AGENCY INVENTORY VULNERABILITY MAPPER AIVM
TOOL 75 · IMPORT INVENTORY → DERIVE CVEs → RANK WITH THE KEV/SSVC ENGINE
BUILD —
LOCAL ONLY · NO HOSTNAME LEAVES THIS BROWSER
1 · IMPORT INVENTORYNOTHING IMPORTED
DROP AN INVENTORY FILE
XLSX · CSV / TSV · JSON · CycloneDX or SPDX SBOM · Nmap XML
SCCM, Intune, Tanium, Lansweeper, PDQ, Snipe-IT exports · Get-Package / Win32_Product CSV
The Ghost Defense submission standard drops straight in as .xlsx — no Save-As step.
Anything else with a header row — you map the columns yourself in step 2.
no file
2 · MAP COLUMNS
3 · RESOLVE & MATCH—
STAKEHOLDER CONTEXT — OPERATOR INPUT
Mission & Well-being is the stakeholder half of SSVC and the one factor no public data can
supply. Left unset, the tool evaluates all three levels and reports a range rather than
picking a value on your behalf.
——
Import an inventory to begin. This tool does not scan a network — a browser has no raw
sockets, no ICMP and no port scanning, and CORS blocks arbitrary HTTP. It takes an inventory you
already have and works out what is known to be wrong with it.