Security · Privacy · Compliance

Stop building security and compliance one tool at a time.

Vendor risk, privacy, policies, training and compliance evidence on one operating platform. The live threat feed beside this text runs through all of it, so your own scorecard, your vendors' scores and your Trust Center reflect what is happening today.

LiveThreat · Threat PulseSnapshotUpdated Oct 30, 2026, 15:54 UTC

Today in threats

New CVEs today
409
▼ 23%534 yesterday
Exploited this week
8
0%8 last week · KEV
Updated today
2,162
▼ 29%3,030 yesterday
CVEs tracked
398,794
171,138 products

CVEs published vs. newly exploited

004,250118,5002212,7503417,00045Nov: 3,021 CVEs, 11 added to KEVNovDec: 5,491 CVEs, 20 added to KEVDecJan: 4,302 CVEs, 17 added to KEVJanFeb: 4,616 CVEs, 28 added to KEVFebMar: 6,236 CVEs, 26 added to KEVMarApr: 5,814 CVEs, 31 added to KEVAprMay: 6,933 CVEs, 20 added to KEVMayJun: 7,949 CVEs, 24 added to KEVJunJul: 9,759 CVEs, 26 added to KEVJulAug: 12,256 CVEs, 32 added to KEVAugSep: 14,934 CVEs, 43 added to KEVSepOct: 16,687 CVEs, 34 added to KEVOct43 · Sep peak
CVEs publishedAdded to CISA KEV (right axis)
16,687Published this month
97,998Published · 12 mo
312Added to KEV · 12 mo

Exploited now

All KEV →
  • CI
    Cisco Catalyst SD-WAN
    CVE-2026-20127 · auth bypass
    10.0
  • PH
    PHP
    CVE-2026-109618 · RCE
    9.8
  • BR
    Brotli · Node.js
    CVE-2026-111497 · OOB write
    9.8

Most hit · 30 days

Products →
  • LI
    Linux
    1,051 new · 12 on KEV
    10.0
  • WS
    Windows Server 2025
    1,050 new · 42 on KEV
    9.9
  • W1
    Windows 11 24H2
    1,020 new · 48 on KEV
    9.9
Sources: NVD · CVE.org · CISA KEV · EPSS · 40+ breach and regulatory sourcesOpen the CVE Feed
Security Scorecards · powered by LiveThreat

Score any vendor in minutes, not weeks.

Enter a vendor's domain and get a live scorecard, 250 to 900 and graded A to F, from Verisq's own LiveThreat scoring. It runs alongside your questionnaires and flags any answer the scan contradicts, so you know where a vendor is weak before you sign.

Vendor scorecardsExample portfolio
142vendors scored
D · 14F · 620 below C need review
Needs review
D
Globex Cloud
Hosting · Tier 1 · 588
▼ from CToday
C
Northwind Logistics
Logistics · Tier 1 · 671
▼ from B2h ago
A
Acme Payroll
Payroll · Tier 2 · 861
→ steadyToday
MISMATCHNorthwind Logistics attested that all certificates are managed. The scan found 3 expired.

Live scorecard for any vendor in about 30 minutes, with an AI-drafted assessment sent through your branded vendor portal.

Vendor Risk Hub
See your attack surfaceExample scan
B742/ 900
Risk vectorGrade
C
Vulnerabilities1 internet-facing appliance matches CVE-2026-76418, exploited in the wild
B
Certificates2 certificates expire within 14 days
B
Configuration driftMail security record changed on Oct 27
A
Breach historyNo breach alerts in the last 12 months
A
RansomwareLow. No mentions in tracked leak data
Who else sees thisCyber insurers at renewalBuyers in security reviewYour board

Fix the C before renewal, then publish the score on your Trust Center.

Trust Center
The platform

Five connected operations. One posture customers can see.

Each hub answers a different question your customers, partners and regulators ask. Where a live signal applies, it feeds the hub directly.

Explore the platform
Vendor Risk Hub

Score every vendor in minutes

Scorecards and AI-drafted assessments for every vendor you depend on. Breach Watch and the CVE Feed show which vendors a new breach or exploited CVE touches.

ALERTGlobex Cloud runs Cisco Catalyst SD-WAN. CVE-2026-20127 is exploited in the wild. Reassessment opened and owner notified.
Example vendors. Threat data is live.
Live signalBreach Watch
5 of 21latest breaches

traced to a third party. Amadeus, Open VSX, Hugging Face and a monitoring vendor this week.

Vendor Risk Hub
Compliance Hub

Keep compliance evidence current

Controls, policies, training and the evidence behind them, mapped once and reused across SOC 2, ISO 27001, HIPAA and more.

Live signalCISA KEV
34added to KEV · 30d

Vulnerability management evidence is checked against what attackers use now.

Compliance Hub
PrivacyOps Hub

Run privacy obligations continuously

Data subject requests, consent, cookie tracking and records of processing, each tracked to its legal deadline.

Live signalRegulatory Watch
44consent + tracking · 30d

CNIL fined FNAC Darty €7M for app tracking without consent.

PrivacyOps Hub
RiskOps Hub

Maintain a living risk posture

A risk register fed by every signal on the platform, with owners, treatment and review dates.

Live signalBreach Watch
45critical threats · 7d

Each one is screened against your register as it lands.

RiskOps Hub
Data Rooms

Package diligence when scrutiny arrives

Watermarked, scoped rooms for customer, partner and investor diligence, built from evidence you already keep.

Built from your evidence

Every document carries its last-verified date. No separate upload step.

Data Rooms
What your customers see

All five produce one live Trust Center

Your public proof page. Prospects check your security, privacy and vendor posture for themselves, and each section shows when it was last verified.

yourcompany.com/trust
YourCompany · Trust CenterAll systems operational
SecurityCurrent
PrivacyCurrent
VendorsCurrent
PolicyCurrent
Information Security Policy✓ Verified today
Sub-processor list✓ Verified today
Vendor review · Globex CloudUnder review
Weekly Digest

The week in breaches and CVEs, by product

Every Friday: the breaches, advisories and newly exploited CVEs that mattered. Free.