DAILY CyberSecurity has announced the general availability of CVE Alerts, a subscription service that turns vulnerability data into targeted notifications delivered by email, Slack, Microsoft Teams and GitHub Issues. The service monitors watchlists of vendors and products, using CVE records, CISA’s Known Exploited Vulnerabilities (KEV) catalogue and EPSS exploit-prediction data.
It also incorporates exploitation intelligence from the open-source PatchThis project and tracks CVE IDs publicly referenced in advisories while still marked “Reserved” by MITRE.
Features include alerts when a tracked vulnerability is confirmed as actively exploited, EPSS threshold or spike detection, custom EPSS and CVSS thresholds on paid plans, weekly digests and severity-based routing to different collaboration channels. Team subscribers can automatically create GitHub Issues, with status updates added as comments rather than creating duplicates, and organise alerts by internal groups.
The service is intended to help teams identify vulnerabilities relevant to their environments rather than review every advisory; the article does not report a specific breach or confirmed exploitation linked to the launch.
The Free plan supports up to three vendors and includes email alerts for CISA KEV and EPSS findings. Pro costs $7 per month and adds unlimited vendors, all new CVE alerts and Exploit Intel, while Team costs $29 per month and adds integrations, watchlist groups and CSV/JSON export. The article gives conflicting trial information: an early section says paid plans have a seven-day trial, while the pricing section says the trial lasts 14 days. Both state that no payment method is required and accounts revert to Free without charge.