VigilLive demo
Connecting to CISA KEV...

Decision support, not legal advice. Verdicts come from deterministic rules applied to the live CISA KEV catalog and OSV.dev. A qualified person must confirm before anything is submitted to the ENISA Single Reporting Platform.

01 Your SBOM

CycloneDX JSON, SPDX 2.x JSON, purls, or name@version lines.

02 Product context

Member States where the product is made available

Results

Every component, checked against what attackers are actually exploiting.

Paste or upload an SBOM. Vigil fetches the live CISA KEV catalog server-side, range-checks versions on OSV.dev, and tells you what triggers the CRA 24-hour clock.

A fictional IoT gateway with 12 real open-source components.