Making intelligence relevant
I built ThreatNet to correlate threat intelligence with the bank's asset inventory. The service brings together eight feeds, including CISA's Known Exploited Vulnerabilities catalog, the National Vulnerability Database, and FIRST's Exploit Prediction Scoring System.
Turning volume into priorities
A custom risk score on a 0–100 scale narrows approximately 700 daily records to 1–5 actionable items. Correlating those records with asset inventory makes the output specific to the environment being protected.
The service is built with Python, FastAPI, and SQLAlchemy.