Stack Vulnerability Digest
Weekly CVE alerts for your stack, or daily if you choose: new CVEs, actively exploited flaws, vendor advisories and security releases, with severity, exploit status and the fix or mitigation.
Built for engineering and security teams using CVE alerts to decide what to patch or upgrade next.
Why this work is hard
Engineering and security teams deciding what to patch or upgrade next spend hours on this by hand: finding the right sources, reading them, checking them against each other and writing up what matters. The work is repetitive, it is easy to miss something, and nobody can show where a claim came from.
Stack Vulnerability Digest does that work as a GREP AI agent. It runs weekly and delivers each edition without you asking. Every run delivers a formatted brief, with every claim linked to its source.
What you get
What Stack Vulnerability Digest delivers
FAQ
What does Stack Vulnerability Digest need to run?
Stack Vulnerability Digest needs your stack (one per line); minimum severity to report (optional) and also cover breaking releases, deprecations, eol (optional) are optional.
How often does Stack Vulnerability Digest run?
It runs weekly and delivers each edition without you asking.
What does Stack Vulnerability Digest deliver?
Every run delivers a formatted brief, with every claim linked to its source.
Can I change what Stack Vulnerability Digest does?
Yes. Every GREP AI agent can be cloned into your workspace, where you can edit its instructions, add your own sources and files, and change its schedule.
How do the CVE alerts handle versions?
When a stack line gives a version, it checks whether that version falls inside each advisory's affected range and drops items already fixed. Without a version, it covers currently supported release lines and says which branches are affected.
What severity is reported by default?
If you set no floor, Medium and above plus anything exploited. You can set a floor such as High and above. Flaws confirmed as exploited in the wild are included whatever their score.
How is exploit status shown?
In one of three terms: KEV-listed with the date added, public PoC, or none known. Scores come with their source, such as CVSS 9.8 (NVD), and it does not compute its own score.
More agents like this
- Runs on a schedule, weekly
Cyber Threat Watch
Weekly cyber threat intelligence on breaches, ransomware, exploited vulnerabilities, attack techniques and advisories hitting your industry, region or technology, with concrete defenses.
Formatted briefView → - Runs over a list
Batch Business Verification
Batch business verification for each business, vendor, supplier, signup or invoice on your list: registry, address, domain, sanctions and fraud checks with a pass, review or block verdict.
Sourced reportView → - Runs over a list
Batch License and Provider Vetting
License verification for each company or provider you list against official licensing registers for the license and jurisdiction you name, with enforcement checks plus any bonding, insurance or complaints checks you request.
Sourced reportView → - PremiumRuns on demand
Business Proof of Address Verification
KYB verification of a business's uploaded proof of address, checked against its registered name and address: recency, authenticity and fraud signals.
Sourced reportView → - Runs on demand
Business Tool Evaluator
An evidence-backed vendor evaluation for one tool or vendor: regulatory status, validation evidence, performance, risks, integration fit and pricing, with a verdict.
Sourced reportView → - Runs on demand
Country Risk Check
A sourced country risk assessment for one country: sanctions programs, FATF status, corruption and AML indices, political stability, payment and transfer risk, and suggested controls.
Sourced reportView →
Run Stack Vulnerability Digest in minutes.
Free to start. Run it once, put it on a schedule, or clone it and make it yours.