Sectora threat-intel

Sectora Threat Intelligence Ask your AI "is this CVE actually being exploited?" and get real data back — not a guess from 2024 training cutoff.

CommunityOnlineNo sign-inGlobalFreeCan modify data

What it can do

  • Lookup Cve: Get full threat intelligence enrichment for a CVE including EPSS score, CISA KEV status, public exploits, Nuclei templates, risk level, and risk factors. Input must be a valid CVE ID.
  • Assess Tech Risk: Assess security risk for a list of technologies. Returns known CVEs affecting each technology with severity breakdown. Input: comma-separated technology names only.
  • Search Cves: Search for CVEs by keyword, severity, or other filters. Query must be alphanumeric text.

What data it sees

Do you need an account

No: the server works without sign-in

Sectora Threat Intelligence

Ask your AI "is this CVE actually being exploited?" and get real data back — not a guess from 2024 training cutoff.

Sectora blends EPSS scores, CISA KEV status, public exploit availability, Nuclei templates, and CVSS into a single 0–100 weaponization score. Your LLM stops hallucinating severity and starts giving actionable answers grounded in live signals.

🛠️ Tools

Tool What it does
lookup_cve Full CVE enrichment — EPSS, KEV, exploits, Nuclei, ransomware use
get_weaponization_score 0–100 score blending 5 exploitation signals
search_cves Find CVEs by keyword, severity, KEV status, or exploit availability
assess_tech_risk Risk summary for a stack (e.g. "nginx 1.25, OpenSSL 3.1, PostgreSQL 16")
get_kev_recent Newly added CISA KEV entries
get_trending_cves EPSS spikes + new exploits this week
lookup_ip_reputation Community IP rep from the Sectora Shield WAF network
get_threat_stats Database coverage stats

💬 Try these prompts

  • "Is CVE-2024-3400 being actively exploited? What's its weaponization score?"
  • "What's the weaponization score for Log4Shell?"
  • "Assess the security risk of running nginx 1.25 and OpenSSL 3.1"
  • "Show me the critical CVEs added to CISA KEV this week"
  • "Has IP 45.33.32.156 been reported for attacks?"

⚡ Quick start (Claude Desktop)

{
  "mcpServers": {
    "sectora": {
      "type": "streamable-http",
      "url": "https://mcp.sectora.io/mcp"
    }
  }
}

Works out of the box with Claude Desktop, Claude Code, Cursor, Windsurf, ChatGPT, and any MCP-compatible client.

---
🎁 Free tier

300 requests/minute per IP. No signup. No credit card. Discovery calls (tools/list, initialize) don't count against quota.

Need higher limits for production use? Get a free API key at sectora.io/settings/api-keys → 3,000 req/min.

---
🔒 Privacy

We log request metadata (IP, country, tool name, latency) for abuse detection and service reliability. We do not log tool arguments or responses — the CVEs and
IPs you look up are never stored. 30-day retention. Full details at sectora.io/legal/privacy.

---
🏢 About

Built and operated by Sectora — an AI-era DAST platform that scans production apps for vulnerabilities. This MCP is our way of putting the same threat-intel
enrichment our scanners use directly inside your AI workflow
Server tool list (8)

Raw names from tools/list. Only developers need these.

lookup_cveGet full threat intelligence enrichment for a CVE including EPSS score, CISA KEV status, public exploits, Nuclei templates, risk level, and risk factors. Input must be a valid CVE ID.
assess_tech_riskAssess security risk for a list of technologies. Returns known CVEs affecting each technology with severity breakdown. Input: comma-separated technology names only.
search_cvesSearch for CVEs by keyword, severity, or other filters. Query must be alphanumeric text.
get_kev_recentGet recently added entries to the CISA Known Exploited Vulnerabilities (KEV) catalog.
get_trending_cvesGet currently trending CVEs based on recent KEV additions, high EPSS scores, and exploit availability.
get_weaponization_scoreGet the weaponization score (0-100) for a CVE. Factors in EPSS, KEV status, exploit availability, Nuclei templates, and CVSS. Input must be a valid CVE ID.
lookup_ip_reputationLook up community IP reputation from Sectora Shield WAF network. Shows if an IP has been reported for attacks. Input must be a valid IPv4 address.
get_threat_statsGet statistics about the Sectora threat intelligence database including counts of EPSS scores, KEV entries, Nuclei templates, and exploits. No input required.