Skip to main content
ToolPublished

Built a free, ad-free vulnerability tracker correlating CISA KEV, CERT advisories, darkweb leak trends & EU compliance (NIS2, CRA, DORA) – would love your feedback

Source Reddit ThreatIntel

0

Discussion

This content describes a free, ad-free vulnerability tracker website called Vulnerability Atlas that aggregates and correlates multiple sources of vulnerability intelligence, including CISA KEV, CERT advisories, darkweb leak trends, and EU compliance frameworks. It provides prioritized live feeds of actively exploited vulnerabilities, product filtering for enterprise vendors, darkweb and ransomware trend aggregation, and compliance breakdowns for frameworks such as NIS2, CRA, and DORA. The platform aims to simplify vulnerability management by consolidating diverse threat intelligence and compliance information into one accessible portal.

r/threatintel (opens in a new tab)u/fofo13580 points0 comments

Hi everyone,

Over the past few months, I got tired of having to jump between CISA KEV, NVD, national CERT feeds, and compliance text documents just to understand which vulnerabilities actually matter and need immediate patching.

I built Vulnerability Atlas (vulnerabilityatlas.com) as a free, ad-free portal to pull these streams into one place:

  • Prioritized Live Feed: Correlates active exploits from CISA KEV, newly published CVEs from NVD/CIRCL mirror, and official advisories from CERT-SE and CERT-FR.
  • Product Filtering: Filter down directly to enterprise vendors like Check Point, Fortinet, Cisco, Microsoft, Palo Alto, etc.
  • Darkweb & Ransomware Trends: Aggregates public leak-site announcements and threat feeds (ThreatFox, URLhaus) with Nordic/EU context without any Tor scraping.
  • Compliance Breakdowns: Educational breakdowns for NIS2 (art. 21), EU Cyber Resilience Act (CRA), DORA, GDPR, ISO 27001, SOC 2, and PCI DSS — showing what vulnerability management workflows each framework actually demands.
  • Email Alerts: Optional digest schedules (daily, weekly, custom) for specific vendors or severity thresholds.

The site is open to all, requires no login to browse, and has zero advertising.

I'd really appreciate your feedback:

  1. Are there specific vendors or threat feeds you feel are missing?
  2. What would make the remediation flow or compliance overviews more practical for your team's day-to-day work?

Link: https://vulnerabilityatlas.com

Thanks for taking a look!

Links cited in the discussion

References

Community reviews

Loading reviews…