Everything is answering.

Each data source and the database answered a test request just now.

Checked 6 October 2026 at 16:47 UTC, from this server. Results are reused for up to a minute, so reloading won’t always run the checks again.

OSV.dev vulnerability databaseWorkingAnswered a test query in 362 ms.
CISA Known Exploited VulnerabilitiesWorkingVersion 2026.10.04, 1,734 entries, fetched 2026-10-06.
FIRST EPSS exploit prediction scoresWorkingLatest scores dated 2026-10-06.
sbomtriage databaseWorkingAnswered a test read.

What each one affects

OSV.dev: Every component is matched against OSV.dev. If it doesn’t answer, scans can’t finish, because a scan with no advisory data would look like a clean result.
CISA KEV and FIRST EPSS: These decide what’s known exploited or likely to be. If either is missing, scans still finish. Every finding says the exploit data was incomplete, and the grade is withheld.
The database: Reports, projects and sign-in live here. If it doesn’t answer, nothing can be saved or opened.

About this page

The checks run live when you open the page. The page keeps no history, so it can’t tell you about an outage that has already ended, and there’s no uptime commitment behind it. A source marked unknown couldn’t be checked, and that never counts as working.

The same answer is available as JSON at /api/status. It holds only what’s on this page, with no accounts, reports or counts of either.