Why is there one item when five sites covered it?

Articles about the same event are grouped into one story. member_count is the number of articles in it, and independent_source_count the number of publishers that are actually independent of each other.

Why does a story have no severity?

Severity comes only from a verified CVE. Most news is not about one, so most stories carry no severity and say so, rather than being given a number nobody could defend.

Do you republish the articles?

No. A story carries the title, our own summary and note, a short excerpt of each article and its link. The article stays the publisher's, to be read where it was published.

Can I find every story about one CVE?

Yes: GET /api/news/stories/by-entity/cve/{id}. It matches verified entities only, so the stories it returns are about that CVE rather than merely mentioning a string that looks like it.

MODULE 11 · Security News, DeduplicatedEarly access

Five outlets covered the same breach. Do you need to read it five times?

News collects security reporting from a curated set of publishers and groups the articles that describe the same event into one story, across outlets and across languages. Each story carries our own summary and analyst note, a category, the CVEs and indicators it mentions checked against our own catalogues, and a short excerpt and link for every article in it.

Start free evaluation Ask for a Proof of Concept

01Capabilities

What News sees

One story per event

Articles are grouped in three steps, cheapest first: near-identical text, then shared entities, then a similarity search over a short digest of each article. Because the last step compares digests rather than wording, the same event reported in two languages can land in one story.

Independent sources, counted honestly

A story carries how many articles it holds and how many independent publishers they come from: three outlets relaying one wire story count as one source. The multi-source filter uses the independent count, not the article count.

Entities checked, never guessed

CVEs are checked against Cvekit and indicators against Malveine. Anything with no catalogue match is marked unverified rather than guessed, and only verified entities can be used to look stories up, so "every story about this CVE" is one call that means what it says.

Our summary, and the link to theirs

Each story gets our own summary, an analyst note and one of seventeen categories. The articles stay the publishers': a story carries a short excerpt of each and its link, never the full text.

02The API is the product

Same data, same permissions, over HTTP

Everything the console shows, the API serves. Real endpoint, sample response, masked values.

GET /api/news/stories

REQUEST

curl -H "X-API-Key: sk_••••••••" \
  "https://console.generalintels.com/api/news/stories\
?category=exploitation&has_cve=true&multi_source_only=true&limit=25"

RESPONSE · 200

{
  "items": [
    {
      "id": 48211,
      "title": "Authentication bypass in a VPN appliance exploited in the wild",
      "first_reported_at": "2026-10-14T09:12:00Z",
      "member_count": 4,
      "independent_source_count": 3,
      "severity": "critical",
      "risk_unknown": false,
      "category": "exploitation",
      "summary": "Attackers are exploiting an authentication bypass …",
      "analyst_note": "Patch exposed appliances and review VPN logs …",
      "entities": [
        { "entity_type": "cve", "value": "CVE-2026-•••••", "status": "verified" },
        { "entity_type": "victim_org", "value": "••••", "status": "unverified" }
      ],
      "members": [
        { "source_name": "••••", "title": "…", "excerpt": "…",
          "canonical_url": "https://••••", "language": "en" }
      ]
    }
  ],
  "next_cursor": "eyJ••••"
}

Publisher names, titles and links are shortened in this sample. GET /api/news/stories/by-entity/cve/{id} returns every story naming a verified CVE. Paging is by cursor: pass next_cursor back as cursor. Severity comes only from a verified CVE, so most stories carry none and say so with risk_unknown.

Early access

News is live and in no plan yet. It is open in the free self-serve evaluation and in a Proof of Concept with us, where its API and your own AI over MCP come with it.

Ask for a Proof of Concept

Full API reference ships with your workspace: every endpoint, versioned.

Questions

News, honestly answered

Keep exploring

The other windows

Platform overview

Your competitors will learn about the leak from the invoice.

Learn about it from the log batch.

Start free evaluation Explore the platform

Want the API, your own AI over MCP, or a Proof of Concept run with us? Request a demo

NDA-friendly briefings · global coverage · no slideware