Overview
This document outlines the details of a new threat intelligence feed provider (VulnCheck) that will be added to our SAFE and Balbix platforms, helping users achieve better prioritization and more accurate Exposure Scores aligned with the actual threat landscape. With the addition of this new source, the previous threat intelligence feed provider (Recorded Future) will be switched off and the vulnerability and exploit intelligence will be migrated to VulnCheck in addition to other existing sources mentioned here.
Threat Intel Source Details
VulnCheck provides vulnerability and exploit intelligence with the following key differentiators:
14 Days faster than NVD
Respond faster by having information on average 14 days ahead of the NIST NVD.
Most Exploits
Industry's largest and most accurate collection of exploit proof-of-concept code and evidence of exploitation in the wild.
Timelines
This new intel feed source will be active from 1st June 2026 onwards.
Impact for Balbix Customers
As a user, you may see the changes below for specific vulnerabilities:
A CVE may have new tags added from the list below. For example, a given CVE that has previously been tagged as ‘Malware Linked’ may also be tagged as ‘Known Exploit’ based on enhanced threat intelligence from VulnCheck feeds.
CISA Known Exploit
Exploit Kit Available
Known Exploit
Malware Linked
OWASP Top 10
Ransomware Linked
The Exposure Score and severity of certain vulnerabilities may change if there is additional, more accurate, threat intel information from this new source. Based on our internal simulation exercise:
The score change is approximately between 1-5 (out of 100) if the CVE already has existing tags
The score change is approximately between 1-20 (out of 100) if the CVE doesn’t have existing tags
Conclusion
With VulnCheck added as a threat intelligence feed, your Exposure Score will more closely reflect the threats your organization actually faces, so your team can prioritize with increased confidence.