// psirt.com

PSIRT

Product Security Incident Response Team

Vulnerability intelligence and regulatory resources for security teams navigating NIS2, the Cyber Resilience Act, and coordinated disclosure. Live feeds from NVD, GHSA, and CISA KEV — updated continuously.

View live vulnerabilities  →
Critical CVEs today —

Vulnerabilities

Fetching…
NVD — National Vulnerability Database NIST
Fetching…
GHSA — GitHub Advisory Database GitHub
Fetching…
KEV — Known Exploited Vulnerabilities CISA
Fetching…

Resources

Regulatory & intelligence references
CISA / USA KEV Catalog Authoritative catalog of vulnerabilities actively exploited in the wild. Required remediation reference for US federal agencies. GitHub / Open Source GHSA GitHub Advisory Database — curated security advisories for open source software, covering npm, PyPI, Maven, Go, Rust, NuGet and more. NIST / USA NVD National Vulnerability Database. Authoritative CVE enrichment with CVSS scores, CPE mapping, and CWE classification. EU Regulation Cyber Resilience Act Official CRA text — Regulation (EU) 2024/2847. Mandatory security requirements for products with digital elements. EU Directive NIS2 Directive Directive (EU) 2022/2555 on measures for a high common level of cybersecurity across the Union. FIRST PSIRT Services Framework FIRST's reference framework for establishing and operating a Product Security Incident Response Team. MITRE CVE Program The Common Vulnerabilities and Exposures program — CVE assignment, CNA ecosystem, and disclosure coordination. PSIRT.COM CRA Summit Our past research and events on the Cyber Resilience Act, with speakers from ENISA, Thales, Orange and others.

Events

Past research & conferences
2024 — Brussels / Paris

Cyber Resilience Act Summit

A dedicated conference on the EU Cyber Resilience Act, bringing together regulatory bodies, industry leaders, and security researchers to examine the practical implications of CRA for product manufacturers and open-source maintainers. Sessions covered vulnerability disclosure obligations, SBOM requirements, and PSIRT readiness under the new framework.

ENISA Thales Orange + more
Full programme & recordings  →

Contact

For research inquiries, partnerships, or PSIRT collaboration:

[email protected]