This is the agencies' own public-domain data, curated and made citable by Voidly. Voidly adds no independent claim — every record links back to the canonical federal source for verification.
NVD — Known Software Vulnerabilities
109,053 records · NIST
Published CVEs in the U.S. National Vulnerability Database, with CVSS severity — the catalog of known software and hardware security flaws.
Why it's in Voidly: The circumvention and secure-comms stack — VPNs, routers, browsers, messengers — is built on this software. A flaw here is a flaw in the tools activists and journalists rely on to evade censorship safely.
OFAC — Sanctioned Persons & Entities (SDN list)
18,799 records · U.S. Treasury / OFAC
The U.S. Treasury list of sanctioned persons and organizations — entities U.S. persons are barred from dealing with, tagged by program and country.
Why it's in Voidly: Many of the regimes, security services, and vendors behind internet shutdowns and mass surveillance are themselves sanctioned. A source for attributing who is behind a censorship or surveillance event.
Federal Surveillance Spending
20 records · USASpending.gov
U.S. federal contract awards to a curated list of surveillance, OSINT, phone-forensics, and social-media-monitoring vendors — who the government pays to surveil, and how much.
Why it's in Voidly: Surveillance is a market. Following the federal dollars to the firms that build face recognition, phone-cracking, and social-media-monitoring tools is direct accountability work on the surveillance apparatus.
Voidly curation: contracts whose recipient matches a disclosed surveillance-vendor list (PALANTIR, DATAMINR, CELLEBRITE, CLEARVIEW AI, VERINT, COGNYTE, MAGNET FORENSIC, BABEL STREET, PENLINK, GRAYSHIFT, VOYAGER LABS, SHADOWDRAGON, ZEROFOX, GIANT OAK, NICE SYSTEMS). Ambiguous names excluded. Verify each award at USASpending by PIID.
FTC — Privacy & Data Enforcement
501 records · Federal Trade Commission
Federal Trade Commission enforcement actions on privacy, data security, data brokers, biometrics, facial recognition, location data, and children's online privacy.
Why it's in Voidly: The FTC is the closest thing the U.S. has to a privacy regulator. Its enforcement actions are the public record of who got caught mishandling, selling, or over-collecting personal data.
Voidly curation: FTC releases whose title matches a disclosed privacy/surveillance keyword set (privacy, data security, data broker, breach, biometric, facial recognition, location data, children's online, COPPA, surveillance, stalkerware, spyware, sensitive data, health data).
Circumvention-Stack Threats (CISA KEV)
CISA
Actively-exploited vulnerabilities in the VPN / firewall / router / browser / messaging gear that censorship circumvention depends on.
How to cite: every record has a stable Voidly permalink (/atlas/federal/{dataset}/{id}) and the API returns a ready BibTeX/APA citation. Source data is U.S. federal public domain (17 U.S.C. §105); re-surfaced by Voidly under CC BY 4.0.
Machine-readable: api.voidly.ai/v1/atlas/federal