LIVE CVE DATA

Trust Debt

Every company accrues tech debt. Every company also accrues Trust Debt™ — but rarely is it taken into account when choosing a CSP or SaaS provider.

Search a company to see their Trust Debt score

Data Sources & Disclaimers

NIST NVD — CVEs

Vulnerability data sourced from the National Institute of Standards and Technology National Vulnerability Database.

CISA KEV

Known Exploited Vulnerabilities catalog maintained by CISA. KEV entries indicate confirmed active exploitation.

FIRST EPSS

Exploit Prediction Scoring System scores by FIRST. Estimates the probability a CVE will be exploited within 30 days.

CISA Secure by Design

The CISA SBDP ✓ badge indicates a software manufacturer has voluntarily signed the Secure by Design pledge.

Have I Been Pwned

Breach data from HIBP. B factor weighted by breach PwnCount with 12-month halflife decay.