v1.0.0 · MIT License
Checks public IPs, domains, CVE IDs and software versions for confirmed vulnerabilities and exposure, using NVD version ranges, CISA KEV, EPSS, distro backports and published exploits. All API keys are optional.
v0.1.1 · MIT License
Enables vendors to run a declared check battery against their own MCP server, emit sealed Assay-format scorecards with evidence hashes and environment fingerprints, and have a local verifier re-run a random sample to issue counter-signed verification receipts.