CVE Tools is a product by CVE Tools in the Vulnerability Assessment category. It covers CVE, Vulnerability Intelligence and Vulnerability Prioritization.

What is the pricing for CVE Tools?

CVE Tools is free. Download and setup instructions are at https://cve.tools/.

What are alternatives to CVE Tools?

Alternatives to CVE Tools listed on CybersecTools: 1. Fortra VM - Risk-based vulnerability management platform for scanning and prioritization (Commercial) 2. Cytidel - Vulnerability intelligence platform prioritizing CVEs via real-time multi-source data. (Commercial) 3. Redinent Vulnerability Intelligence (XIOT) - IoT-focused vulnerability intelligence and risk mgmt platform with CVE/CWE assessment. (Commercial) 4. Root Evidence - Evidence-based vuln prioritization platform focused on real-world risk. (Commercial) 5. Artiphishell VulnOps Platform - Vuln ops platform that deduplicates, validates, prioritizes, and remediates findings. (Commercial) Compare all CVE Tools alternatives at https://cybersectools.com/alternatives/cve-tools

What deployment and organization size does CVE Tools fit?

CVE Tools is available as a cloud service. It is listed for startups, small businesses, mid-market companies and enterprises. It is free.

CVE Tools

Name: CVE Tools
Author: CVE Tools

byCVE ToolsClaimed

AI-powered CVE intelligence platform with exploit data, EPSS, and ATT&CK mappings.

Exposure & Vulnerability Management Vulnerability AssessmentCloudStartup · SMB · Mid-Market · EnterpriseFree

Visit website

What is CVE Tools?

CVE Tools is an AI-assisted vulnerability intelligence platform that aggregates, enriches, and presents CVE data from multiple authoritative sources.

Data Sources:

CVEProject/cvelistV5 (official CVE database)
NVD (NIST National Vulnerability Database)
GHSA (GitHub Security Advisories)
CISA KEV (Known Exploited Vulnerabilities catalog)
BDU FSTEC (Russian FSTEC vulnerability database)
Nuclei Templates (ProjectDiscovery)

The platform maintains a database of over 320,000 accepted CVEs spanning from 1999 to present, continuously synced from upstream sources. Each CVE record is enriched with CVSS scores, CPE identifiers, CWE classifications, EPSS scores, exploit links, Nuclei scanner templates, and MITRE ATT&CK technique mappings.

Core Capabilities:

CVE search and filtering by severity, vendor, date range, exploit availability, CWE, EPSS range, KEV status, and attack vector
Exploit intelligence linking CVEs to GitHub PoC repositories, ExploitDB entries, and Metasploit modules
EPSS scoring from FIRST.org for exploit probability-based prioritization
CISA KEV tracking for confirmed actively exploited vulnerabilities
Attack surface graph visualization mapping products to CVEs to MITRE ATT&CK techniques and kill chain stages
AI assistant for CVE impact analysis, remediation recommendations, detection rule generation, and natural language database queries
Nuclei template discovery and AI-assisted template generation
REST API for programmatic access
MCP (Model Context Protocol) server for integration with compatible AI tools

Search is powered by Typesense, enabling sub-50ms full-text and faceted search results. The platform offers a free account tier with no credit card required.

CVE

Vulnerability Intelligence

Vulnerability Prioritization

MITRE ATT&CK

Exploit Development

Vulnerability Research