How it works

1. Install the agent in one line

   Pick an operating system in the dashboard and paste one command. It downloads a small, signed agent, checks its fingerprint, installs it as a service, and enrolls with a short-lived token. No inbound ports are opened.

2. We inventory what's installed

   The agent lists installed operating-system packages, language packages, running containers and listening ports — read-only — and sends the list over HTTPS. After the first scan it sends only changes.

3. Every package is matched against live threat data

   We compare exact versions against OSV advisories (including distro packages with correct epoch and release handling), the CVE List, CISA's exploited catalog, EPSS exploit odds and public exploit tooling. Matching re-runs whenever your inventory or the threat data changes.

4. One ranked list: what to fix first

   Each finding gets a 1–100 risk score with a visible breakdown: severity, real-world exploitation, exploit odds, available attack tools, ransomware use, exposure and impact. Then we tell you exactly which package to upgrade, to which version.

5. Alerts when it matters

   Get an email, Slack or Teams message for "act now" findings and newly exploited issues on your machines — never twice for the same finding.

No agent? Add machines by uploading an inventory file (pip freeze, package-lock.json, rpm -qa, dpkg-query) or by describing a product by name for keyword monitoring.