diff --git a/scripts/project-coordinates.json b/scripts/project-coordinates.json
index 925e910b..4fdcab68 100644
--- a/scripts/project-coordinates.json
+++ b/scripts/project-coordinates.json
@@ -10,8 +10,8 @@
   },
   "activemq": {
     "name": "Apache ActiveMQ",
-    "security_model_link": "https://github.com/apache/activemq/security/policy",
-    "security_model_source": "https://raw.githubusercontent.com/apache/activemq/main/SECURITY.md",
+    "security_model_link": "https://github.com/apache/activemq/blob/main/THREAT_MODEL.md",
+    "security_model_source": "https://raw.githubusercontent.com/apache/activemq/main/THREAT_MODEL.md",
     "advisory_link": "https://activemq.apache.org/security-advisories",
     "contact": "security@apache.org",
     "contributing": "https://activemq.apache.org/contributing",
@@ -77,8 +77,8 @@
   },
   "apisix": {
     "name": "Apache APISIX",
-    "security_model_link": "https://github.com/apache/apisix/blob/master/THREAT_MODEL.md",
-    "security_model_source": "https://raw.githubusercontent.com/apache/apisix/master/THREAT_MODEL.md",
+    "security_model_link": "https://github.com/apache/apisix/blob/master/docs/en/latest/security-threat-model.md",
+    "security_model_source": "https://raw.githubusercontent.com/apache/apisix/master/docs/en/latest/security-threat-model.md",
     "advisory_link": null,
     "contact": "security@apache.org",
     "logo_link": "https://www.apache.org/logos/res/apisix/default.png"
@@ -143,7 +143,7 @@
   "avro": {
     "name": "Apache Avro",
     "security_model_link": "https://avro.apache.org/project/security/",
-    "security_model_source": "https://raw.githubusercontent.com/apache/avro/refs/heads/main/doc/content/en/project/Security/_index.md",
+    "security_model_source": "https://raw.githubusercontent.com/apache/avro/main/doc/content/en/project/Security/_index.md",
     "advisory_link": null,
     "contact": "security@apache.org",
     "contributing": "https://avro.apache.org/community/",
@@ -151,12 +151,29 @@
   },
   "axis": {
     "name": "Apache Axis",
-    "security_model_link": "https://github.com/apache/axis-axis2-java-core/security/policy",
-    "security_model_source": "https://raw.githubusercontent.com/apache/axis-axis2-java-core/refs/heads/master/SECURITY.md",
+    "security_model_link": null,
+    "security_model_source": null,
     "advisory_link": null,
     "contact": "security@apache.org",
     "contributing": null,
-    "logo_link": null
+    "logo_link": null,
+    "projects": [
+      {
+        "name": "Apache Axis2 Java Core",
+        "security_model_link": "https://github.com/apache/axis-axis2-java-core/security/policy",
+        "security_model_source": "https://raw.githubusercontent.com/apache/axis-axis2-java-core/master/SECURITY.md"
+      },
+      {
+        "name": "Apache Axis2 Java Rampart",
+        "security_model_link": "https://github.com/apache/axis-axis2-java-rampart/security/policy",
+        "security_model_source": "https://raw.githubusercontent.com/apache/axis-axis2-java-rampart/master/SECURITY.md"
+      },
+      {
+        "name": "Apache Axis2 C Core",
+        "security_model_link": "https://github.com/apache/axis-axis2-c-core/security/policy",
+        "security_model_source": "https://raw.githubusercontent.com/apache/axis-axis2-c-core/master/SECURITY.md"
+      }
+    ]
   },
   "baremaps": {
     "name": "Apache Baremaps",
@@ -234,7 +251,8 @@
   "camel": {
     "name": "Apache Camel",
     "security_model_link": "https://camel.apache.org/manual/security-model.html",
-    "security_model_source": "https://raw.githubusercontent.com/apache/camel/refs/heads/main/docs/user-manual/modules/ROOT/pages/security-model.adoc",
+    "security_model_source": "https://raw.githubusercontent.com/apache/camel/main/docs/user-manual/modules/ROOT/pages/security-model.adoc",
+    "advisory_link": null,
     "contact": "security@apache.org",
     "logo_link": "https://www.apache.org/logos/res/camel/default.png"
   },
@@ -248,8 +266,8 @@
   },
   "cassandra": {
     "name": "Apache Cassandra",
-    "security_model_link": "https://cassandra.apache.org/doc/latest/cassandra/managing/operating/security.html",
-    "security_model_source": null,
+    "security_model_link": "https://github.com/apache/cassandra/blob/trunk/doc/modules/cassandra/pages/reference/security-model.adoc",
+    "security_model_source": "https://raw.githubusercontent.com/apache/cassandra/trunk/doc/modules/cassandra/pages/reference/security-model.adoc",
     "advisory_link": null,
     "contact": "security@apache.org",
     "contributing": "https://cassandra.apache.org/_/community.html#how-to-contribute",
@@ -290,7 +308,7 @@
   "cloudstack": {
     "name": "Apache CloudStack",
     "security_model_link": "https://github.com/apache/cloudstack/blob/main/THREAT_MODEL.md",
-    "security_model_source": "https://raw.githubusercontent.com/apache/cloudstack/refs/heads/main/THREAT_MODEL.md",
