--- title: README emoji: 📚 colorFrom: pink colorTo: green sdk: static pinned: false --- The **Computer Incident Response Center Luxembourg (CIRCL)** is a government-driven initiative providing a coordinated and systematic response to computer security threats and incidents. 👉 [CIRCL AI Strategy](https://www.circl.lu/pub/ai-strategy/) ## Vision Our vision is to strengthen the capabilities of our **Computer Security Incident Response Team (CSIRT)** through the strategic integration of **Artificial Intelligence**. AI is not intended to replace human analysts, but to **augment their expertise**, accelerate analysis, and improve decision-making. ## Mission Our mission is to leverage AI to: - Process, analyze, and extract value from **large and currently underutilized data sources** - Improve operational outcomes in **threat intelligence** and **incident response** - **Automate repetitive, well-defined, and reproducible processes**, allowing analysts to focus on higher-value tasks This work is grounded in CIRCL’s long-standing commitment to: - Developing **open-source tools** - Producing **actionable threat intelligence** - Publishing **high-quality datasets and models** for both internal use and the wider security community ## Publications - **Bonhomme, C., & Dulaunoy, A. (2025).** *VLAI: A RoBERTa-Based Model for Automated Vulnerability Severity Classification* (Version 1.4.0) [Computer software]. https://arxiv.org/abs/2507.03607 https://huggingface.co/papers/2507.03607 - **Bonhomme, C. (2025).** *GPU Efficiency in VLAI Model Training.* https://doi.org/10.13140/RG.2.2.24233.04963 ## Projects
VulnMCP

A modular MCP server providing AI-driven vulnerability management skills, including severity classification and automated insights.

Learn more
VulnTrain

Building AI-ready datasets and training models for vulnerability management.

Learn more
VulnAgent

An experimental agentic cybersecurity framework combining LLMs, domain-specific tools, and distributed agents over XMPP.

Learn more
ML-Gateway

A FastAPI-based local inference server that loads one or more pre-trained NLP models at startup and exposes them through a clean, RESTful API.

Learn more
👉 [AI datasets and VLAI models](https://www.vulnerability-lookup.org/user-manual/ai/) related to the [Vulnerability-Lookup](https://github.com/vulnerability-lookup) project.