DATA FOUNDRY · CYBERSECURITY INTELLIGENCE
Actionable vulnerability intelligence from CISA KEV and EPSS scoring.
Consolidated, deterministic threat feed unifying verified actively-exploited vulnerabilities from the CISA KEV catalog with Exploit Prediction Scoring System (EPSS) probability percentiles.
COMMERCIAL ACCESS
Verified Parquet archives + Claude MCP integration
- ✓ Verified Data Foundry Parquet partitions (zstd)
- ✓ Model Context Protocol (MCP) tool integration
- ✓ Metering: Inquire for API / MCP Access
- ✓ Deterministic quality gate & hash verification
- ✓ Contractual commercial rights clearance
Quotes reviewed by systems engineering within 1 business day
COLUMN SPECIFICATIONS
Typed relational schema.
Columnar Parquet & DuckDB ready.
| Column Name | Data Type | Description |
|---|---|---|
cve_id |
VARCHAR(20) | Common Vulnerabilities and Exposures identifier |
vendor_project |
VARCHAR(64) | Affected software vendor or open-source project |
product |
VARCHAR(64) | Affected product or component name |
vulnerability_name |
VARCHAR(256) | Descriptive name of the security vulnerability |
date_added |
DATE | Date added to CISA Known Exploited Vulnerabilities catalog |
due_date |
DATE | Federal agency remediation action due date |
epss_score |
FLOAT | Exploit Prediction Scoring System probability (0.0 to 1.0) |
SYSTEM STATUS & CAPABILITY BOUNDARIES
Engineering reality.
Verified operational features vs planned protocol capabilities.
Verified Operational Today
- ✓ Apache Parquet Partitions: Columnar archives (Zstandard compressed) with typed relational schemas.
- ✓ Zero-Copy Local Analytics: In-memory SQL exploration via DuckDB, Python Polars, and Arrow.
- ✓ Cryptographic Deduplication: SHA-256 release manifests and seen-keys ledger preventing record drift.
- ✓ Statutory Rights Clearance: 100% license-cleared provenance with statutory citations.
- ✓ Technical Quote Intake: Systems engineering review and schema sample verification.
Pilot & In-Specification Capabilities
- ◌ Remote MCP Streaming Adapter:
foundry_lookup_cve_threattool endpoint available under enterprise pilot agreements. - ◌ Automated Micro-Settlement: Agent-to-agent procurement and escrow via EXCHANGER (active protocol specification).
- ◌ Multi-Region Edge Replicas: Global Cloudflare R2 bucket replication currently in private validation.
VERIFIED SAMPLE RECORD
Inspect the raw payload.
Zero mocked fields.
{
"cve_id": "CVE-2024-38812",
"vendor_project": "VMware",
"product": "vCenter Server",
"vulnerability_name": "VMware vCenter Server Heap-Based Buffer Overflow",
"date_added": "2024-10-08",
"due_date": "2024-10-29",
"epss_probability": 0.941,
"known_ransomware_use": "Known"
}
AGENT INTERFACE & MCP TOOL CONTRACT
Plug directly into Claude Code, Codex, and autonomous workflows.
Deterministic data retrieval.
Machine-Readable Contract
Direct dataset extraction is delivered via high-throughput columnar Apache Parquet. For autonomous assistants, ELYRAON provides standard Model Context Protocol (MCP) tool schemas and REST integration adapters with signed SHA-256 integrity receipts.
Adapter identifier: foundry_lookup_cve_threat
Pricing status: Inquire for API / MCP Access
Active MCP Endpoint: https://elyraon.com.co/agents/mcp (Host to live structural verification tools; metered dataset adapters available in scoped pilots).
{"tool": "foundry_lookup_cve_threat", "arguments": {"cve_id": "CVE-2024-38812"}}
MACHINE-READABLE SPECIFICATIONS
Structured metadata for autonomous agents.
Zero scrapers, zero hallucinations.
{
"entity_id": "https://elyraon.com.co/datasets/cybersecurity-threat-cve/#dataset",
"catalog_id": "https://elyraon.com.co/datasets/#catalog",
"canonical_url": "https://elyraon.com.co/datasets/cybersecurity-threat-cve/",
"primary_format": "application/vnd.apache.parquet",
"compression": "zstd",
"ingestion_pipeline": "cybersecurity.py",
"mcp_tool_name": "foundry_lookup_cve_threat",
"license": "U.S. Government Public Domain & Open Access (FIRST.org)",
"duckdb_quickstart": "SELECT * FROM read_parquet('cybersecurity-threat-cve.parquet') LIMIT 5;"
}
WHY ELYRAON DATA FOUNDRY
Architectural contrast.
Built for engineering reality.
Filters out theoretical vulnerabilities to focus strictly on real-world exploited CVEs, enabling security agents to prioritize critical patches without noise.
Conventional Data Feeds
- Undetected socket drops during volatility
- Messy unstructured CSV/JSON with broken parsers
- Ambiguous copyright terms creating lawsuit liability
- Expensive multi-thousand dollar rigid contracts
ELYRAON Data Foundry
- Continuous quality gate reconciliation
- Clean, typed, content-addressed Apache Parquet
- 100% license-cleared provenance with statutory citations
- Clear request-quote pricing and cryptographic delivery verification
RELATED DATASETS & AGENT PLATFORM
Connected intelligence feeds.
Cross-domain discovery and autonomous infrastructure.
TECHNICAL FREQUENTLY ASKED QUESTIONS
Clear answers.
Engineering boundaries.
What is the exact inventory in this dataset?
1,769 verified CISA KEV exploited vulnerabilities and 600 top EPSS probability scores.
Can autonomous coding agents query this feed?
Yes. Autonomous agents invoke `foundry_lookup_cve_threat` over Model Context Protocol (MCP) to verify dependency safety.
How frequently is the feed refreshed?
The collector runs continuous syncs against CISA KEV and updates Parquet lake partitions daily.
Are ransomware campaign associations tracked?
Yes. Known ransomware campaign flags from the CISA catalog are preserved.
How is commercial licensing handled?
Available for integration into internal security pipelines and commercial agent firewalls upon quote approval.