Visit Site

CISA

CISA is a component of the United States Department of Homeland Security (DHS) responsible for cybersecurity and infrastructure protection across all levels of government, coordinating cybersecurity programs with U.S. states, and improving the government’s cybersecurity protections against private and nation-state hackers. CISA provides the cybersecurity community with a variety of data-driven services, including Cyber Threat Intelligence (CTI) through programs like Shared Cybersecurity Services (SCS), which offers access to threat platforms, Indicators of Compromise (IOCs), and APIs for machine-to-machine data connections, as well as free services such as vulnerability scanning and web application scanning to help organizations identify and mitigate potential vulnerabilities.

Specialties

Products

Polarity

Integrations

CISA-Vuln with Polarity

The Polarity - DHS CISA Known Exploited Vulnerabilities Integration returns information on vulnerabilities (CVEs) that have been identified by CISA as meeting the following criteria:

The vulnerability has an assigned Common Vulnerabilities and Exposures (CVE) ID. There is reliable evidence that the vulnerability has been actively exploited in the wild. There is a clear remediation action for the vulnerability, such as a vendor provided update. The integration requires network access to the CISA Known Vulnerability List available here: https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json

Examples

CISA-Vuln Data Overview

Link to Database: Link out to the NIST vulnerability database.
Summary: Quick synopsis on the CVE, know if CISA has determined the CVE has been exploited in environments.
CVE Details: Information about the CVE and the tools that it effects.