Free vulnerability alerts for the software and devices you run
Know when your stack is under attack.
For IT and security teams, MSPs, developers and small businesses. Tick the products you run. We watch CISA's Known Exploited Vulnerabilities catalogue around the clock, add severity scores from the US National Vulnerability Database, and alert you only when a CVE hits your stack.
No credit card. Sign in with your email, always with two-step verification. Only you can see your stack.
Exploited in the wild
latest from CISA KEVThree steps, two minutes
Pick your stack
Tick what you run, from firewalls and VPNs to identity, backup, ITSM and AI tools. 142 products and growing, and you can request more.
Choose how you hear
Instant email or one daily digest. Known exploited flaws always get through; you choose the bar for everything else.
Act on one clear line
Every alert says what's affected, that it's being exploited, the CISA deadline and what to do next. Your dashboard ranks it all by real risk.
Built for everyone who keeps systems running
IT and system administrators
Patch what attackers are actually using first, without reading every advisory that comes out.
Security teams and SOC analysts
One ranked list of known exploited vulnerabilities across your stack, with CISA due dates, ready to work through.
MSPs and IT service providers
Watch the firewalls, remote access and RMM tools you support, and hear first when one of them is under attack.
Developers and DevOps engineers
Get told when GitLab, Jenkins, Kubernetes, your web servers or AI tools like Ollama, LangChain and Cursor have a flaw being exploited.
Small businesses
No security team? Tick Microsoft 365, your firewall, backup and NAS, and get a plain-English email when something needs fixing.
IT managers and CISOs
Show what was found, what was handled and how fast, with a management report you can print or save as PDF.
Products we watch
AI & machine learning
Anthropic, Anyscale, Anysphere, DeepSeek, FlowiseAI, GitHub, Google, Hugging Face, LangChain, Langflow, LlamaIndex, Meta, Microsoft, Mistral AI, MLflow, n8n, NVIDIA, Ollama, Open WebUI, OpenAI, Perplexity, PyTorch, vLLM, xAI
Backup & recovery
Acronis, Commvault, NAKIVO, Rubrik, Veeam, Veritas
Browsers & endpoint apps
7-Zip, Adobe, Apple, Google, Microsoft, Mozilla, RARLAB, Zoom
Cloud & DevOps
Craft CMS, Docker, GitLab, Jenkins, JetBrains, Kubernetes, Microsoft
Email security
Barracuda, Cisco, Fortinet, Mimecast, Proofpoint
Endpoint protection
CrowdStrike, ESET, Microsoft, SentinelOne, Sophos, Trend Micro
Firewall & VPN
Check Point, Cisco, Fortinet, Ivanti, Juniper Networks, OpenVPN, Palo Alto Networks, SonicWall, Sophos, WatchGuard, Zyxel
Identity & email
Cisco, Google, Microsoft, Okta, Ping Identity, Roundcube, Synacor
ITSM & collaboration
Atlassian, Cleo, Fortra, Freshworks, Microsoft, PaperCut, Progress, ServiceNow, Zendesk, Zoho
Network devices
Arista, Cisco, D-Link, F5, HPE Aruba, ISC, MikroTik, TP-Link, Ubiquiti
Operating systems
Apple, Google, Linux, Microsoft
Remote access & RMM
AnyDesk, BeyondTrust, Citrix, ConnectWise, Kaseya, NinjaOne, SimpleHelp, SolarWinds, TeamViewer
Virtualization & infrastructure
Dell, HPE, Microsoft, NetApp, Nutanix, QNAP, Synology, VMware
Web & application servers
Apache, Drupal, F5, Microsoft, Oracle, PHP Group, SAP, WordPress
New to WatchMyStack? See how it works in the help centre. Missing a product? Request it after you sign up. Product names are trademarks of their owners; WatchMyStack is not affiliated with them.