Vulmatch

A vulnerability search engine that provides comprehensive information about software vulnerabilities, including exploit context and detection methods. It helps security teams prioritize patching efforts and create detection coverage for unpatched vulnerabilities. The platform offers tailored alerts based on an organization's software bill of materials and integrates with existing security tools via REST and TAXII APIs. It is positioned as a developer-friendly solution with an open-source core API.

Key features

• Enriches CVEs with MITRE ATT&CK techniques
• Identifies common product weaknesses
• Detects active exploitation of CVEs
• Creates detection coverage for exploits
• Generates Software Bill of Materials (SBOM)
• Provides tailored vulnerability alerts
• Offers REST API for integrations
• Supports TAXII 2.1 API for security tools
• Integrates with OpenCTI
• Exports STIX bundles