Vuln Report Rap Sheet
A free first read for incoming vulnerability reports. See whether a report is concrete and checkable, whether it has been seen before, and where an analyst's time is best spent. Built by PSIRTlings for PSIRTlings™.
How it works
Section 01 · WorkflowSubmit
Paste, upload, or link a report.
Redact
PII and secrets scrubbed before storage.
Analyze
Check claims, find duplicates, give a first read.
Results
Score, matches, and triage in seconds.
Heads up: We try to remove personal data, secrets, credentials and company names before storing or comparing your report, but the matching is pattern-based and can miss things. If the report contains sensitive details, remove them yourself first.
Still being tuned: VulnRap is under active development. Its scores help you read faster; they are not a verdict. When we tested on public reports the scorer had never seen, the built-in heuristic score on its own was a weak predictor of what programs decided, and the optional AI second opinion did noticeably better (the numbers and the caveats are in the changelog). Use both as a first read and keep a person in the loop. If you would rather not send a report at all, the private option keeps no text. VulnRap is an open source project; the code is private for now while we review it, and we will publish it again once that review is done.
Stored: fingerprints and scores only, never your text. Secrets and personal data are redacted first. AI second opinion is on: the redacted text goes to Cloudflare Workers AI.
Free and anonymous. No account required. Read our privacy policy to learn exactly what we store.
Redact, dedupe, score
Section 02 · How we score itTap any card to see what we redact, how duplicates are detected, and how the score is composed.