# Exposure Radio

> A security radio station for small IT teams: two hosts brief what changed in Tenable, what to fix first and what was verified fixed, between weather, CISA and Cloudflare Zero Wire news, Learn segments and music.

- Type: Agent
- Author: Agent9AI
- License: MIT
- Trust tier: contributed (passed automated validation and a baseline maintainer review)
- Last reviewed: 2026-11-04
- Source repository: https://github.com/Agent9AI/exposure-radio
- Repo state: not archived
- Last push: 2026-11-04T19:20:09Z
- Stars: 1 (a popularity signal, not a safety signal)
- Forks: 0 (a popularity signal, not a safety signal)
- Open issues: 0
- Language: Python
- Health checked at: 2026-11-05T20:35:15.821Z
- Integrations: Tenable, GCP, Anthropic
- Domains: vulnerability-management, security-operations
- Tags: exposure-management, audio, team-awareness, evidence, read-only
- Date added: 2026-11-04
- Listing page: https://exchange.tenable.com/agents/exposure-radio
- Source file: https://github.com/tenable/cyberagents-exchange/blob/main/agents/exposure-radio.md

# Exposure Radio

Small IT teams rarely hold a security standup. Exposure Radio gives them one they can hear while they work. It compares yesterday's and today's Tenable Vulnerability Management exports (the before and after of a scan cycle) and airs four short segments: a **Priority** interruption when something on CISA's exploited list lands on your machines, a **Watch list** that separates new exposure from new visibility, **Wins** verified by a rescan, and **Blind spots** for missed or uncredentialed scans. Weather, CISA and Cloudflare Zero Wire news, sixty-second Learn explainers and original music fill the hour.

## What it does

- Two hosts speak plainly ("the Ivanti Connect Secure flaw is open on one asset"); CVE IDs, owners and deadlines stay on screen and on a copyable action card.
- Every tenant exposure line is rebuilt from typed evidence and compared word for word; its caption passes a claim gate that blocks 27 of 27 adversarial statements.
- A station host serves the listener and a console for segments, queue, Learn topics and connections. Keys stay in a private file on the host; the browser only learns whether one is set.
- Bring-your-own services: Tenable export API (read-only), Gemini voices and Search-grounded Learn suggestions, the official YouTube embedded player, keyless NWS weather and CISA feeds.
- Keyless Cloudflare Zero Wire briefings add plain-language threat context and coverage caveats. Exact-CVE matches enrich open action cards locally; tenant CVEs never leave the host for this lookup. Public context does not change the evidence gate or establish that Cloudflare protects an environment.
- Read-only MCP tools: exposure_briefing, check_claims, remediation_packet and explain_priority. Open the clone in Claude Code and they load from `.mcp.json`, with an exposure-briefing skill that runs every factual sentence through check_claims before answering.

## Run

Python 3.10+, standard library only:

```bash
python3 -m exposure_radio station serve
make check
```

The repository includes a pre-rendered sample hour built from synthetic Tenable exports, so it plays with no keys. Exposure segments use local voices unless the operator's Gemini project is on a paid tier.

This is the Markdown version of one of 140 listings on CyberAgents Exchange. The same listing as JSON: https://exchange.tenable.com/api/agents/exposure-radio.json. The full index and how to read it: https://exchange.tenable.com/llms.txt