VEX Courses and Certifications

OWASP Foundation

5 Steps to VEX Success: Managing the End-to-End Workflow

Discover how to implement VEX (Vulnerability Exploitability eXchange) effectively through a five-step workflow to combat CVE overload and streamline vulnerability remediation in your organization.

• YouTube
• 48 minutes
• On-Demand
• Free Video

OpenSSF

Automated End-to-End VEX Streams You Can Trust

Explore automated VEX streams for trusted vulnerability communication. Learn to build end-to-end systems using OpenVEX, enhancing software security without human intervention.

• YouTube
• 19 minutes
• On-Demand
• Free Video

Eclipse Foundation

CRA-Ready - Integrating VEX into Open Source Workflows

Discover how to integrate VEX into Open Source workflows for CRA compliance, covering automated generation, CI/CD integration, and real-world lessons from Apache Solr implementation.

• YouTube
• 20 minutes
• On-Demand
• Free Video

EDUCBA Microcredential

Houdini FX Procedural Modeling and VEX Effects Mastery

Master Houdini FX through procedural modeling, VEX effects, and asset development across four project-based modules for 3D artists and technical directors.

• Coursera
• 4 weeks, 10 hours a week
• On-Demand
• Paid Course
• 4 courses

EDUCBA

Houdini VEX Wrangles: Procedural Effects Guide

Master VEX Wrangles to create dynamic procedural effects, manipulate geometry with precision, and build scalable visual workflows in Houdini through hands-on programming exercises.

• Coursera
• 15 hours 43 minutes
• On-Demand
• Paid Course

Black Hat

Your Software IS - NOT Vulnerable - CSAF, VEX, and the Future of Advisories

Explore the future of software security advisories, focusing on CSAF and VEX, and learn how to manage the increasing volume of vulnerability information effectively.

• YouTube
• 24 minutes
• On-Demand
• Conference Talk

BSidesLV

Your Critical System Is - Not? - Vulnerable - CSAF, VEX, SBOM and the Future of Advisories

Explore the future of vulnerability advisories with CSAF, VEX, and SBOM. Learn about critical system security, risk assessment, and automation in the evolving landscape of cybersecurity.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

Understanding Exploitability with VEX, EPSS, and Other Standard Frameworks

Explore key frameworks for assessing software vulnerabilities, including VEX, EPSS, CVSS, and SBOMs. Learn to enhance security through automated policy and GitOps practices.

• YouTube
• 32 minutes
• On-Demand
• Free Video

OpenSSF

Connecting the Dots: SBOM and VEX in Software Security

Discover how SBOM and VEX documents work together to enhance software supply chain security, reduce vulnerabilities, and leverage trustification.io for accessing verified open-source components.

• YouTube
• 22 minutes
• On-Demand
• Free Video

Black Hat

Determining Exploitability of Vulnerabilities with SBOM and VEX

Discover how to leverage SBOM and VEX documents to determine vulnerability exploitability, reduce false positives, and achieve compliance while enhancing supply chain security posture.

• YouTube
• 21 minutes
• On-Demand
• Free Video

Weaving a VEX Feed Through the Kubernetes Project

Dive into VEX (Vulnerability Exploitability eXchange), a metadata format that helps eliminate false positives in vulnerability scanning. Learn how Kubernetes implemented a VEX feed to improve security response and reduce wasted engineering time.

• YouTube
• 26 minutes
• On-Demand
• Free Video

Scan, Patch, VEX - Using Open Source Tools to Manage Vulnerabilities in Containers

Learn to manage vulnerabilities in cloud-native environments using open-source tools like Trivy and Copacetic, and standards like VEX. Improve security across development, testing, and production.

• YouTube
• 42 minutes
• On-Demand
• Free Video

How to Generate VEX Automatically for Your Project

Learn to automate VEX generation for Kubernetes workloads, reducing false positives in security scans and streamlining vulnerability management using Kubescape and a new GitHub Action.

• YouTube
• 33 minutes
• On-Demand
• Free Video

SNIAVideo

Fortifying AIOps with CSAF and VEX Integration for Enhanced Security Management

Discover how to enhance AIOps security through CSAF and VEX integration, enabling real-time vulnerability management and improved threat response for server and storage infrastructure.

• YouTube
• 41 minutes
• On-Demand
• Free Video

OpenSSF

Enhancing Vulnerability Triage With VEX - A GSoC Journey in CVE Binary Tool

Discover how VEX integration transforms vulnerability triage in CVE Binary Tool, supporting CSAF, CycloneDX, OpenVEX, and SPDX formats for enhanced security assessment workflows.

• YouTube
• 22 minutes
• On-Demand
• Free Video