Technology & Cybersecurity

Vulnerability, package, and internet-measurement sources for security monitors and dependency watchers.

Track one asset class, keep the first-seen timestamp, and avoid treating a feed as a complete inventory.

beginnerTiny

Issued TLS certificates indexed from public CT logs for building domain certificate monitors and issuance alerts.

First project: List certificates for one domain

TechnologyJSONNo key

beginnerTiny

Real-user Chrome experience metrics for building Core Web Vitals monitors from origin-level CrUX records.

First project: Read one origin's Core Web Vitals

TechnologyJSONKey

beginnerTiny

Confirmed in-the-wild software vulnerabilities for building patch-priority alerts, exposure monitors, and remediation queues.

First project: Monitor newly exploited vulnerabilities

TechnologyJSON +1No key

intermediateTiny

Resolved open-source package versions and dependencies for building supply-chain maps that complement vulnerability feeds.

First project: Map one package version's resolved dependencies

TechnologyJSONNo key

beginnerTiny

Daily CVE exploit-probability scores for building patch-priority queues that go beyond severity ratings and known-exploited lists.

First project: Compare one CVE's exploit probability with its KEV status

TechnologyJSON +1No key

intermediateSmall

Hourly public GitHub event archives for building repository-activity monitors without using BigQuery.

First project: Count event types in one GitHub hour

TechnologyJSON +1No key

intermediateSmall

Versioned adversary tactics, techniques, software, groups, mitigations, and relationships for building threat-model and detection-coverage tools.

First project: Build an Enterprise tactic-to-technique matrix

TechnologySTIX JSON +1No key

intermediateSmall

CVE records enriched with severity, weakness, reference, and affected-product data for building vulnerability monitors and exposure triage tools.

First project: Monitor recently modified vulnerabilities

TechnologyJSONNo key

intermediateTiny

Automated security-practice scores for public repositories for building dependency-acceptance checks and maintainer-risk reviews.

First project: Review one repository's Scorecard checks

TechnologyJSONNo key

intermediateMedium

Package- and commit-resolved open-source advisories for building dependency exposure monitors and remediation queues.

First project: Check one pinned Python package for known advisories

TechnologyJSONNo key

beginnerTiny

Internet routing, prefix, and ASN statistics for building network-visibility and prefix-lookup tools.

First project: Look up a public DNS prefix

TechnologyJSONNo key