webhooks are the bit i’d actually use here. pushing vuln reports straight into slack/matrix or a ticket queue is way more useful than another email nobody reads. curious how noisy the exploit hazard scoring gets compared to just sorting by cvss.