FlagThis - Preferences & About

This is a prototype and a side project which can go down anytime. This is a testbed for me to play with the latest available in AI to build cool new tools on areas I am deeply passionate about. Security is something I've been focused on for a long time, and I've built a version of this site multiple times in the last few years. This latest iteration so far is the best and built the fastest.

FlagThis is powered by a collection of automated news and feed crawlers, combined with complex analysis using NLP tools and state-of-the-art models like Google Gemma 4. The engine autonomously extracts critical and relevant information, clustering related updates together in a structured layout designed specifically to be most meaningful and actionable for security analysts.

Our repository analysis engine scans package manifests (like package.json, requirements.txt, Cargo.toml, etc.) and cross-references dependencies against the OSV (Open Source Vulnerabilities) database to profile open-source supply chain risk.

Our vulnerability dashboard aggregates records from the official MITRE CVE List (v5). To calculate threat velocity and prioritize risk, we enrich CVEs with CISA KEV (Known Exploited Vulnerabilities), EPSS (Exploit Prediction Scoring System) probabilities, public GitHub Proof of Concept (PoC) directories, and real-time rolling discussion counts tracked from the public Mastodon and Bluesky search streams. CVSS scores, affected vendor/product, and CPE configuration data are sourced from the National Vulnerability Database (NVD) API. This product uses the NVD API but is not endorsed or certified by the NVD.

Note: As an experimental system driven by AI, data may occasionally be incomplete or contain hallucinations. Always independently verify critical intelligence.