cve.now is a free feed of the security vulnerabilities for agents. It merges the CVE list, CISA KEV, EPSS and OSV into one entry per CVE, explains each one in plain English, and filters down to the ones that need action. Get it as RSS, JSON, an API, or an MCP server for your coding agent. No login, no signup, no API key required.

Wait, this is sick. Which model did you guys end up using under the hood to do all the classification for this? How did you guys think about false positive rates?