Stack alerts

New vulnerabilities appear every day.We tell you which ones are yours.

List the software you run once. When a new record affects it, a flaw starts being exploited in the wild or an exploit is published, we tell you.

Six moments we alert you

01
A new flaw hits your stack
New records matching the product you listed. Add a version and you only get those affecting it.
02
Exploited in the wild
When a record you follow enters CISA's actively exploited list (KEV).
03
An exploit is published
When a ready-made exploit appears; we never share the code, only that it exists.
04
Exploitation odds jumped
When the EPSS score rises by 20 points or more in 7 days.
05
New result in a saved search
When a search you saved gets new records.
06
Fix this first
We rank matches by action score: exploitation, exploits, likelihood and severity together.

1Enter your stack: pick from the list, upload an SBOM, or give us your domain and we discover it.
2Pick a channel: daily email digest, Slack / Teams / Discord or a personal RSS feed.
3When a new record appears you get notified; the dashboard shows what to fix first.

Sample alert format

CVE-2024-3400 · Added to CISA KEV — actively exploited in the wild

Palo Alto Networks PAN-OS · CISA KEV · stack: PAN-OS

Matching is by product name and the version you enter; not every record affects your setup.
We never give exploit code or links; only that one exists and its name.

Is it paid?: No. Stack matching, notifications, the email digest, RSS and Slack alerts are free. Pro makes alerts faster and adds full export.
Do I have to enter a version?: No. Without a version all records for the product match; with one, only those affecting it.
Can I share it with my team?: Yes. A team gets a shared stack, and you can set a status and a note on each record.

Create an account, pick the software you run. First matches show immediately.