Assets
What’s exposed — vendors, products, and the organisations behind them, ranked by real attacker pressure.
Last updated: 16 October 2026 10:19 UTC
Act
Your stackdeclare your vendors, see your exposure — actors, KEV, controls (no sign-in, all in your browser)Vendor leaderboard6,351 vendors ranked by 24-month CVE pressureActor × vendor heatmapwhich threat actors target which vendors, by recencySectorswhich industries the tracked actors targetExplore
Named victimsorganisations named in actor records — 70 actors carry victimsBreach disclosuresSEC 8-K material-incident filings, linked to actorsLLM-credited discoverieswhich vendors' CVEs are being found by AI modelsUnderstand
Who is exposed?vendor KEV velocity and cohort volume over timeRisk scoringhow the 0–100 composite worksRead
All articlesVendors with new criticals — recent CISA KEV addslast 30 days
- AtlassianCVE-2026-21589Atlassian Multiple Products Files or Directories Accessible to External Parties…1 KEV addOct 151 CVEs/30d
- AhsayCVE-2026-105134Ahsay AhsayCBS Command Injection Vulnerability2 KEV addsOct 142 CVEs/30d
- CiscoCVE-2026-76519Cisco Secure Email Gateway Relative Path Traversal Vulnerability3 KEV addsOct 14117 CVEs/30d
- Palo Alto NetworksCVE-2026-0322Palo Alto Networks PAN-OS Code Injection Vulnerability1 KEV addOct 141 CVEs/30d
- IvantiCVE-2026-104935Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability1 KEV addOct 131 CVEs/30d
- MicrosoftCVE-2026-96951Microsoft Windows Command Injection Vulnerability2 KEV addsOct 131556 CVEs/30d