Threat and vulnerability intelligence hub
Build a single-page web application in React that recreates the core functionality of CISA's Known Exploited Vulnerabilities (KEV) Catalog — a reference used by security and IT teams to track actively exploited vulnerabilities. Data model: Each vulnerability entry should include: CVE ID, vendor/project, product, vulnerability name, date added, short description, required remediation action, remediation due date, and a "known ransomware use" flag (Yes/No). Layout: Use a persistent left-hand navigation panel with these sections, each of which the user can click into to drill down: Dashboard — landing view with rollup metrics Full Catalog — searchable, sortable table of all entries By Vendor — entries grouped by vendor with counts By Product — entries grouped by product with counts Ransomware-Linked — filtered to entries flagged for known ransomware use Remediation Status — entries split into Overdue, Due Soon (next 14 days), and On Track based on due date Rollup data (show on the Dashboard): total vulnerabilities tracked, number added in the last 30 days, number linked to ransomware campaigns, count overdue vs. due soon, and a breakdown of the top vendors by vulnerability count (a simple bar chart is fine). Drill-down behavior: Clicking any vendor, product, or summary metric should filter the catalog table to the matching entries. Clicking a single CVE row should open a detail view showing all fields for that entry. Keep the design clean and professional — a security operations look. Make it responsive and self-contained.
What this prompt builds
A React-based dashboard that aggregates vulnerability intelligence from multiple sources into a unified view of known exploited vulnerabilities. Modeled after CISA's KEV catalog, it provides security and IT teams with searchable, filterable views of CVEs grouped by vendor, product, ransomware linkage, and remediation status. The workflow delivers rollup metrics, drill-down capabilities, and tracking of remediation timelines to help teams prioritize patching efforts.
The problem
Security and IT teams struggle to keep pace with newly published and actively exploited vulnerabilities when threat intelligence is scattered across multiple tools and feeds. This workflow consolidates vulnerability signals into a single, searchable hub modeled after CISA's Known Exploited Vulnerabilities catalog. It surfaces critical data — CVE IDs, affected vendors and products, ransomware linkage, and remediation deadlines — in one place, with rollup metrics, drill-down views by vendor or product, and status tracking to help teams quickly identify what needs patching and when.
Solution and impact
The workflow delivers a unified vulnerability feed that cuts through the noise of fragmented threat intelligence. Security and IT teams gain a single source of truth for tracking exploited CVEs, identifying ransomware-linked threats, and monitoring remediation timelines, enabling faster triage and more focused patching efforts. By grouping vulnerabilities by vendor, product, and risk status, the workflow reduces the time spent hunting for critical updates and helps teams stay ahead of emerging threats.