Critical Severity
Published: Nov 1, 2026
Local security intelligence for CVE triage - 40 data sources and 41 tools, risk scores and an MCP server for AI agents, all in native Rust. Private by default.
<h1 align="center">CVE Intel</h1>
<p align="center">
Know which vulnerabilities matter, and what to do about them.<br/>
A private desktop app for vulnerability triage and scanning, written in native Rust, with a CLI, REST API and MCP server for developers and AI agents.<br/>
41 MCP tools, 40 data sources, SBOMs in and out, on-device AI.
</p>
<p align="center">
<a href="https://www.rust-lang.org"><img src="https://img.shields.io/badge/Rust-native-orange?style=flat-square&logo=rust" alt="Rust"/></a>
<a href="https://tauri.app"><img src="https://img.shields.io/badge/Tauri-2-blue?style=flat-square" alt="Tauri 2"/></a>
<a href="https://modelcontextprotocol.io"><img src="https://img.shields.io/badge/MCP-Compatible-blue?style=flat-square" alt="MCP compatible"/></a>
<a href="#license"><img src="https://img.shields.io/badge/License-MIT%20OR%20Apache--2.0-green?style=flat-square" alt="License: MIT OR Apache-2.0"/></a>
</p>
<p align="center">
<a href="#what-is-cve-intel">What it is</a> ·
<a href="#getting-started">Getting started</a> ·
<a href="#features">Features</a> ·
<a href="#install">Install</a> ·
<a href="#local-ai">Local AI</a> ·
<a href="#data-sources">Data sources</a> ·
<a href="#developer-notes">Developer notes</a> ·
<a href="#citing-and-attribution">Citing</a>
</p>
<p align="center">
<a href="assets/core-functions-demo.mp4"><img src="assets/core-functions-demo.webp" width="900" alt="Sped-up screen recording of CVE Intel on macOS: the threat landscape, CVE Triage of CVE-2024-3400 and recording a decision, the decision ledger with stale, expired and review-due examples, a dependency scan with attack chains and a CycloneDX SBOM, and the watchlist"/></a>
</p>
<p align="center"><sub>Sped-up demo on macOS (<a href="assets/core-functions-demo.mp4">1080p video</a>): the threat landscape, triage and recording a decision, the decision ledger, a scan with attack chains and an SBOM, and the watchlist.</sub></p>
## What is CVE Intel?
Every