+    "security_model_source": "https://raw.githubusercontent.com/apache/cloudstack/main/THREAT_MODEL.md",
     "advisory_link": null,
     "contact": "security@apache.org",
     "contributing": "https://cloudstack.apache.org/contribute",
@@ -307,17 +325,17 @@
       {
         "name": "Apache Commons Configuration",
         "security_model_link": "https://commons.apache.org/proper/commons-configuration/security.html",
-        "security_model_source": "https://raw.githubusercontent.com/apache/commons-configuration/refs/heads/master/src/site/xdoc/security.xml"
+        "security_model_source": "https://raw.githubusercontent.com/apache/commons-configuration/master/src/site/xdoc/security.xml"
       },
       {
         "name": "Apache Commons Imaging",
         "security_model_link": "https://commons.apache.org/proper/commons-imaging/security.html",
-        "security_model_source": "https://raw.githubusercontent.com/apache/commons-imaging/refs/heads/master/src/site/xdoc/security.xml"
+        "security_model_source": "https://raw.githubusercontent.com/apache/commons-imaging/master/src/site/xdoc/security.xml"
       },
       {
         "name": "Apache Commons XML",
         "security_model_link": "https://commons.apache.org/sandbox/commons-xml/threat_model.html",
-        "security_model_source": "https://raw.githubusercontent.com/apache/commons-xml/refs/heads/main/src/site/markdown/threat_model.md"
+        "security_model_source": "https://raw.githubusercontent.com/apache/commons-xml/main/src/site/markdown/threat_model.md"
       }
     ]
   },
@@ -340,7 +358,7 @@
   "creadur": {
     "name": "Apache Creadur",
     "security_model_link": "https://github.com/apache/creadur-rat/blob/master/THREAT_MODEL.md",
-    "security_model_source": "https://raw.githubusercontent.com/apache/creadur-rat/refs/heads/master/THREAT_MODEL.md",
+    "security_model_source": "https://raw.githubusercontent.com/apache/creadur-rat/master/THREAT_MODEL.md",
     "advisory_link": null,
     "contact": "security@apache.org",
     "logo_link": "https://www.apache.org/logos/res/creadur/default.png"
@@ -364,7 +382,7 @@
   "cxf": {
     "name": "Apache CXF",
     "security_model_link": "https://github.com/apache/cxf/blob/main/THREAT_MODEL.md",
-    "security_model_source": "https://raw.githubusercontent.com/apache/cxf/refs/heads/main/THREAT_MODEL.md",
+    "security_model_source": "https://raw.githubusercontent.com/apache/cxf/main/THREAT_MODEL.md",
     "advisory_link": null,
     "contact": "security@apache.org",
     "logo_link": "https://www.apache.org/logos/res/cxf/default.png"
@@ -404,7 +422,7 @@
   "db": {
     "name": "Apache DB",
     "security_model_link": "https://github.com/apache/db-jdo/blob/main/THREAT_MODEL.md",
-    "security_model_source": "https://raw.githubusercontent.com/apache/db-jdo/refs/heads/main/THREAT_MODEL.md",
+    "security_model_source": "https://raw.githubusercontent.com/apache/db-jdo/main/THREAT_MODEL.md",
     "advisory_link": null,
     "contact": "security@apache.org",
     "logo_link": "https://www.apache.org/logos/res/db/default.png"
@@ -428,15 +446,15 @@
   "directory": {
     "name": "Apache Directory",
     "security_model_link": "https://github.com/apache/directory-server/blob/master/THREAT_MODEL.md",
-    "security_model_source": "https://raw.githubusercontent.com/apache/directory-server/refs/heads/master/THREAT_MODEL.md",
+    "security_model_source": "https://raw.githubusercontent.com/apache/directory-server/master/THREAT_MODEL.md",
     "advisory_link": null,
     "contact": "security@apache.org",
     "logo_link": "https://www.apache.org/logos/res/directory/default.png"
   },
   "dolphinscheduler": {
     "name": "Apache DolphinScheduler",
-    "security_model_link": "https://github.com/apache/dolphinscheduler/blob/dev/docs/docs/en/contribute/join/security.md",
-    "security_model_source": "https://raw.githubusercontent.com/apache/dolphinscheduler/dev/docs/docs/en/contribute/join/security.md",
+    "security_model_link": "https://github.com/apache/dolphinscheduler/blob/dev/docs/docs/en/contribute/join/security-model.md",
+    "security_model_source": "https://raw.githubusercontent.com/apache/dolphinscheduler/dev/docs/docs/en/contribute/join/security-model.md",
     "advisory_link": null,
     "contact": "security@dolphinscheduler.apache.org",
     "logo_link": "https://www.apache.org/logos/res/dolphinscheduler/default.png"
@@ -444,7 +462,7 @@
   "doris": {
     "name": "Apache Doris",
     "security_model_link": "https://github.com/apache/doris/blob/master/threat-model.md",
-    "security_model_source": "https://raw.githubusercontent.com/apache/doris/refs/heads/master/threat-model.md",
+    "security_model_source": "https://raw.githubusercontent.com/apache/doris/master/threat-model.md",
     "advisory_link": null,
     "contact": "security@apache.org",
     "logo_link": "https://www.apache.org/logos/res/doris/default.png"
@@ -452,7 +470,7 @@
   "drill": {
     "name": "Apache Drill",
