Hundreds of new vulnerabilities a week. A handful are being exploited. XploitDigest shows you which CVEs attackers are actually using, in plain English — and Pro tells your phone when one hits a product you run.

Built for the person who looks after the servers, firewalls and laptops without a security team behind them: IT generalists, sysadmins and MSP technicians.

A CVE AND VULNERABILITY FEED, EXPLOITED FIRST

The Wire is a security news feed of new CVEs, vendor advisories and exploit reports, newest first. It refreshes every two hours, and within about 30 minutes when CISA adds a vulnerability to its Known Exploited Vulnerabilities (KEV) catalog. One tap filters it to actively exploited vulnerabilities only. Search over 6,000 advisories by CVE ID, title, tag or affected system.

Badges are earned, not decorative. KEV comes from the CISA catalog, RANSOMWARE from the campaign record, CRITICAL from the CVSS score.

CVSS DECODED INTO PLAIN LANGUAGE (FREE ACCOUNT)

A CVSS vector is not a number, it is a sentence. XploitDigest decodes it: can the vulnerability reach you over the network, does it need a password, does anyone have to click. Attack vector, privileges required and user interaction, each in plain words, with the worst case flagged.

Also with a free account: a plain-English bottom line, the impacted CVEs and targeted systems, EPSS exploit probability from FIRST, CISA KEV and VulnCheck KEV status, MITRE ATT&CK technique mapping, CISA's KEV due date where one is set, and an incident timeline with dated, linkable citations, so "actively exploited" is a claim you can check.

THREE CALLS ON EVERY CVE, WITH PRO

Two vulnerabilities score CVSS 9.8. One is being exploited in the wild; the other has never been attacked. Most vulnerability tools show you the same number for both.

With Pro, every CVE in the feed carries one of three verdicts:

• Act — exploitation is proven and the vulnerability can reach you
• Attend — it matters, but it is not on fire
• Track — logged, not urgent

Nine rules, checked in order, first match wins. The rule that produced each verdict is shown next to it, so the call is auditable rather than a black box. A CISA KEV listing outranks any severity score. The full decision ladder is published at xploitdigest.com/methodology.

PRO — VULNERABILITY ALERTS FOR YOUR STACK

• The Act / Attend / Track verdict on every CVE, with the rule that produced it
• A watchlist of the products you run, with a push alert on your phone when one is exploited and needs action
• Indicators of compromise (IOCs) to view and copy
• Official vendor patch and advisory links
• Executive brief export for Slack and Teams
• Ransomware Radar and service Outage Radar
• 90-day threat landscape analytics
• Ad-free reading

ENTERPRISE — TEAM VULNERABILITY MANAGEMENT

• Team seats with RBAC, admin seat management and audit logs
• Shared team watchlists and a triage workflow: new, triaged, mitigated, dismissed
• Public exploit tracker covering PoC code and Exploit-DB
• A Deadlines console that tracks your patch SLA, with CISA's KEV dates beside it
• Deadline reminders on your phone
• Custom ROI board, PDF and CSV export, and a daily security digest by email

BUILT ON FREE THREAT INTELLIGENCE SOURCES

NVD, CISA KEV, VulnCheck KEV, FIRST EPSS, CVE.org, MITRE ATT&CK, ransomware.live, vendor and CERT advisories, and the security press. Each is named in the app where its data appears.

HONEST BY DEFAULT

When NVD has not scored a CVE yet, XploitDigest prints N/A rather than guessing a number. Track never means safe. And the verdict engine is informed by SSVC, not certified by it, as the methodology page says plainly. XploitDigest reads threat intelligence; it does not scan or protect your device.

Free to read, with ads. Pro is US$8.99/month or US$85.99/year, and first-time subscribers start with a 14-day free trial. Enterprise starts at US$99.99/month for 5 seats.