DevCycle becomes a CVE Numbering Authority

In the ever-evolving realm of cybersecurity, staying ahead of vulnerabilities is not just an option—it's a necessity. That's why we're thrilled to announce a significant milestone for DevCycle. We have been officially authorized by the CVE Program as a CVE Numbering Authority (CNA). This marks a new chapter in our commitment to cybersecurity excellence and a safer digital world.

The CVE (Common Vulnerabilities and Exposures) Program plays a pivotal role in the global cybersecurity ecosystem, with a mission to identify, define, and catalog publicly disclosed cybersecurity vulnerabilities. This initiative ensures that cybersecurity professionals across the globe are aligned when discussing a vulnerability, fostering a unified approach to threat identification and resolution.

Being a CVE Numbering Authority marks a practical step forward for DevCycle. This role allows us to streamline how we address vulnerabilities, contributing to the broader cybersecurity community in a more structured way. We remain committed to delivering a secure, reliable feature-flagging platform that authentically engages with the open-source community.
- Jonathan Norris, DevCycle Co-founder and CTO.

At the heart of CVE's success is its community-driven approach. From the CVE Board to working groups, the program is fuelled by the insights and dedication of experts from academia, industry, and government. This collaborative spirit ensures CVE remains at the cutting edge of vulnerability management.

As a newly minted CNA, DevCycle is now at the vanguard of vulnerability management. This responsibility allows us to assign CVE IDs to newly discovered vulnerabilities, making a direct contribution to the global cybersecurity defense system. But our involvement extends beyond assignments; we're an active participant in a vibrant community, collaborating to develop policies, share knowledge, and propel the program forward. By becoming a CNA, we're also ensuring openness and transparency to our customers regarding vulnerabilities in our published platforms and tools.

Being a CNA isn't just about the ability to assign numbers. It's about taking on the responsibility to make the digital world safer. We're excited to contribute to this global effort, ensuring that every vulnerability is identified, cataloged, and, ultimately, neutralized.