Hear about what affects you. Without having to look.
Alerts and reporting tell you when something new affects your business, and give you reports to share. We keep watching the software you use and your domains, and as soon as we spot something that affects you, we tell you by email, in the app or by webhook. It is for owners and IT teams who cannot watch a dashboard all day.
What can you be alerted about? Anything new that touches you.
Alerts come from the things you have told us about: the software you run, your keyword rules, your saved dependency files and the domains you monitor.
Newly published flaws
A new known flaw in software you have told us you run.
Flaws now being exploited
A flaw in your software that has just been confirmed as used in real attacks.
Rising exploit likelihood
A flaw in your software that has become more likely to be used in an attack.
Your keyword rules
Rules such as a product AND a version, which catch flaws by text match.
Hijacked packages
A new supply-chain incident affecting a package in a dependency file you saved.
Lookalike domains
New lookalikes of your domains, and changes to the ones we already know about.
Expiring certificates
A warning before the SSL certificate on one of your domains runs out.
Nothing, when things are quiet
If nothing new matches, no email is sent and nothing lands in your inbox.
How does the monitoring work? Set it up once.
Alerts are not a stream of pings. We keep watching your software, your domains and your saved dependency files. When something new matches, we tell you, with every new vulnerability match gathered into one email, and nothing at all when things are quiet.
- Once
Tell us what to watch
The software you run, any keyword rules, your dependency files and your domains.
- Once
Choose who hears
Add your organisation's alert recipients, and any webhook endpoints for your own tools.
- Continuously
We watch your domains
New lookalikes, changes to known ones and certificates close to expiry show in the app, and brand alerts can go to a webhook.
- Continuously
We watch your software
New flaws, newly exploited flaws and rising exploit likelihood, matched against what you told us. Saved dependency files too.
- As soon as we know
One vulnerability email
One email per recipient, a notification in the app and a post to each webhook. A hijacked package gets its own email.
Who hears about it? Everyone who should.
Alert emails go to one shared list of recipients for your organisation. Everyone who signs in also sees each alert in their notifications in the app.
- One vulnerability email, not a flood, with every new match for your organisation in it, sent to each recipient.
- Notifications in the app for vulnerabilities, lookalike domains and certificates, side by side.
- One shared recipient list, so the right people hear even when someone is on holiday.
Invite as many colleagues as you like. There is no limit on the number of people in an organisation.
Email · In-app notifications · Shared recipients
Can alerts reach our own tools? Yes, by webhook.
Give us a web address and we post alerts to it. Choose what each endpoint receives, and for brand protection alerts, the format it arrives in. Try the formats on the right.
- Your URL, with an optional secret header that we store encrypted. Send a test whenever you like.
- Pick categories and events: domain impersonation, vulnerabilities and supply chain, or just some of them.
- Slack, Microsoft Teams, Splunk or Microsoft Sentinel formats for brand protection alerts. Vulnerability and supply-chain alerts arrive as JSON.
There are no ticketing or paging connectors. To go further, use webhooks or our REST API and other integrations.
Webhooks · JSON · Slack · Teams · Splunk HEC · Sentinel
Example webhook endpoint for Acme. Choose a payload format to see how a lookalike domain alert for acme-payro11.com is delivered: plain JSON, Slack, Microsoft Teams, Splunk HEC or Microsoft Sentinel. Vulnerability and supply-chain alerts are always delivered as JSON.
https://hooks.acme.co.uk/precursor
Payload format
{
"text": "[HIGH] Lookalike went live: acme-payro11.com",
"blocks": [
{ "type": "header", "text": { "type": "plain_text",
"text": "Lookalike went live (HIGH)" } },
{ "type": "section", "text": { "type": "mrkdwn",
"text": "*acme-payro11.com*\nNow serves a page with a password form." } },
{ "type": "actions", "elements": [ { "type": "button",
"text": { "type": "plain_text", "text": "Review finding" } } ] }
]
}Formats apply to brand protection alerts. Vulnerability and supply-chain alerts always arrive as JSON. Send a test any time.
What can I hand to someone else? A PDF, when you need it.
Every report is made when you click export, from the data you have at that moment. The organisation report gives management your top ranked flaws, recent alerts and latest scan in a few pages.
The organisation report is a current summary, not a history of a period, and it is not sent on a schedule. The one monthly report covers brand protection.
We monitor continuously and tell you as soon as we spot something that affects you. That covers newly published flaws, newly exploited flaws and flaws whose exploit likelihood is rising in the software you track.
Only as many as there is news. Every new match for your organisation goes into a single email to each recipient, and nothing is sent when there are no matches. If a package in a saved dependency file is hit by a new incident, that comes as its own email.
Yes, we keep watching them alongside your software. New lookalikes, changes to known ones and certificates close to expiry appear in your notifications in the app, and brand protection alerts can also be sent to a webhook.
Brand protection alerts can be sent by webhook formatted for Slack, Microsoft Teams, Splunk HEC or Microsoft Sentinel. Vulnerability and supply-chain alerts are sent by webhook as JSON, which your own tools can pass on.
Not for your whole organisation. The organisation report is made on demand as a current summary. The monthly report that does exist covers brand protection.
The optional secret header you give us is stored encrypted.
Know when something affects you. Without having to look.
Tell us what you run and who should hear about it. We keep watching your software and your domains, tell you by email, in the app or by webhook as soon as we spot something, and give you reports to hand on.