Selected features and improvements. RSS feed
Take responsibility for an expiring or revoked certificate confirmed in use, record a review note and deadline, and see escalation receipts in its detail view. Response work and escalation stay within the selected workspace.
Keep explanations with finding decisions and review current outcomes, incomplete website checks and recorded review times. Monitored website investigations flag meaningful changes after dismissal while retaining the original decision.
Explore an illustrative copied-login or parked-domain investigation without signing in. Compare evidence, record a sample decision, and review the response and follow-up alongside an explicit plan comparison.
Group CVE findings addressed by the same upgrade, review affected assets, and assign an owner and due date. Keep check results and work history together, with an evidence download for review.
Route website investigation updates to selected workflow destinations, and compare phone numbers found on inspected pages with your approved support numbers. App reviews also show store identifiers and recent listing changes.
Business and Custom can compare suspected copies with protected pages, review screenshots and forms, import referral sources, and enable an optional website beacon. After closing an investigation, monitor the page for 7, 30 or 90 days and review flagged changes.
Business workspaces can review the hosts, services and version evidence behind a CVE finding, including configuration gaps and conflicting observations. Assign an owner and keep remediation-check results with the finding.
Add branches and arrange workflow cards with drag and drop, with conditions, working hours and delivery delays. Assign acknowledgements with deadlines and escalation destinations, and review recorded runs.
Start a 14-day monitoring trial for a verified company domain without a credit card. Company owners can subscribe to Business and manage invoices, payment methods and cancellation from Billing.
Enable email alerts for important changes to CVEs you follow, including exploitation reports, CISA KEV additions and public exploit references. Updates are grouped into at most one email per hour.
CVE pages now show Exploit-DB and Metasploit references alongside GitHub exploit candidates. Unverified candidates are labeled separately from reports of active exploitation.
Phishing findings now include dated inspection history, available screenshots, and downloadable evidence. Earlier checks remain accessible.
Certificate discovery adds Shodan observations for monitored domains, including certificate names, issuer, validity dates, and TLS details.
IP lookups now include available registry records, network contacts, registration comments, and JSON export for signed-in users.
Teams can create and version response playbooks, preview their steps, and review prepared actions in the Response queue. Actions require approval before execution.
Technology watches support CSV, CycloneDX, and SPDX imports, with a review step before saving products and versions.
SecurityAlert research and reporting from security publishers appear on one searchable page, with source links and RSS feeds.
Search official vendor bulletins by product, CVE, or severity. Advisories show affected products, fixed versions, and links to the original source.
Campaign pages collect timelines, targets, and attributed actors. Teams can save supporting evidence and prepare briefings for review.
Identity cases show affected accounts, services, and source evidence. Authorized directory snapshots and security-event imports add account context.
Expanded actor profiles include activity timelines, related campaigns, indicators, and ATT&CK techniques.
MCP clients can look up indicators, review exposure, and work with findings using the account's existing permissions.
Added RansomLook as a second source and expanded available victim history. Duplicate records are combined.
The public API provides brand findings and indicator lookups, with API-key authentication and OpenAPI documentation.
Vendor monitoring tracks security findings and certificate posture separately from your own brands.
SecurityAlert launched with brand monitoring, threat actor profiles, ransomware tracking, and CVE intelligence.