Pricing
Update emails are free. Security is Pro.
You pick your products and get an email as soon as the vendor ships a new version. That one is free. What you pay for is the case before it: a vulnerability hits your product and there is no update for it yet. That is what we read CVE, KEV and BSI/CERT-Bund for, and we tell you before a product runs out of support. Looking any of it up stays free on the site, no account.
- Cancelling
- Two clicks in your account. No questions, no retention offer.
- Payment
- Card, SEPA direct debit or invoice with 14 days to pay.
- Company
- Invoice with VAT ID, reverse charge after VIES check, quote as PDF on request.
Free€0
Update emails for 1430 products, no limit. Daily digest, weekly digest or immediate. Plus the Microsoft 365 tenant scan as a preview, one scan in 7 days.
Pro
€490/year
plus statutory VAT
Save €98 per year instead of €588; about €40.83 per month
- Update emails for every product in the catalogue, no limit
- Email alert the moment a flaw hits your tools: CVE, KEV and BSI/CERT-Bund
- Security alerts immediately, not at the next daily run
- Including flaws with no patch available yet
- End-of-life warning by email, 90, 30 and 7 days before support ends
- Security flag on the release: the badge in the email and the filter in your account
- Up to 5 members with their own login
- 3 distribution addresses without a login
- Slack, Teams, webhook
- Pull your own product selection with an API key
- Weekly report as a dated PDF with sources
- Full Microsoft 365 tenant scan for up to 3 tenants: all findings with affected objects, PDF report, license analysis and framework mapping (guidance, not evidence)
- Notification by email or webhook when a tenant scan comes out worse than the previous one
Actively exploited vulnerabilities in the catalogue
| Product | CVE | CVSS | known since | Source |
|---|---|---|---|---|
| PHP | CVE-2026-109619 | 8.1 | CISA KEV | |
| PHP | CVE-2026-109618 | 9.8 | CISA KEV | |
| Plex Media Server | CVE-2026-96652 | 4.3 | CISA KEV | |
| Plex Media Server | CVE-2026-96654 | 6.5 | CISA KEV | |
| Plex Media Server | CVE-2026-96655 | 4.3 | CISA KEV | |
| Plex Media Server | CVE-2026-96656 | 7.2 | CISA KEV |
Live inventory from the CISA KEV catalogue, enriched via NVD. Not sample data. When each source was last fetched is on the sources page.
These vulnerabilities are being exploited right now. The free update email reports them only once the vendor ships.
It reports new versions. That is its purpose. Pro reports immediately by email as soon as the vulnerability becomes known, and only for the products and versions you run. In between, the flaw is public and the vendor has nothing yet.
Hour 0
Flaw public, actively exploited
The KEV catalogue lists the exploitation. No patch exists.
a few hours later
Pro warns: no patch, but affected
And only if the version you reported falls inside the affected range.
the days in between
You have acted
Mitigation in place, access restricted, customers informed.
patch appears
Now the free update email reports too
It names the new version. That the release closes a flaw is in the Pro email.
Window open: the flaw is known, the vendor has nothing yet
A schematic sequence, not a measurement: how long the window stays open is the vendor's call, not ours.
You hear about it too late.
The flaw has been in the KEV catalogue for hours. Your national CERT follows on the next working day. You read about it on Friday night in the news.
Or you hear about it too often.
A general CVE mailing list sends you everything, including software you have never installed. Sorting it out is on you.
Or not at all.
For line-of-business software, NAS firmware and the camera in the warehouse there is no mailing list. For 1430 products there is us.
What Pro adds on top
Alerting
- A security alert by email the moment a flaw hits the tools you run
- Security alerts immediately, not at the next daily run
- Including flaws with no patch available yet
- BSI/CERT-Bund by email
- End-of-life warning by email before support ends
- Security flag on the release, in the email and as a filter
Team and channels
- Several members with their own login
- Distribution addresses without a login
- Slack, Teams, webhook
- Pull your own product selection with an API key
Proof and billing
- Weekly report as a dated PDF with sources
- Pay by card, SEPA direct debit or invoice
- Cancel monthly
Microsoft 365 tenant scan
- Up to 3 tenants, scans on request without a weekly quota, at most 10 per tenant and day
- All findings with rationale, remediation and affected objects
- The full report as a PDF
- License analysis with estimated savings based on list prices
- Mapping to BSI C5, BSI IT-Grundschutz, NIS2, ISO 27001, NIST CSF and CIS (guidance, not evidence)
- Notification by email or webhook after a worse scan
Sources: CISA KEV for actively exploited vulnerabilities, NVD/CVE, BSI/CERT-Bund, endoflife.date for support end dates. Every source with its last fetch →
Microsoft 365
Microsoft 365 tenant scan: free as a preview, complete with Pro
The tenant scan reads the settings of your Microsoft 365 tenant through Microsoft Graph, read-only, and checks them with 53 checks, 32 of them from the CIS Microsoft 365 Foundations Benchmark 5.0.0; you start every scan yourself.
For free you get one scan in 7 days for one tenant, with score, counts, history and, once you have confirmed your role in the tenant, the 3 most important findings. Pro shows every finding with its affected objects, plus the PDF report, license analysis and notifications after a worse scan, for up to 3 tenants.
How buying works
No trial period
Pro is booked and paid at checkout. The monthly subscription can be cancelled monthly, with no minimum term; the annual subscription runs for twelve months first and can then be cancelled monthly.
Purchase by invoice
Mollie issues a PDF invoice with 14-day payment terms. Pro is activated immediately; settle the outstanding amount through Mollie.
Card
Depending on your country the payment page offers further methods. The mandate for renewal is created at checkout; pre-notification comes with the invoice.
Cancelling
Two clicks in your account, no questions, no retention offer. Confirmation email with the end date. With an annual subscription the first year runs, then it continues indefinitely and can be cancelled monthly.
For procurement
- Invoice to the company, with billing address and VAT ID
- VAT ID checked against VIES; intra-EU supplies without VAT (reverse charge)
- Billing email kept separate from alert recipients: accounting gets no security alerts
- Quote as a PDF on request
MSPs and their clients
Managing several client organisations is prepared but not yet purchasable. We will set the price once the first prospect asks. Then we will know it rather than guess it. Guide price: €149 net per month for up to 25 clients. The Microsoft 365 tenant scan for up to 3 tenants is part of Pro.
Pricing questions
- What is included in the free plan?
- The update email: for every product in the catalogue, no limit, at the interval you choose (daily, weekly or immediate). It tells you that a new version exists. Plus the Microsoft 365 tenant scan as a preview: one tenant and one scan in 7 days, with score, counts, history and, once you have confirmed your role in the tenant with Microsoft, the 3 most important findings. Pro includes the flag on security releases, the warning before support ends, the CVE, KEV and BSI/CERT-Bund alerts and the full tenant scan. The data on vulnerabilities and end-of-life dates is on the website for anyone, no account needed.
- Why net prices?
- The offer is aimed at businesses. The invoice shows statutory VAT separately, or the reverse-charge note.
- What happens if a payment fails?
- Three reminders across ten days, then a downgrade to the free plan. No data loss: tool selection, team and settings remain. Coming back is one button, not forty checkboxes.
The next row in the table above could be one of your tools.
Card, SEPA direct debit or invoice · cancel monthly (annual plan: twelve months first).