Join NIST on September 17, 2026 for an Information Technology Laboratory (ITL) AI Program hosted webinar on the development of an AI agent enrichment workflow at the National Vulnerability Database.
The National Vulnerability Database (NVD), established and operated by NIST, provides the U.S. government repository of standards-based vulnerability management data. The NVD is a foundational resource for vulnerability management, software security, compliance automation, and cybersecurity risk analysis across the public and private sectors. It provides standardized vulnerability enrichment and associated metadata consumed by a broad ecosystem of security tools and operational workflows. It is a part of the broader vulnerability management ecosystem that encompasses processes, standards, and tools involved in one or more phases of the vulnerability lifecycle of identifying, validating, disclosing, disseminating, prioritizing, and remediating software and system vulnerabilities.
The increasing scale and complexity of discovered vulnerabilities poses a challenge for the NVD to provide timely information that is actionable to users of NVD data. The increasing use of AI tools to aid in the discovery and exploitation of vulnerabilities contributes even more to the job that is required to keep pace with the flow publicly disclosed vulnerabilities.
NIST has begun work on an AI agentic workflow to aid in the enrichment of vulnerability information provided by NVD. This webinar will discuss the approach taken, the architecture of the solution, the various issues discovered during implementation, and early results with the use of the tool at the NVD.
Webinar Materials:
Submit Feedback
With the rapid growth of AI-enabled cyber tools and dramatically accelerated technology delivery cycles, NIST aims to improve the NVD’s scalability, automation, interoperability, transparency, and utility — modernizing it for the future. To guide this transformation, NIST released a Request for Information (RFI) and is seeking feedback, especiallyfrom technical experts, industry and government leaders, researchers, cybersecurity professionals, and software vendors. (Learn more).
Comments in response to this notice must be received on or before October 13, 2026, at 11:59 p.m. Eastern.
Artificial intelligence and Agentic AI Created August 27, 2026, Updated September 25, 2026