ATT&CK across domains
Browse Enterprise, Mobile, and ICS techniques, actors, tools, and malware from MITRE’s structured dataset.
MITRE ATT&CK · STIX 2.1DEFENSIVE INTELLIGENCE · SOURCE-LINKED
See the adversary.
Prioritize the exposure.
Explore relationships between ATT&CK techniques, threat groups, software, and public vulnerability signals—grounded in the sources behind every result.
Open the secure portal Administrator access · password + authenticator code
Public-source data · read-only analysis · daily refresh at 02:00 Singapore time
CATINTELLIGENCE GRAPH
AATT&CK
behavior
behavior
CCVE
exposure
exposure
EEPSS
likelihood
likelihood
KKEV
known exploited
known exploited
ONE EVIDENCE-LINKED VIEW
Connect signals.
Keep the context.
CAT makes public threat and vulnerability data easier to explore without pretending it knows your assets or can verify your controls.
Vulnerability signals
Review CVSS severity, FIRST EPSS probability, and CISA KEV status together to support triage.
NVD · FIRST EPSS · CISA KEVEvidence before inference
Follow source-backed relationships and inspect refresh history. CAT labels heuristic scores and unverified product matches.
PROVENANCE · DAILY CHANGE RECORDS✓
Designed for defensive analysis. CAT reads public datasets; it does not scan systems, exploit vulnerabilities, or execute adversary tooling. It is not an asset inventory or vendor remediation authority.
Administrator portal