     "security_model_link": "https://github.com/apache/drill/blob/master/THREAT_MODEL.md",
-    "security_model_source": "https://raw.githubusercontent.com/apache/drill/refs/heads/master/THREAT_MODEL.md",
+    "security_model_source": "https://raw.githubusercontent.com/apache/drill/master/THREAT_MODEL.md",
     "advisory_link": null,
     "contact": "security@apache.org",
     "logo_link": "https://www.apache.org/logos/res/drill/default.png"
@@ -468,7 +486,7 @@
   "dubbo": {
     "name": "Apache Dubbo",
     "security_model_link": "https://github.com/apache/dubbo/blob/3.3/docs/threat-model.md",
-    "security_model_source": "https://raw.githubusercontent.com/apache/dubbo/refs/heads/3.3/docs/threat-model.md",
+    "security_model_source": "https://raw.githubusercontent.com/apache/dubbo/3.3/docs/threat-model.md",
     "advisory_link": null,
     "contact": "security@dubbo.apache.org",
     "logo_link": "https://www.apache.org/logos/res/dubbo/default.png"
@@ -509,7 +527,7 @@
   "fineract": {
     "name": "Apache Fineract",
     "security_model_link": "https://github.com/apache/fineract/security/policy",
-    "security_model_source": "https://raw.githubusercontent.com/apache/fineract/refs/heads/develop/SECURITY.md",
+    "security_model_source": "https://raw.githubusercontent.com/apache/fineract/develop/SECURITY.md",
     "advisory_link": "https://fineract.apache.org/security.html",
     "contact": "security@fineract.apache.org",
     "logo_link": "https://www.apache.org/logos/res/fineract/default.png"
@@ -542,18 +560,25 @@
   "fory": {
     "name": "Apache Fory",
     "security_model_link": "https://github.com/apache/fory/blob/main/docs/security/threat-model.md",
-    "security_model_source": "https://raw.githubusercontent.com/apache/fory/refs/heads/main/docs/security/threat-model.md",
+    "security_model_source": "https://raw.githubusercontent.com/apache/fory/main/docs/security/threat-model.md",
     "advisory_link": "https://fory.apache.org/security/",
     "contact": "security@apache.org",
     "logo_link": null
   },
   "freemarker": {
     "name": "Apache FreeMarker",
-    "security_model_link": null,
-    "security_model_source": null,
+    "security_model_link": "https://github.com/apache/freemarker/security/policy",
+    "security_model_source": "https://raw.githubusercontent.com/apache/freemarker/2.3-gae/SECURITY.md",
     "advisory_link": null,
     "contact": "security@apache.org",
-    "logo_link": "https://www.apache.org/logos/res/freemarker/default.png"
+    "logo_link": "https://www.apache.org/logos/res/freemarker/default.png",
+    "projects": [
+      {
+        "name": "Apache FreeMarker Online Tester",
+        "security_model_link": "https://github.com/apache/freemarker-online-tester/security/policy",
+        "security_model_source": "https://raw.githubusercontent.com/apache/freemarker-online-tester/master/SECURITY.md"
+      }
+    ]
   },
   "geode": {
     "name": "Apache Geode",
@@ -590,10 +615,17 @@
   "grails": {
     "name": "Apache Grails",
     "security_model_link": "https://github.com/apache/grails-core/blob/8.0.x/THREAT_MODEL.md",
-    "security_model_source": "https://raw.githubusercontent.com/apache/grails-core/refs/heads/8.0.x/THREAT_MODEL.md",
+    "security_model_source": "https://raw.githubusercontent.com/apache/grails-core/8.0.x/THREAT_MODEL.md",
     "advisory_link": null,
     "contact": "security@apache.org",
-    "logo_link": "https://www.apache.org/logos/res/grails/default.png"
+    "logo_link": "https://www.apache.org/logos/res/grails/default.png",
+    "projects": [
+      {
+        "name": "Apache Grails Spring Security",
+        "security_model_link": "https://github.com/apache/grails-spring-security/blob/8.0.x/THREAT_MODEL.md",
+        "security_model_source": "https://raw.githubusercontent.com/apache/grails-spring-security/8.0.x/THREAT_MODEL.md"
+      }
+    ]
   },
   "gravitino": {
     "name": "Apache Gravitino",
@@ -631,7 +663,7 @@
   "hadoop": {
     "name": "Apache Hadoop",
     "security_model_link": "https://github.com/apache/hadoop/security/policy",
-    "security_model_source": "https://raw.githubusercontent.com/apache/hadoop/refs/heads/trunk/SECURITY.md",
+    "security_model_source": "https://raw.githubusercontent.com/apache/hadoop/trunk/SECURITY.md",
     "advisory_link": "https://hadoop.apache.org/cve_list.html",
     "contact": "security@hadoop.apache.org",
     "logo_link": "https://www.apache.org/logos/res/hadoop/default.png"
@@ -648,7 +680,7 @@
   "helix": {
     "name": "Apache Helix",
     "security_model_link": "https://github.com/apache/helix/blob/master/THREAT_MODEL.md",
-    "security_model_source": "https://raw.githubusercontent.com/apache/helix/refs/heads/master/THREAT_MODEL.md",
+    "security_model_source": "https://raw.githubusercontent.com/apache/helix/master/THREAT_MODEL.md",
     "advisory_link": null,
     "contact": "security@apache.org",
     "logo_link": "https://www.apache.org/logos/res/helix/default.png"
@@ -665,7 +697,7 @@
   "hive": {
