· in-progress
kev-check
A web tool that checks a list of CVEs against the CISA Known Exploited Vulnerabilities catalogue, so triage starts from the rows that matter.
A small, deliberately narrow tool: paste CVE identifiers, get back which of them appear in CISA’s Known Exploited Vulnerabilities catalogue. Free to use, no account.
Why it exists
The KEV catalogue is published as a machine-readable feed, which is great if you have a pipeline and unhelpful if you have a spreadsheet from a scanner and twenty minutes. The gap between “the data is public” and “I can act on it right now” is where most small tools live.
How it is built
- FastAPI with Jinja2 templates, served by Gunicorn
- Azure App Service
- The KEV feed refreshed on a schedule rather than fetched per request
Closed source, free to use.
What it deliberately does not do
It does not tell you what to patch. KEV membership is one input to prioritisation, not the answer — I wrote about why. Exposure and asset criticality are yours to supply.
Known gaps
There is no WAF in front of it yet. That is on the list.