security
CSAF
Common Security Advisory Framework
Definition
CSAF is an OASIS standard for machine-readable security advisories that replaces the older CVRF format. It defines a JSON schema for publishing vulnerability advisories, including VEX documents, in a way that automated tools can ingest and process.
Vendors publish CSAF documents so downstream consumers can programmatically determine their exposure.
Can this ship? Are we exposed? Can you prove it?
Every CISO is asking these three questions. We answer them with facts, not guesses, from repository to runtime.