Vulnerability alerts
Publish vulnerability alerts to your entities, collect their exposure answers and track patching deadlines.
Features
- Alerts carry severity, CVEs, mitigation, workaround and impacted technologies, with a unique ID and a patching deadline set on publish.
- Each receiving organization answers in a short form: involved, impacted, vulnerable, and how many assets are patched or mitigated.
- Answers are kept as an append-only history, and reminders go out until an organization replies.
- A follow-up alert inherits from its parent and keeps the earliest deadline.
Other modules
- Cyber incidentsAn incident registry with impact matrix, taxonomies, response times and a reconstructed story of each incident.
- Cyber weatherOne weather icon per organization that sums up current security tension, computed from incidents and alerts with rules you set.
- AssetsA referential of domains, IP ranges, brands and technologies, linked to the organizations that own or operate them.
- Phishing reportsReceive reported emails, inspect them safely, extract observables and group near-identical mails into clusters.
- Phishing campaignsJoin clusters into campaigns by shared infrastructure and spot unusual spikes and recurring waves.
- IndicatorsOne referential for every indicator you assert, with an approval lifecycle and delivery to the tools that act on them.
- ReportsReports built from your metrics, rendered to PDF and delivered on a schedule, each reader seeing only what they may read.
- CatalogPublish tools, services, policies and training to your organizations, organized by a taxonomy you define.
- RequestsUsers ask for access or for a change they cannot make themselves, reviewers approve, and the change applies on approval.
- DocumentsMarkdown documents kept per organization, with archive and permissions.
- DashboardsDrag-and-drop dashboards with charts over your security data, shared per user, per organization or globally.
- ConnectorsConnect MISP, Slack, DNS checks and outbound webhooks, with stored credentials encrypted and health checked.