About VulnTrace

VulnTrace brings live vulnerability data from the sources security teams already trust — the NVD, OSV, the CISA Known Exploited Vulnerabilities catalogue, GitHub Advisories, Exploit-DB, MISP Galaxy, SANS ISC and AlienVault OTX — into one searchable workspace. Instead of pivoting between a dozen browser tabs, analysts can search by CVE, vendor, product or package, see how a flaw is being exploited in the wild, and track remediation progress from a personal watchlist.

Beyond lookup, the console maps your own attack surface. Register the projects and dependencies you actually run, and VulnTrace rescans them continuously against OSV, flags newly disclosed flaws, and models the attack paths that connect an internet-facing asset to a known weakness. Predictive scoring highlights the vulnerabilities most likely to be weaponised next, so patching effort goes where the risk really is. Weekly reports and AI-assisted remediation guidance help turn findings into action.

It is built for the people who carry the pager: security analysts and SOC teams triaging alerts, vulnerability managers running a patch programme, DevSecOps engineers tracking open-source dependencies, and IT leaders who need a clear, evidence-backed view of exposure. It suits organisations of any size that want threat intelligence without maintaining a dedicated research team.

VulnTrace is designed and built by Varor, a team focused on business continuity, compliance and cyber resilience tooling. It forms part of our Secure Minds initiative, which aims to put practical, high-signal security intelligence in the hands of everyday defenders.