Cve Intel

CVE Intel is a desktop app that runs vulnerability scans and triage using native Rust, with a CLI, REST API and MCP server.

CVE Intel is a private desktop application for vulnerability triage and scanning, written in native Rust. It allows security, IT, and development teams to check whether vulnerabilities affect their systems and decide whether to patch them immediately. Users can input a CVE ID, project folder, lockfile, SBOM, container image, local software, domain, IP address, or file hash. The app queries up to 40 public sources, including CISA KEV, FIRST EPSS, ENISA, and NVD, returning risk scores, exploitation status, and evidence. It includes 41 MCP tools for AI agents and coding assistants, a command line interface, and a REST API. Lookups go straight from the user computer to public sources, and users can run a local model for AI features.

Cve Intel at a glance

Best for: Software engineer
Runs on: macOS, Windows, Linux, CLI, API, Web
Pricing: Free
Released: October 2026
Category: AI coding tool
Website: github.com/fazmin/cve-intel

Key features

Scan dependencies from project folders and lockfiles
Calculate risk scores from 0 to 100 for CVEs
Read and write CycloneDX and SPDX SBOMs
Query 40 public vulnerability data sources
Provide 41 MCP tools for AI coding assistants
Run as a desktop app, CLI, or REST API
Watch vendors, products, packages, and CVEs for changes

Use it for

Decide whether to patch software vulnerabilities
Check project dependencies for known security flaws
Scan local applications and operating systems for risk
Investigate suspicious IP addresses, file hashes, or domains
Connect AI coding assistants to vulnerability intelligence

Alternatives to Cve Intel

CVEngine — It runs asset discovery, vulnerability scans, and AI triage in one continuous loop.
Corgea — AI-native security that finds, prioritizes, and fixes code vulnerabilities.
Pentest AI — Eliminates false positives by reproducing every exploit three times.
ARTEX — Runs autonomous multi-agent penetration testing with a dual-graph architecture.
VulnClaw — It uses LLM agents to autonomously execute end-to-end security testing loops.
jevgrep — Reduces coding agent costs by providing targeted, relevant repository context.
Foundry Local — Runs AI models locally on device with complete privacy and no Azure subscription.
AiSOC — Runs locally without API keys with bundled models and auditable reasoning ledgers.
AutoCVE — Automates the entire CVE discovery workflow from source code audit to report generation.
Mantis — Automates vulnerability discovery and patching using AI agents.
Coop — Runs AI coding agents in isolated virtual machines to protect host systems.
Pixee — Automates vulnerability triage and generates actionable code fixes.

All Cve Intel alternatives