     "name": "Apache Hive",
     "security_model_link": "https://github.com/apache/hive/blob/master/THREAT_MODEL.md",
-    "security_model_source": "https://raw.githubusercontent.com/apache/hive/refs/heads/master/THREAT_MODEL.md",
+    "security_model_source": "https://raw.githubusercontent.com/apache/hive/master/THREAT_MODEL.md",
     "advisory_link": null,
     "contact": "security@hive.apache.org",
     "logo_link": "https://www.apache.org/logos/res/hive/default.png"
@@ -673,7 +705,7 @@
   "hop": {
     "name": "Apache Hop",
     "security_model_link": "https://github.com/apache/hop/blob/main/THREAT_MODEL.md",
-    "security_model_source": "https://raw.githubusercontent.com/apache/hop/refs/heads/main/THREAT_MODEL.md",
+    "security_model_source": "https://raw.githubusercontent.com/apache/hop/main/THREAT_MODEL.md",
     "advisory_link": null,
     "contact": "security@apache.org",
     "logo_link": "https://www.apache.org/logos/res/hop/default.png"
@@ -715,7 +747,7 @@
   "iceberg": {
     "name": "Apache Iceberg",
     "security_model_link": "https://github.com/apache/iceberg/blob/main/SECURITY-THREAT-MODEL.md",
-    "security_model_source": "https://raw.githubusercontent.com/apache/iceberg/refs/heads/main/SECURITY-THREAT-MODEL.md",
+    "security_model_source": "https://raw.githubusercontent.com/apache/iceberg/main/SECURITY-THREAT-MODEL.md",
     "advisory_link": null,
     "contact": "security@iceberg.apache.org",
     "contributing": "https://iceberg.apache.org/community/",
@@ -749,18 +781,30 @@
   "iotdb": {
     "name": "Apache IoTDB",
     "security_model_link": "https://github.com/apache/iotdb/blob/master/THREAT_MODEL.md",
-    "security_model_source": "https://raw.githubusercontent.com/apache/iotdb/refs/heads/master/THREAT_MODEL.md",
+    "security_model_source": "https://raw.githubusercontent.com/apache/iotdb/master/THREAT_MODEL.md",
     "advisory_link": null,
     "contact": "security@apache.org",
     "logo_link": "https://www.apache.org/logos/res/iotdb/default.png"
   },
   "jackrabbit": {
     "name": "Apache Jackrabbit",
-    "security_model_link": "https://jackrabbit.apache.org/jcr/security-reports.html",
-    "security_model_source": null,
+    "security_model_link": "https://github.com/apache/jackrabbit/blob/trunk/THREAT_MODEL.md",
+    "security_model_source": "https://raw.githubusercontent.com/apache/jackrabbit/trunk/THREAT_MODEL.md",
     "advisory_link": "https://jackrabbit.apache.org/jcr/security-reports.html",
     "contact": "security@jackrabbit.apache.org",
-    "logo_link": "https://www.apache.org/logos/res/jackrabbit/default.png"
+    "logo_link": "https://www.apache.org/logos/res/jackrabbit/default.png",
+    "projects": [
+      {
+        "name": "Apache Jackrabbit Oak",
+        "security_model_link": "https://github.com/apache/jackrabbit-oak/blob/trunk/THREAT_MODEL.md",
+        "security_model_source": "https://raw.githubusercontent.com/apache/jackrabbit-oak/trunk/THREAT_MODEL.md"
+      },
+      {
+        "name": "Apache Jackrabbit FileVault",
+        "security_model_link": "https://github.com/apache/jackrabbit-filevault/blob/master/THREAT_MODEL.md",
+        "security_model_source": "https://raw.githubusercontent.com/apache/jackrabbit-filevault/master/THREAT_MODEL.md"
+      }
+    ]
   },
   "james": {
     "name": "Apache James",
@@ -781,7 +825,7 @@
   "jmeter": {
     "name": "Apache JMeter",
     "security_model_link": "https://github.com/apache/jmeter/blob/master/THREAT_MODEL.md",
-    "security_model_source": "https://raw.githubusercontent.com/apache/jmeter/refs/heads/master/THREAT_MODEL.md",
+    "security_model_source": "https://raw.githubusercontent.com/apache/jmeter/master/THREAT_MODEL.md",
     "advisory_link": null,
     "contact": "security@apache.org",
     "logo_link": "https://www.apache.org/logos/res/jmeter/default.png"
@@ -797,7 +841,7 @@
   "jspwiki": {
     "name": "Apache JSPWiki",
     "security_model_link": "https://github.com/apache/jspwiki/blob/master/THREAT_MODEL.md",
-    "security_model_source": "https://raw.githubusercontent.com/apache/jspwiki/refs/heads/master/THREAT_MODEL.md",
+    "security_model_source": "https://raw.githubusercontent.com/apache/jspwiki/master/THREAT_MODEL.md",
     "advisory_link": "https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE",
     "contact": "security@apache.org",
     "logo_link": "https://www.apache.org/logos/res/jspwiki/default.png"
@@ -812,8 +856,8 @@
   },
   "kafka": {
     "name": "Apache Kafka",
-    "security_model_link": "https://kafka.apache.org/project-security.html",
-    "security_model_source": null,
+    "security_model_link": "https://github.com/apache/kafka/blob/trunk/docs/security/security-model.md",
+    "security_model_source": "https://raw.githubusercontent.com/apache/kafka/trunk/docs/security/security-model.md",
     "advisory_link": "https://kafka.apache.org/cve-list.html",
     "contact": "security@kafka.apache.org",
