# About Precursor Intelligence

> Precursor Intelligence is a threat and vulnerability intelligence platform from Precursor Security Ltd, a UK company. It watches the software you use, what you have open to the internet and fake websites using your name, then tells you what to fix first. It runs in your web browser, with nothing to install.

Canonical page: https://www.precursorintelligence.com/about

## At a glance

| | |
|---|---|
| What it is | Threat and vulnerability intelligence platform |
| Set-up | Nothing to install |
| Free plan | Intelligence library, software tracking and alerts |
| Covers | Vulnerabilities, attack surface, lookalike domains, leaked logins and more |
| Ranking | Every flaw scored 0 to 100 |
| Alerts | Email, in the app or by webhook |
| Works with | REST API, MCP server and webhooks |
| Your data is stored | London, UK |
| Contact | info@precursorintelligence.com, +44 113 486 4873 |

## Why we built it

A long list is not a plan. We show you what matters.

There are over 400,000 published software flaws, and fewer than 1 in 100 of them score Critical on our risk score today. Sorting by theoretical severity alone sends busy teams after the wrong things. So we score every flaw from 0 to 100, weighting evidence that criminals are actually using it most heavily, and show you only the ones in software you run. Then we tell you what to do about them.

### Our principles

1. **Written for whoever acts.** Findings, alerts and action plans are written for the person who has to act on them, not just for specialists.
2. **Evidence before alarm.** Evidence that criminals are really using a flaw counts for more than anything else. A group merely being reported to use a flaw can never make it Critical on its own.
3. **Honest about limits.** We say what the product does not do, so you can plan around it.

### What we do not do

- **No agents.** Nothing is installed on your computers or network.
- **No attacking.** Attack-surface scans map what is exposed. They are not a penetration test.
- **No surprise scans.** Scans only run when you start them.
- **No alert noise.** We keep watching and only tell you about what affects you.

## What does it actually watch?

- **Risk ranking:** every flaw scored 0 to 100, so you fix the riskiest first. https://www.precursorintelligence.com/features/risk-based-prioritisation
- **Attack surface:** what you have exposed online, and what changed since your last scan. https://www.precursorintelligence.com/features/attack-surface-management
- **Exposed credentials:** staff logins found in other companies' breaches. Passwords are never shown. https://www.precursorintelligence.com/features/credential-exposure
- **Brand protection:** a continuous watch for lookalike domains, and warnings before certificates expire. https://www.precursorintelligence.com/features/brand-protection
- **Software supply chain:** know if a hijacked open-source package is in your code. https://www.precursorintelligence.com/features/dependency-monitoring
- **Threat intelligence:** who is attacking businesses like yours, how, and with which flaws. https://www.precursorintelligence.com/features/threat-intelligence
- **Alerts:** hear about anything that affects you as soon as we know, by email, in the app or by webhook. https://www.precursorintelligence.com/features/alerts-and-reporting
- **API and MCP server:** scoped API keys for your own scripts, and an MCP server so AI assistants can work with your data. https://www.precursorintelligence.com/features/integrations

## How do we look after your data?

Your data is stored in London, every account signs in with two steps, and the keys you give us are encrypted. Here is the detail.

### Where your data is stored

| What | Where |
|---|---|
| Your organisation's data | London, UK |

### Security controls

- **Stored in London.** Your organisation's data is stored in London, in the UK.
- **Two-step sign-in for everyone.** Every account must use an authenticator app. There is no way to switch it off.
- **Each organisation kept apart.** Data is separated per organisation inside the database, and an API key can only ever reach its own organisation.
- **Your keys encrypted.** Scanner API keys and webhook secrets are encrypted before they are stored.
- **API secrets never stored.** We keep only a one-way fingerprint. Keys can be locked to your IP addresses and given an expiry date.
- **Leaked passwords never shown.** Exposed-credential results show which logins leaked, never the passwords themselves.
- **Roles for every person.** Admins manage the account, members do the work, and read-only users can see everything but change nothing.
- **AI sees anonymised data.** Action plans are written from the public details of each flaw. The AI never sees your organisation's name, people or systems.

Privacy policy: https://www.precursorintelligence.com/privacy-policy · Terms: https://www.precursorintelligence.com/terms · Security questions: https://www.precursorintelligence.com/contact

## Get started

The free plan is £0, needs no card and installs nothing. It gives you the intelligence library, tracking for your own software and alerts about it.

- Start free: https://www.precursorintelligence.com/register
- Book a demo: https://www.precursorintelligence.com/contact