I build heretix, a self-hosted, open-source (Apache-2.0) suite that tracks CVEs across servers, containers and network appliances in one inventory.
| Repository | What it does |
|---|---|
| heretix-cli | Scanner: package inventory of hosts and container images as CycloneDX SBOMs |
| heretix-api | Vulnerability database API: NVD, OSV, CISA KEV, EPSS, distro errata and vendor PSIRTs |
| heretix-management | Console: asset inventory, alert triage, SLA, VEX, Slack |
- Bugs and questions: open an issue in the relevant repository (cli · api · management)
- Email: admin@titsolutions.net


