📺 Live on Feb 18, KEVology 101: Observing exploit trajectories in the KEV Collider! Register
runZero CAASM

KEV Collider smashes together risk and threat signals so you can easily measure what falls out. Built on open-source data and updated daily, it layers the CISA KEV catalog with the metadata an investigator needs to separate theoretical risk from real-world fire drills.

PRESETS: Straight-Shot RCE EPSS Movers MSFT Tue
No CVEs match the current filters.

Report a bug or suggest a feature on our GitHub.

New Report
KEVology: an analysis of exploits, scores, & timelines on the CISA KEV
In the latest runZero research report former CISA KEV Section Chief Tod Beardsley, breaks down how KEV entries behave across exploits, scores, and timelines — and what actually matters.

Learn how to interpret these entries as dynamic data points to prioritize what actually matters.
Read the Report
Live Webcast: February 18
KEVology 101: Observing exploit trajectories in the KEV Collider

The CISA Known Exploited Vulnerabilities (KEV) Catalog is a vital resource, but interpreting it for your specific environment remains a challenge. On February 18, class is in session.

Join Tod Beardsley, Rob King, special guest Wade Sparks (CISA & VulnCheck KEV veteran) as they explore the science of KEVology.

Register Now
Research Blog
Making the CISA KEV actionable for real-world risk
The CISA KEV is one of the most influential signals in vulnerability management worldwide. It’s also one of the most misunderstood.

If you want to understand what the KEV is actually telling you, read our new KEVology report, then take the analysis into the lab with the KEV Collider.
Learn More

See Results in Minutes

See & secure your total attack surface. Even the unknowns & unmanageable.

Try runZero for Free
runZero CAASM
© Copyright 2026 runZero, Inc. All Rights Reserved