NVD Harvester: A Foundation for Vulnerability Analysis
Deeper vulnerability analysis needs a dataset you can inspect and trust. Building NVD Harvester exposed the challenges of keeping it complete, current, and reliable—and the limits of NVD alone.
EPSS v5 Changed the Queue Without Changing the Integration
EPSS v5 arrived through the same interface, but its new score distribution could materially alter vulnerability queues, thresholds, capacity assumptions, and executive reporting.
EPSS v4 Changed the Scores. The Leadership Lesson Was Model Governance
When a risk model changes, the operational question is not whether the new numbers look better. It is whether your thresholds, workflows, and executive reporting still mean what you think they mean.
