Syndication
Really Simple Syndication (RSS) feeds
Point any reader, or a Slack or Microsoft Teams channel, at these feeds. Or build a custom feed from the categories you care about.
Core feeds
- All storiesEverything, newest first
/rss/all.xml - VulnerabilitiesPatches, tracked exploitation catalogs, exploitation
/rss/vulnerabilities.xml - ExploitsExploit-DB entries and PoCs
/rss/exploits.xml - BreachesConfirmed and claimed
/rss/breaches.xml - TakedownsOfficial actions only
/rss/takedowns.xml - Industrial Control Systems (ICS) advisoriesCybersecurity and Infrastructure Security Agency operational technology advisories, newest first
/rss/ics-advisories.xml
Also machine-readable
JSON API
Prefer JSON to RSS? Every dataset on this site is also served as flat JSON over HTTP, with no key and no account. See the endpoints and their shapes.
Access at a glance
Capability matrix
These are the contracts implemented by the tracker today. Anunknown value means the code and tracker documentation do not establish that third-party or site-wide limit.
| Capability | Account required | Filters | Refresh contract | Format | Documented limit |
|---|---|---|---|---|---|
| Read in browser | No | Global full-text search; page-specific filters vary. | New deploys follow the combined news-first data pipeline every 3 hours. | HTML pages | unknown (no site-wide result limit is documented) |
| RSS/OPML | No | Categories, personas, and vendors; custom RSS combines categories and vendors; OPML exports all or selected feeds. | Static RSS cache: 5 minutes. Custom RSS cache: 15 minutes. | RSS 2.0 and OPML 2.0 | Static feeds: 50 items; custom feed: 60 items; vendor directory: top 200 vendors. |
| JSON API | No key or account | No server-side query filters; choose the documented static shards and paths. | 5-minute cache; data republishes on the combined 3-hour deploy schedule. | JSON over HTTPS GET | No hard rate limit; documented guidance is at most 1 sustained request per second. |
| No site account; a confirmed email address is required. | Daily, weekly, or both; up to 15 vendor pins for the Daily Brief. | Daily at 07:00 ET; weekly on Mondays at 07:30 ET. | HTML and plain-text email | Up to 5 top picks and 5 stories per category; up to 15 vendor pins. | |
| Slack/Teams | A Slack workspace or Microsoft Teams tenant is required. | Choose any tracker RSS feed, including a custom category/vendor feed. | Third-party poll interval: unknown; tracker cache is 5 minutes for static RSS and 15 minutes for custom RSS. | Channel posts generated by the Slack RSS app or a Teams Workflow from RSS 2.0 | Tracker feed window: 50 static or 60 custom items; third-party posting limit: unknown. |
| MCP | No | Tool-specific text, status, tier, actor, breach, exploit, and date filters. | Reads the currently deployed public shards on each call; shard publication follows the pipeline deploy schedules. | Stateless JSON-RPC 2.0 over HTTPS POST with application/json | 20 default and 100 maximum rows; 60 requests per minute per caller; 32,768-byte request body. |
Custom feed builder
Pick any combination of categories, from one to all of them. The custom feed merges and sorts them, served by the Worker with a15-minute cache.
By persona
By category
By vendor
One feed per vendor for the 200 most active vendors by CISA KEV membership and story volume. Search, then click to subscribe, or check entries to include them in the OPML export below.
- Microsoft
- Apple
- Cisco
- Adobe
- Linux
- GitHub
- Oracle
- Amazon Web Services
- Apache
- IBM
- Fortinet
- VMware
- WordPress
- Ivanti
- Elastic
- Palo Alto Networks
- Citrix
- SonicWall
- D-Link
- Kubernetes
- Cloudflare
- Check Point
- CrowdStrike
- Slack
- Atlassian
- SAP
- Progress
- Splunk
- GitLab
- Docker
- SolarWinds
- Okta
- ConnectWise
- Synacor
- Trend Micro
- Dell
- Mozilla
- F5
- Zyxel
- ServiceNow
- Salesforce
- Samsung
- QNAP
- Sophos
- TOTOLINK
- Tenda
- MongoDB
- Jenkins
- Qualcomm
- Apache Software Foundation
- Roundcube
- Zoom
- JetBrains
- Zoho
- NETGEAR
- Juniper
- TP-Link
- jahlives
- Snowflake
- Kaseya
- Arm
- SentinelOne
- getgrav
- Veeam
- OpenSSL
- Drupal
- siyuan-note
- Mitel
- WatchGuard
- ASUS
- DrayTek
- GNU
- DrayTek Corporation
- Gitea
- Langflow
- NVIDIA
- Hewlett Packard Enterprise (HPE)
- Exim
- JFrog
- N-able
- Ubiquiti
- PaperCut
- RARLAB
- SiYuan
- GeoVision
- Siemens
- Sitecore
- Bouncy Castle
- HPE
- Joomla
- MikroTik
- Sangoma
- SurrealDB
- WWBN
- n8n
- GIGABYTE
- Gladinet
- Laravel
- Nagios
- Fortra
- GL-iNet
- BeyondTrust
- Flowise
- HP
- Kentico
- OSGeo
- PHP
- Spring
- Accellion
- Craft CMS
- FreeRDP
- OpenClaw
- SimpleHelp
- FFmpeg
- TeleMessage
- Ubiquiti Inc
- Foxit
- Hikvision
- NLTK
- Sonatype
- XWiki
- CrushFTP
- vBulletin
- Budibase
- LiteSpeed
- PraisonAI
- Veritas
- Xen
- @better-auth
- Barracuda
- BerriAI
- Dassault Systèmes
- FlowiseAI
- GIMP
- ImageMagick
- Rails
- Realtek
- SaltStack
- Schneider Electric
- SysAid
- grokability
- Cleo
- DotNetNuke (DNN)
- Meta Platforms
- Progress Software
- Qlik
- SmarterTools
- TrueConf
- VMware Tanzu
- Arista
- Commvault
- Grafana Labs
- ThinkPHP
- WSO2
- n8n-io
- Eclipse
- MOOS
- MervinPraison
- Metabase
- Netty
- Open WebUI
- Phoenix Contact
- Picklescan
- Quest
- TP-Link Systems Inc.
- Dahua
- Intel
- MSI
- MiniOrange
- NUUO
- Scriban
- Sudo
- Wavlink
- Capgo
- Ebyte
- Grav
- MOOS-IvP
- Micro Focus
- OpenBSD
- OpenPLC
- Themeum
- fabrikar.com
- joomshaper.com
- rConfig
- schreibfaul1
- Dasan
- EyesOfNetwork
- HashiCorp
- Lenovo
- Linksys
- MISP
- Rejetto
- Synology
- TerraMaster
- ThimPress
- Traefik
- Zabbix
- gitpython-developers
- ownCloud
OPML export
Download an Outline Processor Markup Language (OPML) file for your reader: either every feed on this page, or only the categories and vendors you checked above.