Sample broadcast · fictional demo tenant

Hear your Tenable exposure between songs.

Exposure FM turns your Tenable findings into short, cited audio briefings between your music, so security teams hear which exploited exposures to fix first without opening a dashboard.

Vulnerability manager edition

Top of the hour: your exposure desk

ADA, anchor · ROOK, analyst · voices synthesised on a Raspberry Pi

Transcript · select a line to jump to it

A fluent rewrite with three errors never airs.

Before any audio is made, every CVE ID, number, version, IP and hostname in a line must appear in the evidence that line cites, and so must any vendor name the gate recognises (those in the evidence plus a list of common vendors). The check compares tokens, not meaning, so the scripts stay deterministic and any model rewrite has to pass it again.

Reproduce it locally with make gate-demo.

REWRITE (what a fluent model might say)
anchor  vpn-gw-01 and vpn-gw-02 both have the
        GlobalProtect bug, CVE-2024-3400.
analyst Yep, that Citrix box is on CISA's list.
anchor  All told, 40 known-exploited vulnerabilities
        are open on your assets.

GROUNDING GATE: BLOCKED (3 unsupported claims)
  line 0  identifier vpn-gw-02 not in cited evidence
  line 1  names 'Citrix' from evidence it does not cite
  line 2  number 40 not in cited evidence

The listener hears the original, cited break.

How a break is made

Evidence in. A read-only Tenable VM export, CISA's Known Exploited list and FIRST EPSS.
Rank. Exploited first, then your focus tags, past fix deadline, new, then VPR.
Script. Two hosts, role-aware templates; the CISO edition never names a server.
Gate. CVE IDs, numbers, IPs, hosts and recognised vendor names checked against the cited source; failures never reach audio.
On air. Local speech between your music, plus an MCP server any agent can call.

Green is built and tested on a Raspberry Pi 4 against the demo tenant; grey is planned for the Nov 2–4 contest window. Select to enlarge.