CYसंस्थाएँ
Cybermalveillance.gouv.fr
Assistance and awareness resources for French audiences.
अंतरराष्ट्रीय साइबर पोर्टल / DIRECTORY
विशेषज्ञता की दुनिया।
सार्वजनिक संस्थाएँ, प्रतिक्रिया टीमें, कंपनियाँ और अनुसंधान। अपने देश और ज़रूरतों के लिए सही स्रोत खोजें।
FIRST प्रोफ़ाइल का वितरण · 883
स्नैपशॉट में प्रोफ़ाइल : 883 ·
- Government, Private and Public sectors
252 / 883 252 - Other commercial
207 / 883 207 - Industrial sector
95 / 883 95 - Financial sector
94 / 883 94 - ICT vendor customer base
57 / 883 57 - क्षेत्र नहीं बताया गया
50 / 883 50 - Government & military
46 / 883 46 - Research & education
45 / 883 45 - ISP customer base
37 / 883 37
देश और क्षेत्र से सेवा का दायरा तय नहीं होता। आधिकारिक प्रोफ़ाइल पर शर्तें जाँचें। FIRST ↗
INअनुसंधान और प्रशिक्षण
Inria
Research in digital science and technology.
NCसंस्थाएँ
NCSC · United Kingdom
Technical guidance, alerts and protection resources.
INसंस्थाएँ
INCIBE
Cybersecurity resources for businesses and citizens.
CEसंस्थाएँ
CERT.br
Incident response and security awareness in Brazil.
IPसंस्थाएँ
IPA · Japan
Information security, software and digital skills.
NAरक्षा
NATO CCDCOE
Cyber defence research, training and exercises.
ITसंस्थाएँ
ITU · Cybersecurity
International cooperation and digital capacity building.
OWसमुदाय और मानक
OWASP Foundation
Open projects for application and AI security.
ARअनुसंधान और प्रशिक्षण
arXiv
Scientific preprints; peer review is not guaranteed.
HUनिजी क्षेत्र
Hugging Face
AI models, datasets and open tools.
POनिजी क्षेत्र
PortSwigger Web Security Academy
Web security learning in authorised labs.
BEसमुदाय और मानक
Bellingcat
Open-source verification methods and resources.
FIसमुदाय और मानक
FIRST · CVSS
Vulnerability severity specification and calculators. A score alone does not describe organisation-specific risk.
संदर्भ विवरण
- सत्यापित डेटा या मानक
- CVSS 4.0 scores run from 0.0 to 10.0. Base, Threat, Environmental and Supplemental metric groups serve different purposes.
- उपयोग कैसे करें
- Retain the score version, vector and date. Compare it with the installed version, access paths and business consequences before ordering remediation.
- ध्यान में रखने योग्य सीमा
- A high score is not evidence of exploitation; a low score does not mean a service has no risk.
दस्तावेज़ जाँच की तारीख
CVSS, EPSS, KEV और VEX
What is the technical severity under the assessed metrics?
The score proves neither exploitation nor consequences for your service.
Read the CVSS, EPSS, KEV and VEX reference →
Primary sources and scope
- FIRST · CVSS 4.0 Specification · CVSS 4.0 · document 1.2 · reviewed 2026-10-22
Overview · Assessment · Nomenclature · Supplemental Metrics
Sources checked on
CVसमुदाय और मानक
CVE Program
Public vulnerability identifiers and records. Check products, affected versions and links to original advisories.
संदर्भ विवरण
- सत्यापित डेटा या मानक
- A JSON schema defines the CVE record format. An identifier and the published contents of its record are distinct things.
- उपयोग कैसे करें
- Open the record and references; check its state, described affected versions and supplier information. Keep the identifier in action tracking.
- ध्यान में रखने योग्य सीमा
- A CVE identifier is neither a severity score nor proof that your installation is affected.
दस्तावेज़ जाँच की तारीख
NIसंस्थाएँ
NIST · National Vulnerability Database
Vulnerability database and technical enrichment. Cross-check records against vendor advisories and the deployed configuration.
NIसंस्थाएँ
NIST · AI Risk Management Framework
Voluntary framework and resources for documenting AI risks. Check the version and status of consulted documents.
