# Sources and attributions

DefenceLevel

Where DefenceLevel's data come from and how we credit them.

Last updated: 14 October 2026

## How we use sources

DefenceLevel reads public sources: official catalogues, national CERTs, vendor bulletins, research labs, technical archives, some trade publications, public posts on Mastodon and Bluesky and proof-of-concept code published on GitHub. It reads them automatically, at most once every 30–60 minutes, through the feeds and interfaces the sources make available.

From each source we extract only facts: vulnerability identifiers (CVE), the affected product, the date and whether the vulnerability is exploited. We do not republish texts or article headlines. In the briefing every item carries a link to the original source; the DefenceLevel Index publishes numbers only.

The full list of sources and the weight of each one are in the [methodology](https://defencelevel.com/index/methodology).

## Attributions

These sources ask to be credited in a specific way, or allow reuse under an open licence:

| **NVD (NIST)** | This product uses data from the NVD API but is not endorsed or certified by the NVD. |
| --- | --- |
| **CVE** | CVE® is a registered trademark of The MITRE Corporation. CVE data © The MITRE Corporation, used under the [CVE Terms of Use](https://www.cve.org/Legal/TermsOfUse). |
| **CISA KEV** | CISA's Known Exploited Vulnerabilities catalogue, published under the CC0 1.0 licence. |
| **VulnCheck KEV** | VulnCheck KEV data (vulncheck.com), used under VulnCheck's terms. |
| **ENISA EUVD** | Source: ENISA EUVD, European Vulnerability Database (euvd.enisa.europa.eu), reused under ENISA's legal notice. |
| **EPSS** | EPSS scores: FIRST.org (first.org/epss). |
| **GitHub Advisory Database** | GitHub advisories (github.com/advisories), CC BY 4.0 licence. |
| **Wordfence Intelligence** | Copyright 2012–2026 Defiant Inc. Vulnerability information from Wordfence Intelligence (wordfence.com/threat-intel), used under the [Wordfence Intelligence licence](https://www.wordfence.com/wordfence-intelligence-terms-and-conditions/); every reference links to the original record. |
| **CERT-EU** | Source: CERT-EU (cert.europa.eu), CC BY 4.0 licence. |
| **CERT-FR** | Source: CERT-FR / ANSSI (cert.ssi.gouv.fr), Licence Ouverte 2.0. The date of the last update is the one shown in each original advisory. |
| **Siemens ProductCERT** | Every reference carries a link to the original text on the Siemens website. |
| **Exploit-DB** | Data from the official Exploit-DB repository (gitlab.com/exploit-database/exploitdb), GPL-2.0-or-later licence. |
| **Mozilla** | Security advisories from Mozilla's official repository (foundation-security-advisories), MPL-2.0 licence. |
| **Securelist** | Securelist blog (Kaspersky), credited with a link to the article. |
| **SANS Internet Storm Center** | Diaries of the SANS Internet Storm Center (isc.sans.edu), used with SANS's written permission and credited with a link to the diary. |
| **Unit 42 by Palo Alto Networks** | Unit 42 research blog (unit42.paloaltonetworks.com), read from its public feed with the written permission of Palo Alto Networks: we take only facts from it, always attributed to "Unit 42 by Palo Alto Networks" and with a link to the article. |

All other sources are credited by name, with a link to the original advisory or article.

## Trademarks and independence

Citing a source does not mean that the source endorses or supports DefenceLevel. The names of vendors, organisations and products belong to their respective owners and are used only to identify sources and vulnerabilities. We do not use their logos.

## If you run a source

If you run one of the sources we read and want to tell us something (an attribution to correct, an access limit, a request to be excluded), write to [info@defencelevel.com](mailto:info@defencelevel.com).

---

Web page: https://defencelevel.com/sources