Vulmatch by dogesec
Overview
Syncs enriched CVE vulnerability intelligence from Vulmatch into OpenCTI, including CVSS scores, EPSS predictions, KEV flags, CPE software associations, and ATT&CK/CAPEC mappings.
The OpenCTI Vulmatch Connector syncs vulnerability intelligence from Vulmatch to OpenCTI, enabling automated import of CVE data with CVSS scores (v2, v3, v4), EPSS exploit probability predictions, CWE references, Known Exploited Vulnerabilities (KEV), vulnerable software relationships (CPE), and contextual links to MITRE ATT&CK and CAPEC techniques.
By applying filtering, normalization, and local processing before ingestion, the connector helps organizations focus on vulnerabilities relevant to their environment and risk posture. Whether used for broad vulnerability monitoring or SBoM-aware exposure tracking, the connector supports continuous, automated enrichment of vulnerability data to improve prioritization, investigation, and decision-making.