Feedback Wanted: VIPER – My AI-Powered Open-Source CTI & Vulnerability Prioritization Tool

Hey everyone,

I'm excited to share VIPER (Vulnerability Intelligence, Prioritization, and Exploitation Reporter), an open-source project I've been developing to help tackle the challenge of vulnerability overload in cybersecurity. 🐍🛡️

What VIPER currently does:

• Gathers Intel: It pulls data from NVD (CVEs), EPSS (exploit probability), the CISA KEV catalog (confirmed exploited vulns), and Microsoft MSRC (Patch Tuesday updates).
• AI-Powered Analysis: Uses Google Gemini AI to analyze each CVE with this enriched context (EPSS, KEV, MSRC data) and assign a priority (High, Medium, Low).
• Risk Scoring: Calculates a weighted risk score based on CVSS, EPSS, KEV status, and the Gemini AI assessment.
• Alert Generation: Flags critical vulnerabilities based on configurable rules.
• Interactive Dashboard: Presents all this information via a Streamlit dashboard, which now also includes a real-time CVE lookup feature!

The project is built with Python and aims to make CTI more accessible and actionable.

You can check out the project, code, and a more detailed README on GitHub: VIPER

I'm at a point where I'd love to get your feedback and ideas to shape VIPER's future!

We have a roadmap that includes adding more data sources (like MalwareBazaar), integrating semantic web search (e.g., with EXA AI) for deeper threat context, enhancing IOC extraction, and even exploring social media trend analysis for emerging threats. (You can see the full roadmap in the GitHub README).

But I'm particularly interested in hearing from the community:

1. Usefulness: As cybersecurity professionals, students, or enthusiasts, do you see tools like VIPER being helpful in your workflow? What's the most appealing aspect?
2. Missing Pieces: What crucial data sources or features do you think are missing that would significantly increase its value?
3. Prioritization & Risk Scoring: How do you currently prioritize vulnerabilities? Do you find the combination of CVSS, EPSS, KEV, and AI analysis useful? Any suggestions for improving the risk scoring logic?
4. AI Integration: What are your thoughts on using LLMs like Gemini for CTI tasks like analysis, IOC extraction, or even generating hunt queries? Any specific use cases you'd like to see?
5. Dashboard & UX: For those who might check out the dashboard (once I share a live version or more screenshots), what kind of visualizations or interactive elements would you find most beneficial?
6. Open Source Contribution: Are there any specific areas you (or someone you know) might be interested in contributing to?

Any thoughts, criticisms, feature requests, or even just general impressions would be incredibly valuable as I continue to develop VIPER. My goal is to build something genuinely useful for the community.

Thanks for your time and looking forward to your insights!