     "dependency_advisory_triage": "https://github.com/apache/kafka/blob/trunk/gradle/resources/dependencycheck-suppressions.xml",
@@ -829,8 +873,8 @@
   },
   "knox": {
     "name": "Apache Knox",
-    "security_model_link": null,
-    "security_model_source": null,
+    "security_model_link": "https://github.com/apache/knox/blob/master/THREAT_MODEL.md",
+    "security_model_source": "https://raw.githubusercontent.com/apache/knox/master/THREAT_MODEL.md",
     "advisory_link": null,
     "contact": "security@apache.org",
     "logo_link": "https://www.apache.org/logos/res/knox/default.png"
@@ -838,7 +882,7 @@
   "kudu": {
     "name": "Apache Kudu",
     "security_model_link": "https://github.com/apache/kudu/blob/master/THREAT_MODEL.md",
-    "security_model_source": "https://raw.githubusercontent.com/apache/kudu/refs/heads/master/THREAT_MODEL.md",
+    "security_model_source": "https://raw.githubusercontent.com/apache/kudu/master/THREAT_MODEL.md",
     "advisory_link": null,
     "contact": "security@apache.org",
     "logo_link": "https://www.apache.org/logos/res/kudu/default.png"
@@ -846,7 +890,7 @@
   "kvrocks": {
     "name": "Apache Kvrocks",
     "security_model_link": "https://github.com/apache/kvrocks/blob/unstable/THREAT_MODEL.md",
-    "security_model_source": "https://raw.githubusercontent.com/apache/kvrocks/refs/heads/unstable/THREAT_MODEL.md",
+    "security_model_source": "https://raw.githubusercontent.com/apache/kvrocks/unstable/THREAT_MODEL.md",
     "advisory_link": null,
     "contact": "security@apache.org",
     "logo_link": "https://www.apache.org/logos/res/kvrocks/default.png"
@@ -895,7 +939,7 @@
   "logging": {
     "name": "Apache Logging",
     "security_model_link": "https://logging.apache.org/security.html",
-    "security_model_source": "https://raw.githubusercontent.com/apache/logging-site/refs/heads/main/src/site/antora/modules/ROOT/pages/_threat-model-common.adoc",
+    "security_model_source": "https://raw.githubusercontent.com/apache/logging-site/main/src/site/antora/modules/ROOT/pages/_threat-model-common.adoc",
     "advisory_link": "https://logging.apache.org/security.html",
     "contact": "security@logging.apache.org",
     "logo_link": null
@@ -927,7 +971,7 @@
   "magpie": {
     "name": "Apache Magpie",
     "security_model_link": "https://github.com/apache/magpie/blob/main/docs/security/threat-model.md",
-    "security_model_source": "https://raw.githubusercontent.com/apache/magpie/refs/heads/main/docs/security/threat-model.md",
+    "security_model_source": "https://raw.githubusercontent.com/apache/magpie/main/docs/security/threat-model.md",
     "advisory_link": null,
     "contact": "security@apache.org",
     "logo_link": "https://www.apache.org/logos/res/magpie/default.png"
@@ -951,7 +995,7 @@
   "maven": {
     "name": "Apache Maven",
     "security_model_link": "https://github.com/apache/maven/blob/master/THREAT_MODEL.md",
-    "security_model_source": "https://raw.githubusercontent.com/apache/maven/refs/heads/master/THREAT_MODEL.md",
+    "security_model_source": "https://raw.githubusercontent.com/apache/maven/master/THREAT_MODEL.md",
     "advisory_link": null,
     "contact": "security@apache.org",
     "contributing": "https://maven.apache.org/developers/index.html",
@@ -1008,7 +1052,7 @@
   "nutch": {
     "name": "Apache Nutch",
     "security_model_link": "https://github.com/apache/nutch/blob/master/THREAT_MODEL.md",
-    "security_model_source": "https://raw.githubusercontent.com/apache/nutch/refs/heads/master/THREAT_MODEL.md",
+    "security_model_source": "https://raw.githubusercontent.com/apache/nutch/master/THREAT_MODEL.md",
     "advisory_link": "https://nutch.apache.org/documentation/security/#nutch-cve-list",
     "contact": "security@apache.org",
     "logo_link": "https://www.apache.org/logos/res/nutch/default.png"
@@ -1088,7 +1132,7 @@
   "orc": {
     "name": "Apache ORC",
     "security_model_link": "https://orc.apache.org/security/",
-    "security_model_source": "https://raw.githubusercontent.com/apache/orc/refs/heads/main/site/security/index.md",
+    "security_model_source": "https://raw.githubusercontent.com/apache/orc/main/site/security/index.md",
     "advisory_link": "https://orc.apache.org/security/",
     "contact": "security@apache.org",
     "logo_link": "https://www.apache.org/logos/res/orc/default.png"
@@ -1096,7 +1140,7 @@
   "ozone": {
     "name": "Apache Ozone",
     "security_model_link": "https://github.com/apache/ozone/blob/master/THREAT_MODEL.md",
-    "security_model_source": "https://raw.githubusercontent.com/apache/ozone/refs/heads/master/THREAT_MODEL.md",
+    "security_model_source": "https://raw.githubusercontent.com/apache/ozone/master/THREAT_MODEL.md",
     "advisory_link": null,
     "contact": "security@ozone.apache.org",
     "contributing": "https://ozone.apache.org/community/how-to-contribute",
@@ -1112,16 +1156,16 @@
   },
   "parquet": {
     "name": "Apache Parquet",
-    "security_model_link": "https://github.com/apache/parquet-java/blob/master/SECURITY.md",
