How it works
Set it once. We watch forever.
01
Add domains to watch
Add the domains you own to your watchlist. We fingerprint their tech stack — web server, CMS, frameworks, libraries — automatically.
02
We monitor every 6 hours
Our cron pulls the CISA known-exploited vulnerabilities feed and matches it against your stack. Certificate expiry, DNS and TLS changes are checked on the same cycle.
03
Get alerted on new threats
When a matched CVE hits your stack or something changes, we re-scan to confirm the exposure and alert you by email or webhook — before attackers find it.
What it watches
Four layers of continuous coverage
Known-exploited CVE matching
The CISA KEV catalog — vulnerabilities confirmed to be exploited in the wild — is matched against your domains' detected technology stack.
Certificate expiry alerts
We track your TLS certificate lifetimes and warn you well before expiry, so a lapsed cert never takes your site offline.
DNS & TLS change tracking
Unexpected DNS record changes or TLS configuration drift trigger an alert — early warning for hijacks and misconfigurations.
Targeted confirmation scans
Every match is verified with a targeted re-scan before alerting, so you get confirmed exposures — not noise.
Your radar
Live threat status
Sign in to see your radar
Create a free account, add your domains, and Threat Radar starts matching known-exploited vulnerabilities against your stack within the hour.
Threat Radar is a Pro feature
Continuous monitoring, unlimited watched domains, and webhook alerts are included with Pro — $10/month. Free accounts get on-demand scans.