How do I subscribe to CVE updates?

Subscribe to CVE updates via RSS by adding https://casco.com/cve/feed.xml to your RSS reader or agent. The feed includes the 200 most recently updated CVEs with descriptions, severity, status, and links. You can poll every two minutes and use ETags for efficient updates.

How can I check if my installed dependencies have known vulnerabilities?

Submit up to 100 packages in one JSON request using the /cve/check endpoint, specifying ecosystem, package manager, name and version, or Package URLs. You can also submit an SBOM in CycloneDX or SPDX 2.x JSON format, or upload npm lockfiles directly.

How does Email Triage work?

Forward vulnerability reports to Casco. The agent parses the report into claims, resolves application context, attempts exploits safely, and returns a verdict with evidence showing which claims are valid and which are noise.

How long does Casco keep historical CVE data?

The feed retains approximately 30 days of change batches. If your checkpoint has expired, you must bootstrap the catalog again using the full catalog endpoint.

Cybersecurity

Casco

Autonomous security platform for vulnerability investigation and agent workflows

0 votes. Log in to rate Casco up Follow change log. Log in to follow Casco's change log

Casco is an autonomous security testing platform that investigates vulnerability reports, runs agent workflows, and provides reproducible evidence for security

Overview

A look at casco.com

Casco is an autonomous security platform built around investigated decisions rather than alerts. It receives security reports or targets, resolves business context, runs agent reasoning to test and verify claims, and returns verdicts backed by reproducible evidence. The platform includes Email Triage for automated report investigation, MCP Workflows to integrate with coding agents and internal systems, Context Refinement to prevent recurring false positives, a Slack Bot for team Q&A, and Network Observability to trace all testing activity. Every finding is evidence-backed and inspectable, with optional human supervision.

Feature notes

Public CVE API with RSS and JSON feeds
Dependency vulnerability checking for multiple package managers

Pricing

Pricing model: Contact for pricing

Follow change log. Log in to follow Casco's change log

Follow Casco to get an email when they post a milestone, ship a new product or add a demo video.

Casco at a glance

Community votes: 0
Followers: 0
HQ: United States

Casco metrics

Inspection sheet for casco.com: Ahrefs Domain Rating and Majestic link metrics, with the delta since the last inspection.
Metric	Value
Domain Rating	42 +1 (up) since last check
Trust Flow	14 no change since last check
Citation Flow	37 no change since last check
Referring domains	250 no change since last check
External backlinks	1,242 no change since last check

Domain Rating by Ahrefs inspected 7 Nov 2026, adjusted 5 Nov 2026. Primary topic: Computers/Programming/Languages (13). Majestic inspected 30 Oct 2026, adjusted 30 Oct 2026. Link data: Majestic. Trust Flow, Citation Flow and Topical Trust Flow are trademarks of Majestic-12 Ltd.

Casco domain diagnostics

Run through the diagnostics

Public RDAP record, last read 6 Nov 2026, 21:21 UTC.
Domain age	31 years
Registered	10 Aug 1995
Expires	9 Aug 2027
Registrar	Amazon Registrar, Inc.
DNSSEC	Not signed

Run the full check on casco.com

Casco post-launch diagnostics

Measured after Casco went live on Launching Pro on 30 October 2026.

Domain Rating (Ahrefs): 42 +1 (up) since launch; 41 at launch (30 Oct 2026), 42 on 7 Nov 2026
Trust Flow (Majestic): 14; First measured 30 Oct 2026
Referring domains (Majestic): 250; First measured 30 Oct 2026

Day 7 since launch. Next receipt: day 30, 29 Nov 2026. The figures report a change; they do not say what caused it, and many things can. No figure here is a guess.

Biggest gains on Launching Pro

Launch tips, free to read

The playbook on Launching Pro lists what to prepare, what to post on launch day and where else to list your product.

Before the day
Launch day
That week
Beyond launch

See the launch playbook

Compare and explore

FAQ

How do I subscribe to CVE updates?: Subscribe to CVE updates via RSS by adding https://casco.com/cve/feed.xml to your RSS reader or agent. The feed includes the 200 most recently updated CVEs with descriptions, severity, status, and links. You can poll every two minutes and use ETags for efficient updates.
How can I check if my installed dependencies have known vulnerabilities?: Submit up to 100 packages in one JSON request using the /cve/check endpoint, specifying ecosystem, package manager, name and version, or Package URLs. You can also submit an SBOM in CycloneDX or SPDX 2.x JSON format, or upload npm lockfiles directly.
How does Email Triage work?: Forward vulnerability reports to Casco. The agent parses the report into claims, resolves application context, attempts exploits safely, and returns a verdict with evidence showing which claims are valid and which are noise.
How long does Casco keep historical CVE data?: The feed retains approximately 30 days of change batches. If your checkpoint has expired, you must bootstrap the catalog again using the full catalog endpoint.

Leave a review for Casco

No reviews of Casco yet. Run the first inspection.

Reviews are free and are never paid for. Open the reviews

Reviews and notes · Change log · Share the profile · Maker of this product? Claim the profile · Report a fault

Comparable tools

Bugcrowd0 community votes
DivoltDR 18 · 0 community votes
StealthMoleDR 33 · 0 community votes
mlab.shDR 26 · 0 community votes

Feature notes

Pricing

Compare and explore

Leave a review for Casco

More on this profile