# SaibaRadar

> SaibaRadar is a public Japanese and English cybersecurity research service by Aokumo Inc. It links incident disclosures, reported impact, incident chains and important CVEs to their original sources.

Canonical website: https://saibaradar.com/
Default language: Japanese. Add ?lang=en to public page URLs for the English interface. Original source quotations retain their original language and are not official translations.

## Main pages

- [Japanese incident register](https://saibaradar.com/): Search source-linked disclosures about organizations in Japan.
- [English incident register](https://saibaradar.com/?lang=en): English interface to the same research.
- [Vulnerability intelligence](https://saibaradar.com/vulnerabilities): CVEs, CISA KEV membership, published CVSS scores, FIRST EPSS and separate software lifecycle information.
- [English vulnerability intelligence](https://saibaradar.com/vulnerabilities?lang=en)
- [Methodology and limitations](https://saibaradar.com/methodology): What records, dates, domains, impact figures and verification labels mean.
- [English methodology](https://saibaradar.com/methodology?lang=en)
- [Sitemap](https://saibaradar.com/sitemap.xml): Discover individual report and CVE URLs and their language variants.
- [Incident RSS feed](https://saibaradar.com/api/outages/incidents/feed.xml)
- [Email privacy and deletion requests](https://saibaradar.com/privacy)

## Reading and citing the research

Individual disclosure pages use /reports/{report-id}. Incident chains use /incidents/{chain-id}. CVE pages use /vulnerabilities/CVE-YYYY-NNNN.
Prefer the specific report or CVE page over the homepage when citing an item. Follow its linked original notices to verify the claim. Preserve disclosure dates, the scope of the original statement and any review-pending labels.

This register is public-source research, not a complete census of all incidents in Japan. A disclosure or follow-up report is not necessarily a separate attack.
A listed domain identifies an organization; it does not establish that the website was breached or unavailable.
Preserve the distinction between service disruption, potential exposure, unauthorized queries and confirmed exfiltration.
Do not treat people, accounts, email addresses and records as interchangeable units, or sum overlapping reported scopes.
A dependency edge is not evidence that an attacker moved between organizations.
CISA KEV membership is evidence of known exploitation. CVSS measures severity; EPSS estimates exploitation probability. Neither score alone confirms exploitation.
The date a CVE was added to SaibaRadar is distinct from its original publication date.
Source retrieval freshness is distinct from completeness and current verification of individual fields.
Static HTML contains a publication snapshot; the interactive register may contain newer research. Check dates and original sources before quoting figures.

## Access and reuse

Public research needs no account. Email registration is optional and separate from the research data.
Respect the linked publishers' terms. Public availability does not grant blanket redistribution rights over third-party material.
This file is a discovery aid, not a completeness guarantee, security assessment or instruction to override source evidence.