-    "security_model_source": "https://raw.githubusercontent.com/apache/parquet-java/refs/heads/master/SECURITY.md",
+    "security_model_link": "https://github.com/apache/parquet-java/security/policy",
+    "security_model_source": "https://raw.githubusercontent.com/apache/parquet-java/master/SECURITY.md",
     "advisory_link": null,
     "contact": "security@apache.org",
     "logo_link": "https://www.apache.org/logos/res/parquet/default.png"
   },
   "pdfbox": {
     "name": "Apache PDFBox",
-    "security_model_link": "https://pdfbox.apache.org/security.html",
-    "security_model_source": null,
+    "security_model_link": "https://github.com/apache/pdfbox/security/policy",
+    "security_model_source": "https://raw.githubusercontent.com/apache/pdfbox/trunk/SECURITY.md",
     "advisory_link": null,
     "contact": "security@apache.org",
     "logo_link": "https://www.apache.org/logos/res/pdfbox/default.png"
@@ -1169,7 +1213,7 @@
   "plc4x": {
     "name": "Apache PLC4X",
     "security_model_link": "https://github.com/apache/plc4x/blob/develop/THREAT-MODEL.md",
-    "security_model_source": "https://raw.githubusercontent.com/apache/plc4x/refs/heads/develop/THREAT-MODEL.md",
+    "security_model_source": "https://raw.githubusercontent.com/apache/plc4x/develop/THREAT-MODEL.md",
     "advisory_link": null,
     "contact": "security@apache.org",
     "logo_link": "https://www.apache.org/logos/res/plc4x/default.png"
@@ -1185,10 +1229,17 @@
   "polaris": {
     "name": "Apache Polaris",
     "security_model_link": "https://github.com/apache/polaris/blob/main/SECURITY-THREAT-MODEL.md",
-    "security_model_source": "https://raw.githubusercontent.com/apache/polaris/refs/heads/main/SECURITY-THREAT-MODEL.md",
+    "security_model_source": "https://raw.githubusercontent.com/apache/polaris/main/SECURITY-THREAT-MODEL.md",
     "advisory_link": null,
     "contact": "security@apache.org",
-    "logo_link": "https://www.apache.org/logos/res/polaris/default.png"
+    "logo_link": "https://www.apache.org/logos/res/polaris/default.png",
+    "projects": [
+      {
+        "name": "Apache Polaris Tools",
+        "security_model_link": "https://github.com/apache/polaris-tools/blob/main/SECURITY-THREAT-MODEL.md",
+        "security_model_source": "https://raw.githubusercontent.com/apache/polaris-tools/main/SECURITY-THREAT-MODEL.md"
+      }
+    ]
   },
   "pulsar": {
     "name": "Apache Pulsar",
@@ -1210,7 +1261,7 @@
   "ranger": {
     "name": "Apache Ranger",
     "security_model_link": "https://github.com/apache/ranger/blob/master/THREAT_MODEL.md",
-    "security_model_source": "https://raw.githubusercontent.com/apache/ranger/refs/heads/master/THREAT_MODEL.md",
+    "security_model_source": "https://raw.githubusercontent.com/apache/ranger/master/THREAT_MODEL.md",
     "advisory_link": "https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger",
     "contact": "security@apache.org",
     "contributing": "https://rocketmq.apache.org/docs/contributionGuide/01how-to-contribute",
@@ -1268,7 +1319,7 @@
   "santuario": {
     "name": "Apache Santuario",
     "security_model_link": "https://github.com/apache/santuario-xml-security-java/blob/main/THREAT_MODEL.md",
-    "security_model_source": "https://raw.githubusercontent.com/apache/santuario-xml-security-java/refs/heads/main/THREAT_MODEL.md",
+    "security_model_source": "https://raw.githubusercontent.com/apache/santuario-xml-security-java/main/THREAT_MODEL.md",
     "advisory_link": null,
     "contact": "security@apache.org",
     "logo_link": "https://www.apache.org/logos/res/santuario/default.png"
@@ -1342,14 +1393,14 @@
   "shenyu": {
     "name": "Apache ShenYu",
     "security_model_link": "https://github.com/apache/shenyu/blob/master/SECURITY_MODEL.md",
-    "security_model_source": "https://raw.githubusercontent.com/apache/shenyu/refs/heads/master/SECURITY_MODEL.md",
+    "security_model_source": "https://raw.githubusercontent.com/apache/shenyu/master/SECURITY_MODEL.md",
     "advisory_link": null,
     "contact": "security@apache.org",
     "logo_link": "https://www.apache.org/logos/res/shenyu/default.png"
   },
   "shiro": {
     "name": "Apache Shiro",
-    "security_model_link": "https://shiro.apache.org/security-reports.html",
+    "security_model_link": "https://shiro.apache.org/security-model.html",
     "security_model_source": null,
     "advisory_link": null,
     "contact": "security@shiro.apache.org",
@@ -1383,15 +1434,15 @@
   "sling": {
     "name": "Apache Sling",
     "security_model_link": "https://github.com/apache/sling/blob/master/docs/threat-model.md",
-    "security_model_source": "https://raw.githubusercontent.com/apache/sling/refs/heads/master/docs/threat-model.md",
+    "security_model_source": "https://raw.githubusercontent.com/apache/sling/master/docs/threat-model.md",
     "advisory_link": null,
     "contact": "security@sling.apache.org",
