Pricing
Update emails are free. Security is Pro.
You pick your products and get an email as soon as the vendor ships a new version. That one is free. What you pay for is the case before it: a vulnerability hits your product and there is no update for it yet. That is what we read CVE, KEV and BSI/CERT-Bund for, and we tell you before a product runs out of support. Looking any of it up stays free on the site, no account.
- Cancelling
- Two clicks in your account. No questions, no retention offer.
- Payment
- Card, SEPA direct debit or invoice with 14 days to pay.
- Company
- Invoice with VAT ID, reverse charge after VIES check, quote as PDF on request.
Free€0
Update emails for 1286 products, no limit. Daily digest, weekly digest or immediate.
Pro
€490/year
plus statutory VAT
Save €98 per year instead of €588; about €40.83 per month
- Update emails for every product in the catalogue, no limit
- Email alert the moment a flaw hits your tools: CVE, KEV and BSI/CERT-Bund
- Security alerts immediately, not at the next daily run
- Including flaws with no patch available yet
- Only advisories for the version you run
- End-of-life warning by email, 90, 30 and 7 days before support ends
- Security flag on the release: the badge in the email and the filter in your account
- Up to 5 members with their own login
- 3 distribution addresses without a login
- Slack, Teams, webhook, private RSS
- Weekly report as a dated PDF with sources
Actively exploited vulnerabilities in the catalogue
| Product | CVE | CVSS | known since | Source |
|---|---|---|---|---|
| PAN-OS | CVE-2026-0322 | — | CISA KEV | |
| Apache Struts | CVE-2016-3081 | 8.1 | CISA KEV | |
| Zammad | CVE-2026-102489 | 9.8 | CISA KEV | |
| Zammad | CVE-2026-102490 | 9.8 | CISA KEV | |
| MikroTik RouterOS | CVE-2026-67279 | 6.5 | CISA KEV | |
| JFrog Artifactory | CVE-2026-42018 | 7.5 | CISA KEV |
Live inventory from the CISA KEV catalogue, enriched via NVD — not sample data. When each source was last fetched is on the sources page.
These vulnerabilities are being exploited right now. The free update email reports them only once the vendor ships.
It reports new versions. That is its purpose. Pro reports immediately by email as soon as the vulnerability becomes known, and only for the products and versions you run. In between, the flaw is public and the vendor has nothing yet.
Hour 0
Flaw public, actively exploited
The KEV catalogue lists the exploitation. No patch exists.
a few hours later
Pro warns: no patch, but affected
And only if the version you reported falls inside the affected range.
the days in between
You have acted
Mitigation in place, access restricted, customers informed.
patch appears
Now the free update email reports too
It names the new version. That the release closes a flaw is in the Pro email.
Window open — the flaw is known, the vendor has nothing yet
A schematic sequence, not a measurement: how long the window stays open is the vendor's call, not ours.
You hear about it too late.
The flaw has been in the KEV catalogue for hours. Your national CERT follows on the next working day. You read about it on Friday night in the news.
Or you hear about it too often.
A general CVE mailing list sends you everything, including software you have never installed. Sorting it out is on you.
Or not at all.
For line-of-business software, NAS firmware and the camera in the warehouse there is no mailing list. For 1286 products there is us.
What Pro adds on top
Alerting
- A security alert by email the moment a flaw hits the tools you run
- Security alerts immediately, not at the next daily run
- Including flaws with no patch available yet
- BSI/CERT-Bund by email
- Only advisories for the version you actually run
- End-of-life warning by email before support ends
- Security flag on the release, in the email and as a filter
Team and channels
- Several members with their own login
- Distribution addresses without a login
- Slack, Teams, webhook
- Private RSS feed
Proof and billing
- Weekly report as a dated PDF with sources
- Pay by card, SEPA direct debit or invoice
- Cancel monthly
Sources: CISA KEV for actively exploited vulnerabilities, NVD/CVE, BSI/CERT-Bund, endoflife.date for support end dates. Every source with its last fetch →
How buying works
No trial period
Pro is booked and paid at checkout. The monthly subscription can be cancelled monthly, with no minimum term; the annual subscription runs for twelve months first and continues monthly cancellable after that.
Purchase by invoice
Mollie issues a PDF invoice with 14-day payment terms. Pro is activated immediately; settle the outstanding amount through Mollie.
Card
Depending on your country the payment page offers further methods. The mandate for renewal is created at checkout; pre-notification comes with the invoice.
Cancelling
Two clicks in your account, no questions, no retention offer. Confirmation email with the end date. With an annual subscription the first year runs, then it continues indefinitely and can be cancelled monthly.
For procurement
- Invoice to the company, with billing address and VAT ID
- VAT ID checked against VIES; intra-EU supplies without VAT (reverse charge)
- Billing email kept separate from alert recipients — accounting gets no security alerts
- Quote as a PDF on request
MSPs and tenants
Multi-tenancy is prepared but not yet purchasable. We will set the price once the first prospect asks. Then we will know it rather than guess it. Guide price: €149 net per month for up to 25 tenants.
Pricing questions
- What is included in the free plan?
- The update email: for every product in the catalogue, no limit, at the interval you choose — daily, weekly or immediate. It tells you that a new version exists. Everything security-related is Pro: the flag on security releases, the warning before support ends, and the CVE, KEV and BSI/CERT-Bund alerts. The data itself is on the website for anyone, no account needed.
- Why net prices?
- The offer is aimed at businesses. The invoice shows statutory VAT separately, or the reverse-charge note.
- What happens if a payment fails?
- Three reminders across ten days, then a downgrade to the free plan. No data loss: tool selection, team and settings remain. Coming back is one button, not forty checkboxes.
The next row in the table above could be one of your tools.
Card, SEPA direct debit or invoice · cancel monthly (annual plan: twelve months first).