Know when a site you manage
gets a new CVE.
Add a URL. We identify the CMS, frameworks, and libraries it runs, check them every hour against CVE.org and CISA KEV, and rank alerts by what attackers actually exploit. Nothing to install, and we never probe your site.
How it works
This is not a vulnerability scanner. We read your public pages to see what your site runs, then match that against public CVE feeds.
Add your website
Enter a URL. There is nothing to install on your site.
We identify your stackBeta
Frameworks, CMSs, libraries, and servers, with versions. Works best on WordPress and server-rendered sites. On React and Angular apps it can miss libraries, and you can add them by hand.
You get the alerts that matter
Every hour we check new CVEs against that software and tell the right people.
From new CVE to fixed.
Ranked by real risk
Actively exploited CVEs come first, then CVSS and EPSS. Every alert says why it fired and how sure we are.
No plugin, no code access
It works from the URL alone, on WordPress and other stacks, so it fits sites you can’t install anything on.
Fewer alerts, where you work
Email alerts with their own minimum severity. Slack, Teams and webhooks are coming soon.
Works with coding agents
Claude Code can read your alerts over MCP, fix them in your code, and mark them resolved.
Pro and Agency aren't on sale yet. Join the waitlist and we'll email you when they open.
Talk to us
Questions before you start, a site we don't detect well, or a feature you need? Send a message and we'll reply by email.