✨ New experience for SCA security risks (OSS vulnerabilities)
We’ve refreshed the SCA Security Risks experience to make vulnerability triage faster, clearer, and more consistent across providers.
What’s new
Deduplication across providers
Apiiro now automatically deduplicates different identifiers and aliases of the same vulnerability reported by multiple SCA vendors and tools.
You get one unified view of each vulnerability, with the option to set a preferred SCA vendor in SCA Settings to resolve data conflicts.
New CVE Pane
Click a Vulnerability ID to open a new CVE triage experience with:
LLM-generated structured descriptions
Triage guidance
Exploit hints and vulnerable methods
No more digging through long, unstructured advisories.
🔒 No proprietary customer information is shared with the LLM.
Provider-specific tabs
While vulnerabilities are consolidated in a single table, full provider data is still available in dedicated tabs for deeper analysis.
CVSS v4 support
- In addition to CVSS v2 and v3, Apiiro now supports CVSS v4 for the most up-to-date severity scoring.
