Data Sources & Intelligence Source Network

Source provider ecosystem

Beyond consuming sources, OpenTrojan manages an intelligence source ecosystem — security vendors, research organizations, CERTs, independent researchers and enterprise security teams. Providers move through pending → verified → trusted under human review only; AI can recommend but never auto-verify.

Sample providers: National CERT (verified) · Acme Research (pending). See Developer Ecosystem.

Data Runtime 3.0 — Connector lifecycle (Phase 32A)

External adapters (NVD · CISA KEV · MITRE ATT&CK · Vendor Advisory · GitHub Security Advisory) flow through registered → connected → validated → candidate → human_review → accepted. Each connector carries checksum, parser version, quality score and confidence. AI cannot auto-write the Knowledge Graph.

API: GET /api/v19/data/status · POST /api/v19/data/validate (audit + review).

Source registry

• NVD (NIST) nvd active

  daily · reliability 97% · last sync 2026-08-22

• CISA KEV cisa_kev active

  daily · reliability 96% · last sync 2026-08-22

• MITRE ATT&CK mitre_attck active

  weekly · reliability 93% · last sync 2026-08-20

• Vendor Advisory vendor_advisory active

  daily · reliability 90% · last sync 2026-08-19

• Research Publication research_publication idle

  weekly · reliability 85% · last sync 2026-08-15

• Community Research community_research idle

  weekly · reliability 70% · last sync 2026-08-10

• Internal (OpenTrojan) internal active

  realtime · reliability 88% · last sync 2026-08-22

Lineage chain

From a raw source to a published entity and AI answer (and optional report):

1. sourcesource src-kev
2. pipelinepipeline for src-kev
3. transformationtransform CVE-2021-44228
4. entityentity CVE-2021-44228
5. ai_answerai answer for CVE-2021-44228
6. reportreport report-log4shell