# CVEngine connects attack-surface discovery with CVE validation

Canonical source : [CVEngine connects attack-surface discovery with CVE validation](<https://sebastien.rigaux.be/en/tech-watch/links/cvengine-connects-attack-surface-discovery-with-cve-validation>)

CVEngine brings continuous asset discovery, vulnerability scanning, and matching against exploited CVEs into a self-hosted platform. It aims to prioritize flaws that actually apply, using read-only validation and evidence rather than presenting only a list of alerts.

Version 1.3 adds Sentinels to run scans from private networks, along with an OpenVAS integration that is disabled by default. Results feed the same inventory and severity ratings; the tool also provides a REST API and MCP integration.

- Selected on : 2026-10-31

- Entry updated : 2026-11-07T20:32:37+0000

- Format : Tool

- Source language : EN

- Credit : hevnsnt

Original resource : [CVEngine connects attack-surface discovery with CVE validation](<https://github.com/hevnsnt/CVEngine>)

Tags : [Security](<https://sebastien.rigaux.be/en/tech-watch/tags/security>) · [Penetration testing](<https://sebastien.rigaux.be/en/tech-watch/tags/penetration-testing>) · [Self-hosting](<https://sebastien.rigaux.be/en/tech-watch/tags/self-hosting>)

Available versions : [Français](<https://sebastien.rigaux.be/veille/liens/cvengine-relier-decouverte-de-surface-dattaque-et-validation-des-cve>) · [English](<https://sebastien.rigaux.be/en/tech-watch/links/cvengine-connects-attack-surface-discovery-with-cve-validation>)

[Back to tech watch](<https://sebastien.rigaux.be/en/tech-watch>)