     "logo_link": "https://www.apache.org/logos/res/sling/default.png"
   },
   "solr": {
     "name": "Apache Solr",
-    "security_model_link": "https://cwiki.apache.org/confluence/display/SOLR/SolrSecurity",
-    "security_model_source": null,
+    "security_model_link": "https://github.com/apache/solr/blob/main/THREAT_MODEL.md",
+    "security_model_source": "https://raw.githubusercontent.com/apache/solr/main/THREAT_MODEL.md",
     "advisory_link": "https://solr.apache.org/security.html#recent-cve-reports-for-apache-solr",
     "contact": "security@solr.apache.org",
     "dependency_advisory_triage": "https://solr.apache.org/solr.vex.json",
@@ -1407,7 +1458,7 @@
   },
   "spark": {
     "name": "Apache Spark",
-    "security_model_link": "https://spark.apache.org/security.html",
+    "security_model_link": "https://spark.apache.org/docs/latest/security.html",
     "security_model_source": null,
     "advisory_link": "https://spark.apache.org/security.html",
     "contact": "security@apache.org",
@@ -1449,7 +1500,7 @@
   "streampipes": {
     "name": "Apache StreamPipes",
     "security_model_link": "https://github.com/apache/streampipes/blob/dev/THREAT_MODEL.md",
-    "security_model_source": "https://raw.githubusercontent.com/apache/streampipes/refs/heads/dev/THREAT_MODEL.md",
+    "security_model_source": "https://raw.githubusercontent.com/apache/streampipes/dev/THREAT_MODEL.md",
     "advisory_link": null,
     "contact": "security@apache.org",
     "logo_link": "https://www.apache.org/logos/res/streampipes/default.png"
@@ -1457,7 +1508,7 @@
   "struts": {
     "name": "Apache Struts",
     "security_model_link": "https://github.com/apache/struts/blob/main/THREAT_MODEL.md",
-    "security_model_source": "https://raw.githubusercontent.com/apache/struts/refs/heads/main/THREAT_MODEL.md",
+    "security_model_source": "https://raw.githubusercontent.com/apache/struts/main/THREAT_MODEL.md",
     "advisory_link": "https://cwiki.apache.org/confluence/display/WW/Security+Bulletins",
     "contact": "security@struts.apache.org",
     "logo_link": "https://www.apache.org/logos/res/struts/default.png"
@@ -1476,12 +1527,19 @@
     "security_model_source": "https://raw.githubusercontent.com/apache/superset/master/SECURITY.md",
     "advisory_link": "https://superset.apache.org/docs/security/cves",
     "contact": "security@superset.apache.org",
-    "logo_link": "https://www.apache.org/logos/res/superset/default.png"
+    "logo_link": "https://www.apache.org/logos/res/superset/default.png",
+    "projects": [
+      {
+        "name": "Apache Superset Kubernetes Operator",
+        "security_model_link": "https://github.com/apache/superset-kubernetes-operator/blob/main/docs/reference/security.md",
+        "security_model_source": "https://raw.githubusercontent.com/apache/superset-kubernetes-operator/main/docs/reference/security.md"
+      }
+    ]
   },
   "synapse": {
     "name": "Apache Synapse",
     "security_model_link": "https://github.com/apache/synapse/blob/master/THREAT_MODEL.md",
-    "security_model_source": "https://raw.githubusercontent.com/apache/synapse/refs/heads/master/THREAT_MODEL.md",
+    "security_model_source": "https://raw.githubusercontent.com/apache/synapse/master/THREAT_MODEL.md",
     "advisory_link": null,
     "contact": "security@apache.org",
     "logo_link": "https://www.apache.org/logos/res/synapse/default.png"
@@ -1505,7 +1563,7 @@
   "tapestry": {
     "name": "Apache Tapestry",
     "security_model_link": "https://github.com/apache/tapestry-5/blob/master/THREAT_MODEL.md",
-    "security_model_source": "https://raw.githubusercontent.com/apache/tapestry-5/refs/heads/master/THREAT_MODEL.md",
+    "security_model_source": "https://raw.githubusercontent.com/apache/tapestry-5/master/THREAT_MODEL.md",
     "advisory_link": null,
     "contact": "security@apache.org",
     "logo_link": "https://www.apache.org/logos/res/tapestry/default.png"
@@ -1520,11 +1578,28 @@
   },
   "teaclave": {
     "name": "Apache Teaclave",
-    "security_model_link": null,
-    "security_model_source": null,
+    "security_model_link": "https://github.com/apache/teaclave/blob/main/docs/security-model.md",
+    "security_model_source": "https://raw.githubusercontent.com/apache/teaclave/main/docs/security-model.md",
     "advisory_link": null,
     "contact": "security@apache.org",
-    "logo_link": "https://www.apache.org/logos/res/teaclave/default.png"
+    "logo_link": "https://www.apache.org/logos/res/teaclave/default.png",
+    "projects": [
+      {
+        "name": "Apache Teaclave (Rust Crates)",
+        "security_model_link": "https://github.com/apache/teaclave-crates/blob/main/docs/security-model.md",
+        "security_model_source": "https://raw.githubusercontent.com/apache/teaclave-crates/main/docs/security-model.md"
+      },
+      {
+        "name": "Apache Teaclave TrustZone SDK",
+        "security_model_link": "https://github.com/apache/teaclave-trustzone-sdk/blob/main/docs/security-model.md",
