We’re excited to introduce a major evolution in how OpenCVE helps teams manage CVEs: Automations.
If you use OpenCVE today, you already know the value of tracking CVEs that match your vendors and products. But as subscriptions grow, so does the noise. Every update, every score change, every new reference can demand attention.
Automations give you control over when, why, and how OpenCVE reacts to the CVEs in your projects.
Vulnerability monitoring is not just about detection. Security, SOC, DevSecOps, and engineering teams need to prioritize, triage, and act without drowning in alerts.
Until now, much of that logic lived inside notification configurations: event filters, CVSS thresholds, delivery rules, all bundled together. That worked, but it was hard to extend. You could notify, but you couldn’t easily assign a CVE, change its status, or build a scheduled digest with the same flexibility.
See the official website.
