Software vulnerability analysis
Enter a vendor, product, and optional version to retrieve CVE candidates and review ranked results.
ROJX / VULNERABILITY INTELLIGENCE
Smarter vulnerability intelligence for your business.
Identify potentially relevant software vulnerabilities, understand affected products, and prioritize security investigations with AI-assisted analysis.
Assess a single software product, analyze a CSV inventory, or connect your own tools through the ROJX API.
HOW THE PLATFORM WORKS
Four steps. One clear workflow.
-
Identify
Enter the vendor, product and optional version.
-
Analyze
Retrieve potentially relevant CVE candidates.
-
Prioritize
Review AI-assisted candidate rankings.
-
Integrate
Download results or use the secure API.
VULNERABILITY KNOWLEDGE
Built around a substantial vulnerability index
Illustrative index scale. Figures below are approximate reference values, not live database totals; the authenticated dashboard shows current values from the configured index.
≈ 295,315Total CVE records
≈ 42,563Indexed vendor identities
≈ 176,875Indexed vendor/product pairs
≈ 1,357,995CPE association records
PLATFORM CAPABILITIES
Vulnerability insights that fit your workflow
Use software identity information to find potentially relevant CVEs, review AI-assisted rankings, and make the output accessible to your team or existing systems.
AI-powered candidate ranking
Focus security investigation on potentially relevant CVE candidates using the configured ranking engine.
Bulk CSV assessment
Submit multiple software products together and download consolidated results in original input order.
Vulnerability intelligence dashboard
Explore indexed vulnerability records and your recent analysis history after signing in.
Secure REST API
Connect existing applications using user-managed access tokens, documented payloads, and structured responses.
Exportable assessment results
Download findings in CSV format to support documentation and downstream workflows.
UNDERSTANDING SECURITY ASSESSMENTS
Vulnerability Assessment vs. Penetration Testing
Both approaches support better security decisions, but they answer different questions.
Vulnerability Assessment
Typically broad and systematic, using automated tools and available evidence to identify and catalog known or potential weaknesses without intentionally exploiting them.
Focus: visibility, coverage, and prioritization.
Penetration Testing
A scoped security exercise in which authorized testers attempt controlled exploitation of selected weaknesses to understand potential attack paths and real-world impact.
Focus: exploit validation and practical impact.
ROJX Vulnerability Intelligence currently provides software-based CVE candidate analysis; it is not a penetration test and does not itself perform a complete network vulnerability assessment.
QUESTIONS & ANSWERS
Everything you need to know.
Clear answers about assessments, results, software inventory and integration, before you get started.
What information do I need to run an assessment?
Enter the software vendor and product. Version is optional, although a known version provides additional context for analysis.
Does ROJX confirm that a system is vulnerable?
No. ROJX retrieves and ranks candidate CVEs based on available software information. Confirming applicability or exploitability requires further evidence and technical validation.
Can I assess multiple software products at once?
Yes. Upload a CSV with vendor, product and version columns. The application preserves input order and provides downloadable results.
Do I need to upload my full network asset inventory?
No. This product-based service only requires software identity fields. Network IP addresses and a full asset inventory are not required. Submitted analyses are saved to your account.
Can I connect ROJX with an existing application?
Yes. Manage API tokens in your account and use the documented REST API for product assessments and result retrieval.
Is this the same as penetration testing?
No. This application analyzes software-based CVE candidates; it does not scan networks or attempt to exploit systems. Penetration testing is a separate, authorized security exercise.
ROJX VULNERABILITY INTELLIGENCE