Attributions& Credits

This page credits the organisations and open projects whose data and research help power EdgeProtect, with the notice or licence that applies to each.

Credits 6 organisations and projects

Our sources

Data Sources & Organisations

NIST National Vulnerability Database (NVD)

We use the U.S. National Institute of Standards and Technology (NIST) National Vulnerability Database (NVD) as a core source for CVE, CVSS, CPE, and related vulnerability metadata in our platform.

Notice

This product uses the NVD API but is not endorsed or certified by NIST or the NVD.

FIRST Exploit Prediction Scoring System (EPSS)

We incorporate EPSS probability scores from FIRST to provide an estimate of the likelihood that a vulnerability will be exploited in the wild, helping users prioritise remediation beyond static severity scores.

Notice

EPSS data is provided by FIRST. This product is not endorsed by FIRST.

CISA Known Exploited Vulnerabilities (KEV) Catalog

We reference the Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities Catalog to highlight vulnerabilities that are known to be actively exploited and to support risk-based prioritisation.

Notice

Data from the KEV Catalog is provided on an “as is” basis. CISA does not endorse EdgeProtect.

MITRE ATT&CK® Framework

We map threat actor behaviour and detection content to the MITRE ATT&CK® framework to provide a common language for tactics and techniques across our threat and detection features.

Notice

© 2026 The MITRE Corporation. MITRE ATT&CK® and ATT&CK® are registered trademarks of The MITRE Corporation.

Atomic Red Team

We reference Atomic Red Team tests from Red Canary to help users emulate adversary techniques and validate their detection coverage against techniques mapped to MITRE ATT&CK®.

Notice

Copyright © Red Canary, Inc. Used under the terms of the MIT License.

abuse.ch Ecosystem (MalwareBazaar, SSLBL, ThreatFox)

We use data from the abuse.ch projects MalwareBazaar, SSLBL, and ThreatFox to enrich malware and indicator-of-compromise (IoC) intelligence within our Threat Intelligence features.

Notice

Data from abuse.ch is provided on an “as is” basis. According to the project documentation, data is free for both non-commercial and commercial use.

Contact

Got a question? Ask us directly.

If something on this page is unclear, email us or use the contact form. The other legal pages are below.

See what is exposed before someone else does.

Start on the free plan with no card needed, or book a demo with the team.