# Attributions & Credits - Precursor Intelligence

> This page credits the organisations and open projects whose data and research help power Precursor Intelligence, with the notice or licence that applies to each.

Canonical page: https://www.precursorintelligence.com/attributions

We gratefully acknowledge the organisations and projects whose work, data, and research help power the Precursor Intelligence platform.

## Data Sources & Organisations

### 1. NIST National Vulnerability Database (NVD)

- Link: [NVD](https://nvd.nist.gov/)

We use the U.S. National Institute of Standards and Technology (NIST) National Vulnerability Database (NVD) as a core source for CVE, CVSS, CPE, and related vulnerability metadata in our platform.

Notice: This product uses the NVD API but is not endorsed or certified by NIST or the NVD.

### 2. FIRST Exploit Prediction Scoring System (EPSS)

- Link: [EPSS](https://www.first.org/epss/)

We incorporate EPSS probability scores from FIRST to provide an estimate of the likelihood that a vulnerability will be exploited in the wild, helping users prioritise remediation beyond static severity scores.

Notice: EPSS data is provided by FIRST. This product is not endorsed by FIRST.

### 3. CISA Known Exploited Vulnerabilities (KEV) Catalog

- Link: [KEV Catalog](https://www.cisa.gov/known-exploited-vulnerabilities-catalog)

We reference the Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities Catalog to highlight vulnerabilities that are known to be actively exploited and to support risk-based prioritisation.

Notice: Data from the KEV Catalog is provided on an “as is” basis. CISA does not endorse Precursor Intelligence.

### 4. MITRE ATT&CK® Framework

- Link: [MITRE ATT&CK®](https://attack.mitre.org/)

We map threat actor behaviour and detection content to the MITRE ATT&CK® framework to provide a common language for tactics and techniques across our threat and detection features.

Notice: © 2026 The MITRE Corporation. MITRE ATT&CK® and ATT&CK® are registered trademarks of The MITRE Corporation.

### 5. Atomic Red Team

- Link: [Atomic Red Team](https://github.com/redcanaryco/atomic-red-team)

We reference Atomic Red Team tests from Red Canary to help users emulate adversary techniques and validate their detection coverage against techniques mapped to MITRE ATT&CK®.

Notice: Copyright © Red Canary, Inc. Used under the terms of the MIT License.

### 6. abuse.ch Ecosystem (MalwareBazaar, SSLBL, ThreatFox)

- Links: [MalwareBazaar](https://bazaar.abuse.ch/faq/), [SSLBL](https://sslbl.abuse.ch/about), [ThreatFox](https://threatfox.abuse.ch/faq/#commercial)

We use data from the abuse.ch projects MalwareBazaar, SSLBL, and ThreatFox to enrich malware and indicator-of-compromise (IoC) intelligence within our Threat Intelligence features.

Notice: Data from abuse.ch is provided on an “as is” basis. According to the project documentation, data is free for both non-commercial and commercial use.

## Related pages

- [Terms and Conditions](https://www.precursorintelligence.com/terms)
- [Privacy Policy](https://www.precursorintelligence.com/privacy-policy)
- Questions: info@precursorintelligence.com or https://www.precursorintelligence.com/contact
- Start free: https://www.precursorintelligence.com/register