Open Source Vulnerability Tracking Service

Overview

Aptori has introduced a new Open Source Vulnerability Tracking Service, a background service designed to continuously track and contextualize vulnerabilities across open-source software ecosystems. The service operates as a dedicated component within the Aptori Platform, ensuring customers always have access to the most current vulnerability intelligence.

What This Service Does

The Open Source Vulnerability Tracking Service continuously monitors and aggregates vulnerability data from a broad set of distributed sources. It enriches this data with exploitability and threat context to support more accurate risk prioritization across applications and dependencies.

Key capabilities include:

• Continuous tracking of newly disclosed open-source vulnerabilities
• Daily updates to ensure timely and current vulnerability intelligence
• Correlation of vulnerability data with exploitability signals
• Integration of EPSS scores to assess likelihood of exploitation
• Inclusion of Known Exploited Vulnerabilities (KEV) to highlight active threat exposure

How It Works

• The service runs as a separate pod within the Aptori Platform
• Vulnerability intelligence is aggregated from multiple distributed sources and normalized into a unified model
• Data is refreshed daily to reflect newly disclosed vulnerabilities and changes in exploitability status
• Enriched vulnerability context is made available to Aptori’s analysis, prioritization, and remediation workflows

Deployment Details

• Deployed automatically as part of the Aptori Platform
• Runs independently to avoid impact on scanning or analysis performance
• Requires 10 GiB of ephemeral storage, which is automatically requested by the Aptori Platform Helm charts
• Customers should ensure their Kubernetes clusters can support pods with this storage requirement

Why This Matters

This service strengthens Aptori’s vulnerability management and CTEM capabilities by ensuring decisions are based on:

• Current, real-world threat activity
• Exploit likelihood, not just severity scores
• A comprehensive and continuously updated view of open-source risk

By combining vulnerability discovery with exploit intelligence, security and development teams can focus remediation efforts on the issues that truly matter.

Availability

The Open Source Vulnerability Tracking Service is available as part of the Aptori Platform and is enabled automatically with supported deployments.

‍