Every vendor in your stack. Every CVE CISA is warning about. One view.
Each pin on the globe is a vendor we monitor against the CISA Known Exploited Vulnerabilities catalog. Pin size scales with the count of active advisories. Color shows severity. A pulsing pin means CISA added new entries in the last seven days.
34
Vendors monitored
13
With active KEV entries
665
Total active CVEs
1
New advisories (7d)
13
With overdue patches
Loading vendor globe...
Pin color
Drag the globe to rotate. Scroll to zoom. Hover or tap a pin for details.
How to read this map
The honest version of what each pin represents and what the map can and cannot tell you.
Data sources
CISA Known Exploited Vulnerabilities catalog provides the "actively exploited" designation. FIRST EPSS provides exploit likelihood scoring (0 to 1). NIST NVD provides the CVSS severity score. All three feeds are public, authoritative, and updated directly from their source.
Pin placement
Pins sit at vendor headquarters, not at attack origins. There is no public dataset that says "this CVE is being exploited from country X." We do not pretend otherwise. The pins show where each vendor in your stack is based; the data they carry shows what is actively being exploited in their products.
Make it useful
Run a Stack Check on the vendors you actually use. Get a per-CVE report you can take to your patching backlog the same day.
Run a Stack Check