CISA Cybersecurity Advisories

active ●Ingestion health: delivering Executive · Tier 2 · RSS feed · Department of Homeland Security (CISA)

Official site (opens in a new tab) · All sources

What this source is

The Cybersecurity and Infrastructure Security Agency publishes cybersecurity advisories, alerts, and the Known Exploited Vulnerabilities (KEV) catalog — federal directives and warnings that constitute an action category the pipeline does not cover at all.

Identity and registry record

Registry id

cisa-advisories

Agency / parent organization

Department of Homeland Security (CISA)

Branch

executive

Type

RSS feed

Status

active

Tier

2

URL (feed)

https://www.cisa.gov/cybersecurity-advisories/all.xml (opens in a new tab)

URL (home)

https://www.cisa.gov/news-events/cybersecurity-advisories (opens in a new tab)

URL (index)

https://www.cisa.gov/known-exploited-vulnerabilities-catalog (opens in a new tab)

Registered

2026-07-28

Registry notes

Research flagged the 2025-05 RSS retirement announcement, but the probe (2026-07-28) found all.xml alive and rich: HTTP 200, 2.0 MB feed, 30 recent advisories whose descriptions embed the full advisory text (~55,000 chars each); sample advisory page also extracts (9,317 chars). Content evaluation: descriptions carry the substance — article fetches add layout, not content — but pages fetch cleanly, so full mode is kept for capture/provenance value. First ingest brings ~30 substantial items. Activated 2026-07-28.

How we ingest it

Channel

RSS feed

Method

Polls the advisories RSS feed via AgencyClient; KEV JSON is a later extension.

Poll cadence

about every 60 minutes while the collector runs

Request budget

the agency class: at most 1,500 requests per day shared across every agency web source, counted from the fetch log (failed requests count too)

Politeness

robots.txt is honored as observed — including each host's crawl-delay, exactly — and every request identifies itself as fapd/0.1 (Free Agentic Publication Digester; +https://fapd.info/bot.html; contact: hustleyourcity@gmail.com); a refusal is recorded, never evaded

Capture and hash

captured raw content is hashed (SHA-256) into the day's committed provenance manifest, hash-chained day to day (PROVENANCE.md)

Ingestion health

●Ingestion health: delivering 45 item(s) in the last 14 days; most recent 2026-07-30; 0 of 231 request(s) to www.cisa.gov returned no content.

This label has held since 2026-08-03T18:46:01Z (UTC) and was last re-checked 2026-08-03T19:51:47Z (UTC).

Counts are of our own requests, retries included. A 4xx or 5xx is the server declining to return content — that may be load, maintenance, on-demand generation, or a limit the publisher sets, and we cannot tell which from outside. Nothing here is a measurement of the publisher.

Ingestion statistics

These figures describe this project's ingestion of this source — items we recorded and requests we made — and nothing else. They are not a measurement of the publisher.

Last 24 hours

Last 14 days

All time

Last 30 days, day by day