Will any CSAF v2.0 advisory issued by a Fortune 500 company appear publicly in 2026?

About

Tracks adoption of machine-readable advisory formats. Resolves YES if any Fortune 500 (most recent list) company publishes a CSAF 2.0 (csaf_security_advisory) document with a 2026 issued date on a publicly indexed URL.

Resolution criteria

Live CSAF JSON file under any subdomain of a Fortune 500 company, conforming to the CSAF 2.0 schema, with tracking.current_release_date in 2026.

Source

OASIS CSAF aggregator listings; Google filetype:json csaf searches.

Ambiguity

AMBIGUOUS if file exists but does not validate against the official CSAF 2.0 schema.

Discussion

Loading comments…