Live Dashboard → https://fintechglobalcenter.github.io/FGC-Vulnerability-Dashboard/
A unified, browser-based security operations dashboard for FintechGlobalCenter that combines three threat intelligence sources to help engineering and security teams prioritise vulnerability remediation effectively.
| Source | Data |
|---|---|
| GitHub Dependabot | Open security alerts across all repos in your GitHub org |
| CISA KEV Catalog | Confirmed actively exploited vulnerabilities (auto-refreshed every 30 min) |
| FIRST EPSS | Daily exploitation probability scores (0–100%) per CVE |
The dashboard cross-references these sources to surface your highest-priority alerts — not just the most severe, but the ones most likely to be exploited right now.
- P1–P4 Priority Scoring — Each alert is automatically scored by combining CVSS severity, KEV status, and EPSS score
- KEV Cross-Reference — Instantly see which Dependabot alerts are confirmed exploited in the wild
- EPSS Scores — Know the exploitation probability for every CVE in your codebase
- SLA Tracking — Alerts are tracked against remediation deadlines (P1: 7d, P2: 30d, P3: 90d, P4: 180d) with breach alerts
- Alert Age — Colour-coded age indicator showing how long each alert has been open
- Per-Repo Breakdown — Click "Repos Affected" to see total, critical, high, medium, low, KEV hits, and Max EPSS per repository
- Clickable Stat Cards — Filter the alerts table instantly by clicking any stat card
- Latest KEVs Tab — Today's and yesterday's new CISA KEV additions shown by default
- Collapsible Panels — Clean up the view by collapsing sections you don't need
- How to Use Guide — Built-in 7-tab documentation covering all scoring systems, data sources, and SLA thresholds
- Auto-refresh — KEV catalog silently re-fetches every 30 minutes while the dashboard is open
You need a GitHub Personal Access Token (classic) with the following scopes:
| Scope | Purpose |
|---|---|
repo |
Read Dependabot alerts on private repositories |
security_events |
Access org-level Dependabot alert endpoint |
read:org |
List your GitHub organizations |
Generate one at: github.com/settings/tokens/new
- Open the dashboard at https://fintechglobalcenter.github.io/FGC-Vulnerability-Dashboard/
- Enter your GitHub PAT in the token field
- Click 🔍 Find my orgs & check scopes to verify your token and auto-fill your org slug
- Enter your org slug (e.g.
FintechGlobalCenter) - Click Load Dashboard
The dashboard will fetch Dependabot alerts, EPSS scores, and the KEV catalog, then render everything with priority scoring applied.
Each alert receives a P1–P4 priority based on three combined signals:
| Priority | SLA | Criteria |
|---|---|---|
| P1 🔴 | 7 days | Critical/High severity + KEV confirmed + high EPSS |
| P2 🟠 | 30 days | High severity, or KEV match, or EPSS ≥ 10% |
| P3 🔵 | 90 days | Medium severity, lower exploitation probability |
| P4 ⚫ | 180 days | Low severity, low EPSS |
A Medium-severity CVE with an EPSS score of 60% will outrank a Critical CVE with 0.1% EPSS. Always check both columns.
| Badge | CVSS Range | Meaning |
|---|---|---|
| 🔴 Critical | 9.0–10.0 | Remote code execution or full system compromise |
| 🟠 High | 7.0–8.9 | Significant impact, likely exploitable |
| 🟡 Medium | 4.0–6.9 | Limited impact or requires specific conditions |
| 🔵 Low | < 4.0 | Minimal impact, difficult to exploit |
| 🔥 KEV | Any | Confirmed actively exploited — treat as P1 regardless of CVSS |
| Source | Update Frequency | Authentication |
|---|---|---|
| GitHub Dependabot API | On load + manual refresh | Your PAT (never stored) |
| CISA KEV Catalog | Every 30 minutes (auto) | None |
| FIRST EPSS API | On load | None |
Your GitHub token is never stored, logged, or transmitted anywhere other than directly to GitHub's API. See SECURITY.md for full details on how credentials are handled.
No build step required. Simply open vuln-dashboard.html in Chrome or Edge:
# Clone the repo
git clone https://github.com/FintechGlobalCenter/FGC-Vulnerability-Dashboard.git
# Open in browser
open FGC-Vulnerability-Dashboard/vuln-dashboard.htmlOr use a local server (required if your browser blocks file:// fetches):
cd FGC-Vulnerability-Dashboard
python3 -m http.server 8080
# Then open http://localhost:8080/vuln-dashboard.htmlThis dashboard is maintained by the FintechGlobalCenter engineering team. To suggest improvements, open an issue or submit a pull request against the develop branch.
Copyright © 2026 FintechGlobalCenter. All rights reserved. See LICENSE for details.