A high-level technical overview for product evaluators

The product uses a React and TypeScript browser application with AWS-managed services for authentication, APIs, serverless processing, storage, scheduled work and email delivery. Users interact with public pages or authenticated dashboard and settings workflows.

CVE-related information is aggregated from public third-party sources. The product can help users organise and act on vulnerability information, but it does not guarantee third-party data completeness, uninterrupted availability or security outcomes.

The browser application uses API routes and serverless processing for authenticated product workflows. DynamoDB is the primary persistence technology in the repository for CVE-related, user, organisation and workflow records. No public OpenAPI or Swagger contract is present in the repository, so API consumers should confirm the approved integration scope before relying on an interface.

Scheduled processing and external providers are part of the operating model. Source freshness, alert delivery, reporting, retention and recovery should be assessed using owner-provided production evidence; this public page does not claim a service-level agreement or operational guarantee.

Use the offer for public commercial scope, the security and data overview for public security context, and the legal pages for terms, privacy and data-processing information. Additional evidence should be requested through the procurement process.