by Kastro Critical, connected.
Feeds, public data, and agent access in one place. All public outputs are independent of your personal filters.
RSS feed
Subscribe in your feed reader to follow the current ranked digest and open each full CVE record.
https://critical.is/feed.xml
JSON API
GET /api/digest returns ranked CVEs, CVSS scores, KEV signals, EPSS probabilities, priority breakdowns, and upstream freshness. No API key is required.
curl https://critical.is/api/digest
The response includes sample, generatedAt, and ranked. Sample responses are labelled; personal watchlists, ignores, and blocklists do not affect the public data. Responses may be cached for five minutes.
MCP
The MCP server is planned and is not available yet. Agents can fetch the JSON digest today and open source-backed records at /cve/{id} using the returned CVE IDs.
Sources & methodology
Critical is a Kastro project tracking vulnerabilities rated CVSS 9.0 or higher by at least one source. The priority score combines severity with CISA KEV, EPSS percentile, exploit signals, and SSVC. Individual records show the score breakdown and links to original references.
Collection runs daily at 06:00 UTC. Known-exploitation signals refresh hourly at :15. The brief shows the collection time and upstream freshness; a missing or stale signal does not mean a vulnerability is safe.
- CVE List: canonical CVE records and CISA ADP/Vulnrichment
- CISA Known Exploited Vulnerabilities catalog
- NVD: additional CVSS assessments
- FIRST EPSS: exploitation probability
AI summaries are not yet generated. Excerpts labelled “From CVE record” are source text. Public exploit discovery is planned; current exploitation indications come from KEV and SSVC.