> Is there an eval for this and if there is why can't they just make it public?

For the same reason the CIA doesn't publish the Windows exploits it finds?