AI Vulnerability Automation Platform
Daily advisory triage: 2 hours → about a minute
Security advisories arrive all day by email, GitHub and RSS. Someone used to read every one, work out which customers were affected and forward it to the right team. I designed and built an agentic platform that does this end to end, with an AI check and a human review step before anything is routed.
- 1IngestCERT advisories from email, GitHub and RSS feeds
- 2ExtractAn LLM pulls out CVE, product, version and severity
- 3JudgeA second LLM checks each extraction before it is trusted
- 4Human reviewUncertain cases go to an analyst instead of straight through
- 5MatchCompared with each customer's asset inventory
- 6RouteSent to the team that owns the affected systems