14 sources5 within SLA

FRESHNESSSource freshness

Live SLA report for every external feed the cs-graph ingests — MITRE STIX, CISA KEV, FIRST EPSS, NVD, MISP-Galaxy, HIBP, LOLBAS, GTFOBins, EUR-Lex compliance. The corpus is only as fresh as its slowest feed; this page makes the freshness public so defenders + auditors can decide whether a given query is timely. Authored by Adam Lundqvist, Founder at SQUR.

5

within SLA

9

no SLA data

SourceSLALast fetchedAgeUpstream / corpusWithin SLA
MITRE ATT&CK STIXweeklyv19.1 · 843 ours
MITRE CWEquarterly · 970 ours
CISA KEVweekly2026-06-15T06:00:24.891Z4 d agoyes
NVD year feedsmonthly2026-06-19T05:01:27.799Ztodayyes
FIRST.org EPSSdaily2026-06-19T04:36:28.106Ztodayyes
MISP-Galaxymonthly2026-06-19T05:45:45.275Ztodayyes
GitHub Security Advisoriesdaily2026-06-19T05:32:36.334Ztodayyes
HIBPweekly1,005 upstream · 978 ours
MITRE CAPECquarterly · 615 ours
MITRE ATLASquarterlyv2026.05 · 221 ours
MITRE D3FENDquarterly · 271 ours
LOLBASmonthlycommit 2026-06-14 · 712 ours
GTFOBinsmonthlycommit 2026-05-27 · 0 ours
EUR-Lex / NIST / OWASP / CIS / ISO seedsrelease-driven2026-06-19T06:15:35.147Ztoday

A source out of SLA does not invalidate the corpus — it just means downstream data from that source is older than the publish-cadence SQUR committed to. KEV (CISA) targets weekly, EPSS daily, MITRE STIX/CWE quarterly, MISP-Galaxy + LOLBAS continuous, EUR-Lex on amendment.

Ingest activity

Last recorded run + latest batch for each automated ingest job — proof the corpus is actively maintained, straight from each feed's run log.

FeedSourceLast runAgeLatest batch
CISA KEVcisa.gov2026-06-15T06:00:15.966Z4 d ago7 new CVEs
NVD CVE deltanvd.nist.gov2026-06-19T05:00:38.009Ztoday503 CVEs in window
FIRST EPSSfirst.org/epss2026-06-19T04:30:37.694Ztoday29,839 scores updated
GitHub Advisoriesgithub.com/advisories2026-06-19T05:30:40.629Ztoday5,000 advisories
MISP-Galaxygithub.com/MISP2026-06-19T05:45:43.257Ztoday0 actors written
EUR-Lex amendmentseur-lex.europa.eu2026-06-19T06:15:35.022Ztoday0 amendments flagged
Tier breakdown + per-edge provenance at /audit. Methodology at /about/methodology. Anomaly? ops@squr.ai.