intelligence for every vulnerability identifier on the page.

Shows vulnerability intelligence from the Vulnetix VDB for vulnerability identifiers found in the text of the current page. Vulnerability intelligence for every CVE, GHSA and advisory ID on the page; severity, EPSS, KEV, exploits and fixes, on hover. Description Vulnetix turns any web page that mentions a vulnerability into a triage surface. Every identifier in the page text is detected and underlined. Hover one to see what the Vulnetix Vulnerability Database (VVB) knows about it, without leaving the page. Hover card - CVSS score and severity, or EPSS when no CVSS exists - CISA / VulnCheck KEV status, ransomware use, exploitation maturity - Affected vendor, product and version - Publication age - Malicious-package flag for OSS malware entries - One click through to the Resolve console for the full record Sidebar - Every identifier on the active tab, in document order - Sort by severity, KEV first, or publication date - Filter to KEV, malware, High+ or exploited - Load summaries in batches, so a 60-CVE advisory page never spends your whole daily quota by accident - Export to CSV identity, aliases, CVSS and vector, EPSS, CWEs, dates, package and purl, KEV, exploit intel, ATT&CK techniques, fixes, workarounds, advisory links and more, ready for Excel Built for analysts who read advisories all day - Works on vendor security bulletins (MSRC, Red Hat, Cisco, Atlassian…), GitHub advisories and issues, NVD, changelogs, mailing-list archives, ticket trackers, anywhere identifiers appear as text - Detection is free and local; the extension only fetches when you hover or open the sidebar, and caches results for 24 hours - Degrades gracefully when the daily quota is reached: links keep working, and exports carry whatever is already cached Privacy - The page's identifiers are sent to api.vdb.vulnetix.com only when you ask for a lookup. Nothing else about the page leaves the browser. - Your API credential is held in the extension's background context and never exposed to web pages. - No analytics, no tracking, no third-party services. - Full policy: https://www.vulnetix.com/privacy Support - Support email: support@vulnetix.com