ZeroAuthority VIGIL

Public vulnerability feeds are noisy. VIGIL keeps an inventory of the software and dependencies you run and matches it against the ZeroAuthority CVE database. It ranks matches by known exploitation and exploit likelihood, and shows the evidence behind each match so you can judge it yourself.

Data source

The ZeroAuthority CVE database (CVE Project records, CISA KEV and FIRST EPSS, synced into our own database) matched against the software you list

Sent externally

Yes, to ZeroAuthority servers only.

• Software inventory, added by hand or imported from a dependency manifest or SBOM (text and JSON are read, never executed)
• Version-aware CVE matching with a stated confidence for each match
• EPSS exploit-likelihood and CISA Known Exploited Vulnerabilities (KEV) prioritization
• Per-component detail with CVSS, EPSS, KEV status and the evidence for each match
• Remediation status tracking per component
• Critical and known-exploited matches sent to your Integrations channels
• Matched CVE IDs handed to FORGE as an indicator run for follow-up

1. 1Add or import software→
2. 2Match versions→
3. 3Prioritize by exploit risk→
4. 4Review the evidence→
5. 5Track remediation

• ZeroAuthority CVE database (CVE Project records)
• CISA KEV
• FIRST EPSS
• Integrations (alerts)
• FORGE (indicator hand-off)

• All of VIGIL on Reserve

• ZeroAuthority FORGE
• ZeroAuthority SIFT
• ZeroAuthority CONTINUITY