Live
All intelligence →
  • Pricing
  • About
LoginRequest a demo
Security · Privacy · Compliance

Stop building security and compliance one tool at a time.

Vendor risk, privacy, policies, training and compliance evidence on one operating platform. The live threat feed beside this text runs through all of it, so your own scorecard, your vendors' scores and your Trust Center reflect what is happening today.

Request a demoScore a vendor
Open the full feeds
LiveThreat · Threat PulseLiveUpdated Nov 7, 05:42 UTC

Today in threats

New CVEs today
248
▼ 44%445 yesterday
Exploited this week
3
▼ 70%10 last week · KEV
Updated today
371
▼ 86%2,614 yesterday
CVEs tracked
402,026
181,066 products

CVEs published vs. newly exploited

004,500119,0002313,5003418,00045Dec: 5,491 CVEs, 20 added to KEVDecJan: 4,302 CVEs, 17 added to KEVJanFeb: 4,616 CVEs, 28 added to KEVFebMar: 6,236 CVEs, 26 added to KEVMarApr: 5,814 CVEs, 31 added to KEVAprMay: 6,933 CVEs, 20 added to KEVMayJun: 7,949 CVEs, 24 added to KEVJunJul: 9,759 CVEs, 26 added to KEVJulAug: 12,256 CVEs, 32 added to KEVAugSep: 14,929 CVEs, 43 added to KEVSepOct: 17,052 CVEs, 36 added to KEVOctNov: 2,858 CVEs, 3 added to KEVNov43 · Sep peak
CVEs publishedAdded to CISA KEV (right axis)
2,858Published this month
98,195Published · 12 mo
306Added to KEV · 12 mo

Exploited now

All KEV →
  • GI
    GitLab
    CVE-2026-97229 · on KEV
    10.0
  • BR
    Brotli
    CVE-2026-111497 · on KEV
    9.8
  • PH
    PHP
    CVE-2026-109618 · on KEV
    9.8

Most hit · 30 days

Products →
  • WS
    Windows Server 2025
    1,050 new · 1 on KEV
    9.9
  • WS
    Windows Server 2025 (Server Core instal…
    1,050 new · 1 on KEV
    9.9
  • W1
    Windows 11 Version 24H2
    1,020 new · 1 on KEV
    9.9
Sources: NVD · CVE.org · CISA KEV · EPSS · 40+ breach and regulatory sourcesOpen the CVE Feed
Security Scorecards · powered by LiveThreat

Score any vendor in minutes, not weeks.

Enter a vendor's domain and get a live scorecard, 250 to 900 and graded A to F, from Verisq's own LiveThreat scoring. It runs alongside your questionnaires and flags any answer the scan contradicts, so you know where a vendor is weak before you sign.

Vendor scorecardsExample portfolio
142vendors scored
D · 14F · 620 below C need review
Needs review
D
Globex Cloud
Hosting · Tier 1 · 588
▼ from CToday
C
Northwind Logistics
Logistics · Tier 1 · 671
▼ from B2h ago
A
Acme Payroll
Payroll · Tier 2 · 861
→ steadyToday
MISMATCHNorthwind Logistics attested that all certificates are managed. The scan found 3 expired.

Live scorecard for any vendor in about 30 minutes, with an AI-drafted assessment sent through your branded vendor portal.

Vendor Risk Hub
See your attack surfaceExample scan
B742/ 900
Risk vectorGrade
C
Vulnerabilities1 internet-facing appliance matches CVE-2026-76418, exploited in the wild
B
Certificates2 certificates expire within 14 days
B
Configuration driftMail security record changed on Oct 27
A
Breach historyNo breach alerts in the last 12 months
A
RansomwareLow. No mentions in tracked leak data
Who else sees thisCyber insurers at renewalBuyers in security reviewYour board

Fix the C before renewal, then publish the score on your Trust Center.

Trust Center
The platform

Five connected operations. One posture customers can see.

Each hub answers a different question your customers, partners and regulators ask. Where a live signal applies, it feeds the hub directly.

Explore the platform
Vendor Risk Hub

Score every vendor in minutes

Scorecards and AI-drafted assessments for every vendor you depend on. Breach Watch and the CVE Feed show which vendors a new breach or exploited CVE touches.

ALERTGlobex Cloud runs Cisco Catalyst SD-WAN. CVE-2026-20127 is exploited in the wild. Reassessment opened and owner notified.
Example vendors. Threat data is live.
Live signalBreach Watch
3 of 21latest breaches

traced to a third party.

Vendor Risk Hub
Compliance Hub

Keep compliance evidence current

Controls, policies, training and the evidence behind them, mapped once and reused across SOC 2, ISO 27001, HIPAA and more.

Live signalCISA KEV
30added to KEV · 30d

Vulnerability management evidence is checked against what attackers use now.

Compliance Hub
PrivacyOps Hub

Run privacy obligations continuously

Data subject requests, consent, cookie tracking and records of processing, each tracked to its legal deadline.

Live signalRegulatory Watch
45consent + tracking · 30d

Egyptian court fines and orders closure of independent outlet Mada Ma… EG, Nov 2.

PrivacyOps Hub
RiskOps Hub

Maintain a living risk posture

A risk register fed by every signal on the platform, with owners, treatment and review dates.

Live signalBreach Watch
48critical threats · 7d

Each one is screened against your register as it lands.

RiskOps Hub
Data Rooms

Package diligence when scrutiny arrives

Watermarked, scoped rooms for customer, partner and investor diligence, built from evidence you already keep.

Built from your evidence

Every document carries its last-verified date. No separate upload step.

Data Rooms
What your customers see

All five produce one live Trust Center

Your public proof page. Prospects check your security, privacy and vendor posture for themselves, and each section shows when it was last verified.

See a live Trust CenterHow it works
yourcompany.com/trust
YourCompany · Trust CenterAll systems operational
SecurityCurrent
PrivacyCurrent
VendorsCurrent
PolicyCurrent
Information Security Policy✓ Verified today
Sub-processor list✓ Verified today
Vendor review · Globex CloudUnder review
Weekly Digest

The week in breaches and CVEs, by product

Every Friday: the breaches, advisories and newly exploited CVEs that mattered. Free.