Connection check
verified live · 26h ago
dora
DORAOracle — 15 tools for DORA Art.5-32: risk register, ICT incidents, TLPT, third-party.
Tools
15
GitHub stars
—
Installs / wk
—
Licence
—
Transport
streamable-http
Last checked
26h ago
Tools & capabilities
15 toolsRead from the running server on 26h ago.
breach_check
limitdomain
HaveIBeenPwned breach database — check domain/company breach exposure. DORA Art. 18 incident assessment. HaveIBeenPwned breach database — check domain/company breach exposure. DORA Art. 18 incident assessment.
cert_advisories
limitkeyword
CERT-Bund security advisories — authoritative DE source for ICT threats. DORA Art. 17 threat monitoring. CERT-Bund security advisories — authoritative DE source for ICT threats. DORA Art. 17 threat monitoring.
cloud_status
limitprovider
Live status of AWS, GCP, Azure cloud providers. DORA Art. 28 third-party ICT risk monitoring. Live status of AWS, GCP, Azure cloud providers. DORA Art. 28 third-party ICT risk monitoring.
cve_latest
dayslimitseveritybanking_only
Latest critical CVEs — daily DORA ICT risk briefing. Filter by severity and banking relevance. Latest critical CVEs — daily DORA ICT risk briefing. Filter by severity and banking relevance.
cve_search
dayslimitvendorkeywordseverity
Search CVEs by keyword, vendor or product. Returns CVSS scores, attack vectors, DORA pillar mapping. Search CVEs by keyword, vendor or product. Returns CVSS scores, attack vectors, DORA pillar mapping.
dora_calendar
DORA compliance milestones and upcoming deadlines for financial institutions. All Art. references included. DORA compliance milestones and upcoming deadlines for financial institutions. All Art. references included.
dora_news
langlimittopic
EBA/DORA regulatory news for banks. Topics: general, eba, incident, third_party, testing, guidelines, bafin, swift. EBA/DORA regulatory news for banks. Topics: general, eba, incident, third_party, testing, guidelines, bafin, swift.
health_check
DORAOracle server status and all backend connectivity checks. DORAOracle server status and all backend connectivity checks.
incident_timeline
sectorincident_timeclassification
Generate a DORA Art. 19-aligned ICT incident reporting timeline with the regulatory deadline structure. Supports - does not constitute - compliant reporting. Generate a DORA Art. 19-aligned ICT incident reporting timeline with the regulatory deadline structure. Supports - does not constitute - compliant reporting.
kev_check
cve_id
Check if a specific CVE is in CISA KEV (actively exploited in the wild). Returns DORA incident classification guidance. Check if a specific CVE is in CISA KEV (actively exploited in the wild). Returns DORA incident classification guidance.
kev_list
dayslimitvendoroverdue
CISA Known Exploited Vulnerabilities — actively exploited CVEs with patch deadlines. DORA Art. 9 patch compliance. CISA Known Exploited Vulnerabilities — actively exploited CVEs with patch deadlines. DORA Art. 9 patch compliance.
mitre_techniques
limittactickeyword
MITRE ATT&CK techniques for DORA TLPT / TIBER-EU penetration testing. Maps to DORA Art. 26. MITRE ATT&CK techniques for DORA TLPT / TIBER-EU penetration testing. Maps to DORA Art. 26.
provider_risk
provider
DORA Art. 28 ICT third-party risk assessment: CVE history, news, GLEIF registration, contractual checklist. DORA Art. 28 ICT third-party risk assessment: CVE history, news, GLEIF registration, contractual checklist.
threat_actors
limitstatusmalware
Feodo Tracker: live C2 botnet servers (Emotet, QakBot, etc.). Actionable IP blocklist for DORA Art. 9. Feodo Tracker: live C2 botnet servers (Emotet, QakBot, etc.). Actionable IP blocklist for DORA Art. 9.
tlpt_scenarios
focussector