OpenTrojan unifies threat intelligence, investigations, research and enterprise operations into one trust-first platform. Every claim carries evidence, confidence and sources.
Why it matters: Known-exploited in the wild — Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. (due 2026-06-03)
Evidence ✓ CISA KEV · CISA · added 2026-05-20 · Read the advisory →
Why it matters: Known-exploited in the wild — Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. (due 2024-05-22)
Evidence ✓ CISA KEV · CISA · added 2024-05-01 · Read the advisory →
Why it matters: Known-exploited in the wild — Apply mitigations per vendor instructions as they become available. Otherwise, users with vulnerable versions of affected devices should enable Threat Prevention IDs available from the vendor. See the vendor bulletin for more details and a patch release schedule. (due 2024-04-19)
Evidence ✓ CISA KEV · CISA · added 2024-04-12 · Read the advisory →
Why it matters: Severity HIGH · CVSS 8.1 · affects multiple products
Evidence ✓ NVD · NVD · updated 2026-10-15 · See details & verification →
Why it matters: Severity CRITICAL · CVSS 10 · affects Palo Alto Networks PAN-OS 10.2, PAN-OS 11.0
Evidence ✓ NVD · NVD · updated 2026-10-27 · See details & verification →
Why it matters: Recurring new-KEV exploitation pushes
Evidence ✓ CISA KEV · 2 sources · Explore campaign →
Why it matters: FortiGate admin compromise wave
Evidence ✓ CISA advisory · 2 sources · Explore campaign →
Why it matters: Attributed to Lebanon-linked
Evidence ✓ Researchers · 3 sources · Review actor profile →
Ask the evidence-backed security assistant about any vulnerability, malware or threat-actor question — answers carry sources and confidence.
Ask a question →CVSS, severity, affected products and CISA KEV status for 2,000+ vulnerabilities synced from NVD.
Look up a CVE →Detect, normalize and check IP, domain, URL and hash indicators against OpenTrojan intelligence.
Check an indicator →Email header, JWT, DNS, hash, URL and password utilities — most run locally in your browser.
Browse all 12 tools →Follow CVEs, campaigns, actors, industries and vendors to build your feed. AI drafts a private digest — a human reviews it before anything publishes.
Start an evidence-backed investigation.
Get startedWhat changed today — critical CVEs, campaigns and actors.
Get startedQuery CVEs, malware, actors, campaigns and vendors.
Get startedTurn a question into a citation-backed report.
Get startedDraft a board-ready security briefing.
Get startedStart a deployment project or enterprise pilot.
Get startedNVD · CISA KEV · MITRE ATT&CK · vendor advisories
Every claim carries a visible evidence chain
Answered with calibrated confidence, never certainty
Staleness tracked per item — fresh / aging / stale
Content is reviewed before publication
Public dashboards for trust, status and platform SLA