Australian-owned · Northern Rivers NSW · Authorised testing only
Exploited vulnerability advisories
Know within a day when a vulnerability attackers are actively exploiting affects technology you run — with what to do and a patch deadline based on the Essential Eight.
What we cover
Your technology register
We build a list of the products and versions you run with you, starting with anything internet-facing, and keep it current from our scan results.
Daily exploited-vulnerability checks
Every day the platform checks the Known Exploited Vulnerabilities catalogue published by the US Cybersecurity and Infrastructure Security Agency (CISA) against your register.
Reviewed advisories
An analyst confirms each match against the vendor's advisory before you see it, so you are not chasing noise.
Essential Eight deadlines
Each advisory carries a patch deadline from the Essential Eight timeframes for vulnerabilities with working exploits, at your target maturity level.
What you receive
- Advisories in your client portal, with an email notice
- Clear steps and the vendor references for each advisory
- Acknowledgement and fix tracking, verified by us
- A weekly bulletin document for management and auditors
How an engagement works
- 1Scoping call
A confidential conversation about your environment, goals, constraints and timing. You get a tailored quote with a defined scope.
- 2Signed authorisation
Nothing is tested until your authorised representative signs the rules of engagement, naming every in-scope target, the techniques allowed and anything excluded.
- 3Authorised testing
Testing stays inside the signed scope. Out-of-scope addresses are refused by the platform itself, and every action is recorded in a tamper-evident log.
- 4Reviewed findings
Each finding is risk-rated with evidence and practical remediation steps, and reviewed before it is released to you.
- 5Fix and retest
We help your team prioritise, then retest fixed findings so you have evidence for auditors, insurers and clients.
Common questions
How quickly will we hear about a new vulnerability?
The catalogue is checked every two hours. When a new entry matches your register we review it and issue an advisory, prioritising anything internet-facing.
Does an advisory mean we have been breached?
No. It means you run a product with a vulnerability that attackers are exploiting elsewhere. Each advisory also tells you how to check for signs of compromise after patching.
Can you confirm the fix?
Yes. Tell us when you have patched and we verify it — by checking the version or configuration, or by testing — and record how it was verified.