Technology & Cybersecurity

Vulnerability, package, and internet-measurement sources for security monitors and dependency watchers.

Track one asset class, keep the first-seen timestamp, and avoid treating a feed as a complete inventory.

BeginnerTiny

Issued TLS certificates indexed from public CT logs for building domain certificate monitors and issuance alerts.

First Project: List Certificates for One Domain

TechnologyJSONNo Key

BeginnerTiny

Real-user Chrome experience metrics for building Core Web Vitals monitors from origin-level CrUX records.

First Project: Read One Origin's Core Web Vitals

TechnologyJSONKey

BeginnerTiny

Confirmed in-the-wild software vulnerabilities for building patch-priority alerts, exposure monitors, and remediation queues.

First Project: Monitor Newly Exploited Vulnerabilities

TechnologyJSON +1No Key

IntermediateTiny

Resolved open-source package versions and dependencies for building supply-chain maps that complement vulnerability feeds.

First Project: Map One Package Version's Resolved Dependencies

TechnologyJSONNo Key

BeginnerTiny

Daily CVE exploit-probability scores for building patch-priority queues that go beyond severity ratings and known-exploited lists.

First Project: Compare One CVE's Exploit Probability with Its KEV Status

TechnologyJSON +1No Key

IntermediateSmall

Hourly public GitHub event archives for building repository-activity monitors without using BigQuery.

First Project: Count Event Types in One GitHub Hour

TechnologyJSON +1No Key

IntermediateSmall

Versioned adversary tactics, techniques, software, groups, mitigations, and relationships for building threat-model and detection-coverage tools.

First Project: Build an Enterprise Tactic-to-Technique Matrix

TechnologySTIX JSON +1No Key

IntermediateSmall

CVE records enriched with severity, weakness, reference, and affected-product data for building vulnerability monitors and exposure triage tools.

First Project: Monitor Recently Modified Vulnerabilities

TechnologyJSONNo Key

IntermediateTiny

Automated security-practice scores for public repositories for building dependency-acceptance checks and maintainer-risk reviews.

First Project: Review One Repository's Scorecard Checks

TechnologyJSONNo Key

IntermediateMedium

Package- and commit-resolved open-source advisories for building dependency exposure monitors and remediation queues.

First Project: Check One Pinned Python Package for Known Advisories

TechnologyJSONNo Key

BeginnerTiny

Internet routing, prefix, and ASN statistics for building network-visibility and prefix-lookup tools.

First Project: Look Up a Public DNS Prefix

TechnologyJSONNo Key