June 13, 2023 – International cybersecurity consulting firm, Security Risk Advisors (SRA), has been authorized as a CVE Numbering Authority (CNA) by The CVE Program. As a CNA, Security Risk Advisors will be responsible for the regular assignment of CVE IDs to vulnerabilities, and for creating and publishing information about the Vulnerability in the associated CVE Record. SRA’s advisories will be published here.
CVE® is an international, community-based effort and relies on the community to discover vulnerabilities. The mission of the Common Vulnerabilities and Exposures (CVE®) Program is to identify, define, and catalog publicly disclosed cybersecurity vulnerabilities. There is one CVE Record for each vulnerability in the catalog. Partners publish CVE Records to communicate consistent descriptions of vulnerabilities. The vulnerabilities are discovered then assigned and published to the CVE List. Information technology and cybersecurity professionals use CVE Records to ensure they are discussing the same issue, and to coordinate their efforts to prioritize and address the vulnerabilities. The CVE List feeds the U.S. National Vulnerability Database (NVD).
“Security Risk Advisors is very excited to partner with The CVE Program. These contributions are vital to the industry and necessary for companies around the world to identify and remediate critical threats in a timely manner,” said Chris Salerno, Managing Director at SRA.
About SRA
Security Risk Advisors (SRA) provides specialized security services including Penetration Testing, Purple Teams, Cloud Security, Resilience, Cyber Physical Systems Security, Engineering, and 24x7x365 Cybersecurity Operations. SRA’s mission is to “Level Up” every day to protect its clients and their customers. The company delivers security services to Fortune and Global 1000 companies, innovating technology startups, and mission-oriented non-profits. SRA is headquartered in Philadelphia, with offices in Rochester, NY and Kilkenny, Ireland.