Skip to content
Start free trial
Menu
Sign inFree scanStart with your public exposureAttacker’s View™Who it’s forFor MSPsOne security assessment tool for every clientPricingTrustProduct overviewFrom security findings to a clear action planMicrosoft 365Identity, email, sharing, apps, and devicesAzure securityReview your cloud configuration and exposureVulnerability WatchAdvisories matched to your technologyInsurance evidenceUnderstand what supports your answersAI assistant · BetaExplore your evidence in plain languageDemo videosSee the product before you sign upGuides & insightsPractical security reading
Coverage · Vulnerability Watch

The security updates that matter to your business.

Tell us which technologies you use. Review matched security advisories, check the affected versions, and choose the email updates your team needs.

Start 7-day free Pro trialSee a sample email
Feeds we watch
5
Technology matching
Your stack
Email updates
Optional

The problem

Focus on the technology you actually use.

A new vulnerability matters when it could affect your business. Vulnerability Watch narrows public advisories to your technology profile, so your team can focus its review. Each match still needs a check of the affected version and configuration.

What we look at

Five trusted feeds in. The tech you run is the filter.

The feeds we watch

  • NVD

    The U.S. government's master database of known software flaws.

  • CISA KEV

    The government's shortlist of flaws attackers are actively exploiting right now.

  • Microsoft MSRC

    Microsoft's own advisories for Microsoft 365, Azure, Windows, and Office.

  • Fortinet PSIRT

    Fortinet's advisories for FortiGate firewalls and related gear.

  • Palo Alto

    Palo Alto Networks' advisories for their firewalls and VPN products.

What you tell us you run

  • Firewalls & network gear

    Fortinet, Palo Alto, SonicWall, Cisco, Sophos, Check Point, Ubiquiti, Citrix, VMware Horizon

  • Website & app software

    WordPress, Drupal, Magento, Shopify, WooCommerce, Jira, Confluence, GitLab, Jenkins, IIS, Apache, nginx, Node/Next

  • Cloud providers

    Azure, AWS, Google Cloud

  • Your web domains

    Your Microsoft-verified domains, plus any you add — we only ever check domains you own.

How it works

Tell us what you run. Review the matches. Choose your updates.

  1. 01

    Tell us what you run

    Build your technology profile: pick your firewalls and network gear, your website and app software, your cloud providers, and add any web domains you care about.

  2. 02

    We check nightly

    Every night we pull the latest from five major security feeds (including the U.S. government's vulnerability database and its 'actively exploited' list) and re-check them against what you told us you run.

  3. 03

    Choose email updates

    Enable updates for matching advisories and choose immediate, daily or weekly delivery. The message links back to the evidence; review the affected versions before deciding what to patch. We only check domains you own.

Sample notification

What lands in your inbox.

Updates summarize matching advisories and link back to the details. Delivery follows your selected frequency. This illustrative example shows the information to review before deciding what to patch.

Product example · advisory update

Tenant Strike Vulnerability Watch

Example advisory: a firewall security update

Your technology profile includes the product named in this example advisory. Review the vendor’s affected versions and guidance, confirm whether your devices are affected, and plan the appropriate update.

Illustrative dataPriority Review requiredSource Example vendor bulletin
Open in Tenant Strike →

Example only. No real vulnerability or affected customer is represented.

Related security note

Any web domain you add is checked against the domains Microsoft has verified you own. You can't accidentally — or deliberately — point Tenant Strike at a domain that isn't yours. Read more on the trust page →

Make the next advisory easier to act on.

Pro brings Vulnerability Watch together with Microsoft 365 and Azure findings, so your team can review risks in one place.

Start 7-day free Pro trialSee pricing