WATCH

Know within the hour whether a new CVE reaches you

A CVE is published and every vendor emails everybody. The eye matches each disclosure against the versions you actually run. Anything that matches goes straight to the pentest agent, which tries it on your staging surface before anyone calls it exposure. Most days the answer is that it does not reach you — which is only worth hearing from something that would have told you if it did.

Read the docs Meet the other three

The advisory view.

See why an advisory matches an asset you own: the version we read, where we read it, and how strong the match is. Start a verification from here.

PotentialHighCISA KEVBackport risk

CVE-2026-3817 in OpenSSL 3.0.11

api.demo.acme.ioFirst seen 6 hours ago

This has not been tested yet. We matched an observed software version against an advisory. A focused verification determines whether the documented issue is exploitable here.

Why we think this applies

Component observed: OpenSSL 3.0.11
Identified as: pkg:generic/openssl@3.0.11
Match basis: The version we read falls inside a range the advisory describes as affected.
Last observed: 6 hours ago

The distribution may have patched this without changing the version string, so the banner alone cannot settle it.