TechWatchAlert
TechWatchAlert is a vulnerability management platform that filters CVE alerts against a company's declared technology stack, prioritizing remediation based on real-world exploitation data from sources like CISA's KEV catalog and EPSS scores. The service tracks components via SBOM import, agent-based inventory, or manual entry, and delivers targeted alerts through Slack, Teams, email, and webhooks. It also includes built-in patch management, allowing the agent to deploy security updates directly from an alert, with features like ring deployment and audit logging.
- Cybersecurity
- Software Only
- Artificial Intelligence
Funding
Founders
Founder details are not available yet.
Product
Problem
Security teams are overwhelmed by the volume of CVE alerts, most of which are irrelevant to their specific technology stack. Generic vulnerability feeds generate excessive noise, making it difficult to identify which vulnerabilities actually affect their systems and require immediate attention. This leads to alert fatigue and delayed remediation of genuinely critical threats.
Solution
TechWatchAlert provides a targeted CVE monitoring service that filters vulnerability intelligence against a company's declared technology stack, matching by CPE identifiers to ensure only relevant alerts are delivered. The platform continuously re-reads 19 security sources, including CISA's KEV catalog, CERT-FR alerts, EPSS data, and the European EUVD database, and automatically prioritizes remediation based on observed exploitation first, probability over 30 days second, and severity last. Users declare their components once—manually, via SBOM import in CycloneDX format, or from a URL—and receive real-time alerts through Slack, Teams, Discord, email, or webhooks. The service also tracks end-of-life dates for all declared components, sending alerts at D-90, D-30, and D-7 before support ends, and provides a daily brief each morning at 8:00 AM summarizing critical findings and recommended actions. Teams can manage remediation through case workflows with assignments, comments, and Jira/GitLab/GitHub ticket integration, all supported by a REST API for programmatic access. The platform also includes built-in patch management, where a lightweight agent can install security updates on Windows, Linux, and macOS machines directly from an alert, with features like ring deployment and maintenance windows.
Target Audience
Primary customers are IT security teams (DSI, RSSI), DevOps engineers, and independent developers who need to track vulnerabilities in their specific technology stack without noise. The service serves small teams through enterprise organizations, including public sector entities, managed service providers (MSPs), and educational institutions, with specific NIS2 compliance modules for regulated industries.
Features
- CPE-based matching against 360,000+ indexed CVE records, including reserved and rejected identifiers, to filter only relevant vulnerabilities
- Continuous monitoring of 19 data sources including CISA's KEV catalogue, CVE List v5, FIRST.org's EPSS, CERT-FR, and EUVD with 15-second sync cycles and sub-30-second processing time
- Automated remediation prioritization using observed exploitation status (KEV), 30-day probability scores (EPSS), and CVSS severity ratings in that specific order
- End-of-life tracking with automated alerts at D-90, D-30, and D-7 for every declared component
- Daily brief delivered at 8:00 AM summarizing critical CVEs, active campaigns, and available patches
- REST API v1 with 20 endpoints, Bearer authentication, and plan-based quotas for programmatic access
- Role-based access control with organizations, projects, and case management workflow (PENDING → RESOLVED)
- SBOM import support for CycloneDX format, inventory connectors for GLPI and Intune, and URL-based component detection
- Integration with Slack, Microsoft Teams, Discord, email, HMAC-signed webhooks, and Jira/GitLab/GitHub ticketing
- "Vigie" AI assistant supporting natural-language questions about the estate and automated workflow building
- Built-in patch management agent for Windows, Linux, and macOS (x64 and ARM) that installs OS and third-party software updates, with a 7-day deferral period by default (0 for exploited vulnerabilities) and ring deployment
- NIS2 and ISO 27001 compliance reports with evidence tracking