Deterministic Exploit Tracking
Direct ingestion of the CISA Known Exploited Vulnerabilities (KEV) catalog and FIRST EPSS (Exploit Prediction Scoring System) v3 daily distribution.
Hermes Data Status & Ingestion Health
📊 Live Telemetry & Pipeline Health
Section titled “📊 Live Telemetry & Pipeline Health” Last Ingestion 2026-09-21 06:00:00 UTC Automated daily cycle
Sources Processed 12 primary feeds KEV, EPSS, NVD, ATT&CK, ATLAS...
Observations Generated 1,498+ OBS-* canonical model
Forecasts Active 10 falsifiable Brier score calibrated
Data Completeness 98.4% Exhaustiveness ratio
Methodology & Schema OBS-CANONICAL-2.1 HTR-2.0 / Brier-V4.0
🔍 Ingestion Pipeline Architecture
Section titled “🔍 Ingestion Pipeline Architecture”Hermes continuously monitors and harmonizes multi-source vulnerability intelligence, exploit maturity indicators, and autonomous agent threat telemetry:
Advisory & Ground-Truth Disclosures
Structured harvesting from NVD / CVE Project, GitHub Security Advisories (GHSA), OSS Security lists, and vendor PSIRT advisories (Palo Alto, Cisco, Microsoft).
Adversary & Agentic Frameworks
Bi-directional mapping against MITRE ATT&CK v15 Enterprise matrix and MITRE ATLAS (Adversarial Threat Landscape for Artificial-Intelligence Systems).
Canonical Observation Normalization
Every signal is normalized into a persistent OBS-* canonical observation model, ensuring immutability, cryptographic provenance, and zero duplicate counting.
⚖️ Epistemic Transparency: What Hermes Does Not Know
Section titled “⚖️ Epistemic Transparency: What Hermes Does Not Know” WHAT HERMES DOES NOT KNOW (ANALYTICAL UNCERTAINTY) Principle P3 — Epistemic Rigor
- ✕ Zero-day exploits held by private threat actors or commercial exploit brokers prior to public weaponization signals.
- ✕ Internal organizational network architecture, segmentation boundaries, and air-gapped systems not present in provided SBOM manifests.
- ✕ Proprietary in-house source code and unpublished internal dependencies (fully protected by our sovereign client-side Zero-Upload guarantee).
- ✕ Real-time patch deployment status inside third-party SaaS environments without direct endpoint telemetry connector.
- ✕ Heuristic exploitability when vendor software is heavily customized or compiled with non-standard compiler flags.
📜 Active Methodology Versions
Section titled “📜 Active Methodology Versions”All calculations and classifications in Hermes Codex cite their active semantic version:
| System Subsystem | Version | Governing Standard | Immutability Verification |
|---|---|---|---|
| Hermes Threat Score | HTS-1.4 | Severity + Exploitation Velocity | Deterministic calculation |
| Risk Trajectory Engine | HTR-2.0 | Velocity vector + Inflection delta | Historical snapshot replay |
| Canonical Observation Model | OBS-CANONICAL-2.1 | STIX 2.1 compatible | JSON-LD schema validated |
| Prediction Calibration | Brier-Calibrated-V4.0 | Strictly strictly strictly proper scoring rule | Public forecast registry |
| Agentic Threat Modeling | ATLAS-MAPPED-1.2 | MITRE ATLAS + OWASP LLM Top 10 | Graph blast radius |