AkihiroSuda/vexllm
silence negligible CVE alerts using LLM
This project helps security and DevOps engineers manage the flood of vulnerability alerts. It takes a JSON report from a vulnerability scanner like Trivy, processes it with an AI, and outputs a refined report in formats like `.trivyignore` or OpenVEX. This allows teams to automatically filter out "negligible" alerts, focusing only on real threats relevant to their specific application or environment.
Use this if you are overwhelmed by false positive or low-priority CVE alerts from your vulnerability scanner and want an AI to help intelligently silence them.
Not ideal if you prefer to manually review and justify every single vulnerability alert without AI assistance, or if you don't use Trivy or a similar scanner.
Stars
65
Forks
7
Language
Go
License
Apache-2.0
Category
Last pushed
Mar 02, 2026
Commits (30d)
0
Get this data via API
curl "https://pt-edge.onrender.com/api/v1/quality/llm-tools/AkihiroSuda/vexllm"
Open to everyone — 100 requests/day, no key needed. Get a free key for 1,000/day.
Higher-rated alternatives
GreyDGL/PentestGPT
Automated Penetration Testing Agentic Framework Powered by Large Language Models
berylliumsec/nebula
AI-powered penetration testing assistant for automating recon, note-taking, and vulnerability analysis.
ipa-lab/hackingBuddyGPT
Helping Ethical Hackers use LLMs in 50 Lines of Code or less..
MorDavid/BruteForceAI
Advanced LLM-powered brute-force tool combining AI intelligence with automated login attacks
mbrg/power-pwn
An offensive/defense security toolset for discovery, recon and ethical assessment of AI Agents