संदर्भ विवरण
- सत्यापित डेटा या मानक
- The AI RMF Core is organised around Govern, Map, Measure and Manage. It is a voluntary risk-management framework.
- उपयोग कैसे करें
- Define intended use, affected people and error consequences. Connect each risk to an evaluation, owner and stop or recovery mechanism.
- ध्यान में रखने योग्य सीमा
- The framework certifies neither a model nor an application. Using it does not remove the need to examine applicable requirements.
दस्तावेज़ जाँच की तारीख
OWसमुदाय और मानक
OWASP · GenAI Security Project
Open risk reference for LLM and generative AI applications, including prompt injection, disclosure and excessive permissions.
संदर्भ विवरण
- सत्यापित डेटा या मानक
- The 2025 edition includes Prompt Injection, Sensitive Information Disclosure and Excessive Agency.
- उपयोग कैसे करें
- Turn a risk into an observable scenario: hostile document, restricted data or out-of-scope tool. Record expected behaviour and evidence of refusal.
- ध्यान में रखने योग्य सीमा
- A risk list is not a complete assessment. Input filtering alone does not establish authorisation for every action.
दस्तावेज़ जाँच की तारीख
RAG: पहुँच अधिकार, उद्धरण और कैश
An accurate answer can disclose a forbidden document. Retrieval relevance, citation validity and access authorisation are separate checks. The service providing passages must enforce the current identity’s rights before exposing them to the model.
- OWASP · LLM08:2025 Vector and Embedding Weaknesses · 2025
- OWASP · LLM01:2025 Prompt Injection · 2025
- OWASP · LLM06:2025 Excessive Agency · 2025
- OWASP · LLM05:2025 Improper Output Handling · 2025
- OWASP · LLM07:2025 System Prompt Leakage · 2025
- OWASP · LLM10:2025 Unbounded Consumption · 2025
- OWASP · API1:2023 Broken Object Level Authorization · 2023
Explore the RAG access matrix and replay cases →
References consulted on
W3समुदाय और मानक
W3C · Web Accessibility Initiative
Standards, evaluation methods and web accessibility resources. Supports complete journey testing beyond automated checks.
GOनिजी क्षेत्र
Google · Search Central
Official documentation on crawling, indexing and AI features in Google Search. Does not guarantee rankings or citations.
IAसमुदाय और मानक
IANA · Protocol Registries
Internet protocol parameter registries and related references. Use to check codes and numbers against their standardised context.
MIअनुसंधान और प्रशिक्षण
MITRE · Common Weakness Enumeration
Name classes of software and hardware weakness.
संदर्भ विवरण
- सत्यापित डेटा या मानक
- A CWE describes a weakness that can contribute to vulnerabilities. It does not represent a particular incident.
- उपयोग कैसे करें
- Connect the weakness to the observed mechanism: input, processing and missing control. Use it to fix the cause and plan regression tests.
- ध्यान में रखने योग्य सीमा
- A keyword in a report alone does not establish the correct CWE classification.
दस्तावेज़ जाँच की तारीख
W3समुदाय और मानक
W3C · WCAG 2.2
Evaluate accessibility criteria for web content.
संदर्भ विवरण
- सत्यापित डेटा या मानक
- WCAG 2.2 is a W3C Recommendation. Success criteria have A, AA and AAA levels.
- उपयोग कैसे करें
- Define tasks, pages and states, then combine inspection, keyboard, zoom and relevant assistive technology. Keep reproduction steps for barriers.
- ध्यान में रखने योग्य सीमा
- An automated scanner does not establish conformity of a complete journey. Evaluation must cover interactive states and actual content.
दस्तावेज़ जाँच की तारीख
GOनिजी क्षेत्र
Google · Core Web Vitals
Distinguish loading, responsiveness and visual stability.
संदर्भ विवरण
- सत्यापित डेटा या मानक
- Good thresholds are LCP ≤ 2.5 s, INP ≤ 200 ms and CLS ≤ 0.1 at the 75th percentile, segmented by mobile and desktop.
- उपयोग कैसे करें
- Separate field measurement from laboratory tests. Record period, URL, device, population and sample size before comparing changes.
- ध्यान में रखने योग्य सीमा
- These thresholds are not measured results for this site. A good lab score alone does not establish visitor experience.
दस्तावेज़ जाँच की तारीख