We help you fix the right things first.

Precursor Intelligence is a threat and vulnerability intelligence platform from Precursor Security Ltd, a UK company. It watches the software you use, what you have open to the internet and fake websites using your name, then tells you what to fix first. It runs in your web browser, with nothing to install.

At a glance
What it is
Threat and vulnerability intelligence platform
Set-up
Nothing to install
Free plan
Intelligence library, software tracking and alerts
Covers
Vulnerabilities, attack surface, lookalike domains, leaked logins and more
Ranking
Every flaw scored 0 to 100
Alerts
Email, in the app or by webhook
Works with
REST API, MCP server and webhooks
Your data is stored
London, UK
Why we built it

A long list is not a plan. We show you what matters.

There are over 400,000 published software flaws, and fewer than 1 in 100 of them score Critical on our risk score today.

Sorting by theoretical severity alone sends busy teams after the wrong things. So we score every flaw from 0 to 100, weighting evidence that criminals are actually using it most heavily, and show you only the ones in software you run. Then we tell you what to do about them.

01

Written for whoever acts

Findings, alerts and action plans are written for the person who has to act on them, not just for specialists.

02

Evidence before alarm

Evidence that criminals are really using a flaw counts for more than anything else. A group merely being reported to use a flaw can never make it Critical on its own.

03

Honest about limits

We say what the product does not do, so you can plan around it. The list is just below.

What we do not do

  • No agents. Nothing is installed on your computers or network.
  • No attacking. Attack-surface scans map what is exposed. They are not a penetration test.
  • No surprise scans. Scans only run when you start them.
  • No alert noise. We keep watching and only tell you about what affects you.
Security and trust

How do we look after your data?

Your data is stored in London, every account signs in with two steps, and the keys you give us are encrypted. Here is the detail.

  • Stored in LondonYour organisation’s data is stored in London, in the UK.
  • Two-step sign-in for everyoneEvery account must use an authenticator app. There is no way to switch it off.
  • Each organisation kept apartData is separated per organisation inside the database, and an API key can only ever reach its own organisation.
  • Your keys encryptedScanner API keys and webhook secrets are encrypted before they are stored.
  • API secrets never storedWe keep only a one-way fingerprint. Keys can be locked to your IP addresses and given an expiry date.
  • Leaked passwords never shownExposed-credential results show which logins leaked, never the passwords themselves.
  • Roles for every personAdmins manage the account, members do the work, and read-only users can see everything but change nothing.
  • AI sees anonymised dataAction plans are written from the public details of each flaw. The AI never sees your organisation’s name, people or systems.

Read the privacy policy and terms, or ask us a security question.

Get started

See your own risks, ranked, today.

Create a free account, tell us your website and the software you use, and see what matters to you. Or book a demo and we will show you round.

  • Free plan, £0
  • No card needed
  • Nothing to install
  • Intelligence library and alerts