Free
$0 / month
For your own site and side projects.
- 3 monitored sites
- Hourly CVE monitoring
- Alerts kept 4 days, then deleted
- 1 day of past CVEs for new software
- Email alerts
- Automatic re-detection
Free for three sites. Paid plans are coming soon.
$0 / month
For your own site and side projects.
$5 / month
For freelancers and small teams.
$15 / month
For agencies looking after client sites.
| Feature | Free | Pro | Agency |
|---|---|---|---|
| Monitored sites | 3 | 25 | 150 |
| CVE monitoring | Hourly | Hourly | Hourly |
| Past CVEs for new software | 1 day | 7 days | 29 days |
| Stack detection (beta) | On demand | On demand | On demand |
| Automatic re-detection | Coming soon | Coming soon | Coming soon |
| Team members | 1 | 3 | 10 |
| Notification channels | Email (Slack, Teams soon) | Email (all channels soon) |
No. WatchMyCVE is not a vulnerability scanner and never probes or attacks your site. It identifies the software your site runs from its public pages, then matches that against public CVE feeds.
It works best on WordPress and other server-rendered sites. React and Angular apps bundle their libraries, so some can be missed. Add anything missing by hand and it is watched like everything else.
Paid plans are coming soon. Until then, the free plan covers three sites.
No. The free plan is available without a credit card.
You will not be able to add another site until paid plans open. Your existing sites keep being watched.