webhooks are the part that’d get me to actually wire this into a workflow. pushing vuln reports straight into slack/matrix/tickets is way more useful than another email pile, and the exploit hazard api sounds handy if it helps sort real priority from cve noise.