About SecLookup

SecLookup is a simple, fast search engine for security knowledge. One search box covers vulnerabilities, weaknesses, attack patterns and adversary behaviour, and links them together:

• CVE — every published vulnerability from the U.S. National Vulnerability Database, with CVSS scores and affected products.
• CISA KEV — vulnerabilities known to be exploited in the wild.
• CWE — the root-cause weakness types behind vulnerabilities.
• CAPEC — the attack patterns that exploit those weaknesses.
• MITRE ATT&CK — adversary tactics, techniques, groups, software and mitigations (Enterprise, Mobile and ICS).
• OWASP — the Top 10 (2021 and 2025), API Security Top 10, LLM / GenAI Top 10, Mobile Top 10, the ASVS 5.0 verification requirements and the Cheat Sheet Series.
• Compliance — NIST SP 800-53 rev5 controls and CIS Controls v8.1 safeguards, linked to the ATT&CK techniques they mitigate.

How it works

All data is downloaded from the original public sources, stored in a local SQLite database with a full-text index, and served from that copy. Searches never leave this server. Entries are cross-linked: a CVE links to its CWE, a CWE to its CAPEC attack patterns and OWASP category, and a CAPEC pattern to the matching ATT&CK techniques.

Search tips

• Type an identifier to jump straight to it: CVE-2021-44228, cwe 79, T1059.001, A01:2025, AC-2, cis 13.7.
• Search by product, technique or alias: log4j, kerberoasting, cozy bear.
• Use the filter chips to narrow results to one source, and Sort: newest to see the latest CVEs first.

SecLookup is not affiliated with or endorsed by NIST, CISA, MITRE or OWASP. See data sources for attribution and licences.