+        "security_model_source": "https://raw.githubusercontent.com/apache/teaclave-trustzone-sdk/main/docs/security-model.md"
+      },
+      {
+        "name": "Apache Teaclave SGX SDK",
+        "security_model_link": "https://github.com/apache/teaclave-sgx-sdk/blob/main/docs/security-model.md",
+        "security_model_source": "https://raw.githubusercontent.com/apache/teaclave-sgx-sdk/main/docs/security-model.md"
+      }
+    ]
   },
   "tez": {
     "name": "Apache Tez",
@@ -1552,15 +1627,15 @@
   },
   "tinkerpop": {
     "name": "Apache TinkerPop",
-    "security_model_link": null,
-    "security_model_source": null,
+    "security_model_link": "https://github.com/apache/tinkerpop/blob/master/THREAT_MODEL.md",
+    "security_model_source": "https://raw.githubusercontent.com/apache/tinkerpop/master/THREAT_MODEL.md",
     "advisory_link": null,
     "contact": "security@apache.org",
     "logo_link": "https://www.apache.org/logos/res/tinkerpop/default.png"
   },
   "tomcat": {
     "name": "Apache Tomcat",
-    "security_model_link": "https://tomcat.apache.org/security.html",
+    "security_model_link": "https://tomcat.apache.org/security-model.html",
     "security_model_source": null,
     "advisory_link": "https://tomcat.apache.org/security.html",
     "contact": "security@tomcat.apache.org",
@@ -1569,8 +1644,8 @@
   },
   "tomee": {
     "name": "Apache TomEE",
-    "security_model_link": null,
-    "security_model_source": null,
+    "security_model_link": "https://github.com/apache/tomee/security/policy",
+    "security_model_source": "https://raw.githubusercontent.com/apache/tomee/main/SECURITY.md",
     "advisory_link": null,
     "contact": "security@apache.org",
     "logo_link": "https://www.apache.org/logos/res/tomee/default.png"
@@ -1589,7 +1664,14 @@
     "security_model_source": "https://raw.githubusercontent.com/apache/trafficserver/master/SECURITY.md",
     "advisory_link": null,
     "contact": "security@trafficserver.apache.org",
-    "logo_link": "https://www.apache.org/logos/res/trafficserver/default.png"
+    "logo_link": "https://www.apache.org/logos/res/trafficserver/default.png",
+    "projects": [
+      {
+        "name": "Apache Traffic Server Ingress Controller",
+        "security_model_link": "https://github.com/apache/trafficserver-ingress-controller/security/policy",
+        "security_model_source": "https://raw.githubusercontent.com/apache/trafficserver-ingress-controller/master/SECURITY.md"
+      }
+    ]
   },
   "trafodion": {
     "name": "Apache Trafodion",
@@ -1650,7 +1732,7 @@
   "unomi": {
     "name": "Apache Unomi",
     "security_model_link": "https://github.com/apache/unomi/blob/master/THREAT_MODEL.md",
-    "security_model_source": "https://raw.githubusercontent.com/apache/unomi/refs/heads/master/THREAT_MODEL.md",
+    "security_model_source": "https://raw.githubusercontent.com/apache/unomi/master/THREAT_MODEL.md",
     "advisory_link": null,
     "contact": "security@apache.org",
     "logo_link": "https://www.apache.org/logos/res/unomi/default.png"
@@ -1701,7 +1783,29 @@
     "security_model_source": null,
     "advisory_link": null,
     "contact": "security@apache.org",
-    "logo_link": "https://www.apache.org/logos/res/ws/default.png"
+    "logo_link": "https://www.apache.org/logos/res/ws/default.png",
+    "projects": [
+      {
+        "name": "Apache Axiom",
+        "security_model_link": "https://github.com/apache/ws-axiom/blob/master/THREAT-MODEL.md",
+        "security_model_source": "https://raw.githubusercontent.com/apache/ws-axiom/master/THREAT-MODEL.md"
+      },
+      {
+        "name": "Apache XmlSchema",
+        "security_model_link": "https://github.com/apache/ws-xmlschema/blob/master/THREAT-MODEL.md",
+        "security_model_source": "https://raw.githubusercontent.com/apache/ws-xmlschema/master/THREAT-MODEL.md"
+      },
+      {
+        "name": "Apache Neethi",
+        "security_model_link": "https://github.com/apache/ws-neethi/blob/master/THREAT-MODEL.md",
+        "security_model_source": "https://raw.githubusercontent.com/apache/ws-neethi/master/THREAT-MODEL.md"
+      },
+      {
+        "name": "Apache WSS4J",
+        "security_model_link": "https://github.com/apache/ws-wss4j/blob/master/THREAT-MODEL.md",
+        "security_model_source": "https://raw.githubusercontent.com/apache/ws-wss4j/master/THREAT-MODEL.md"
+      }
+    ]
   },
   "xalan": {
     "name": "Apache Xalan",
@@ -1746,7 +1850,7 @@
   "zeppelin": {
     "name": "Apache Zeppelin",
     "security_model_link": "https://github.com/apache/zeppelin/blob/master/THREAT_MODEL.md",
-    "security_model_source": "https://raw.githubusercontent.com/apache/zeppelin/refs/heads/master/THREAT_MODEL.md",
+    "security_model_source": "https://raw.githubusercontent.com/apache/zeppelin/master/THREAT_MODEL.md",
     "advisory_link": null,
     "contact": "security@zeppelin.apache.org",
     "logo_link": "https://www.apache.org/logos/res/zeppelin/default.png"