Stenwatch Get it on GitHub
Free and open source

Out of 40,000 software flaws a year, which ones should you fix first?

Stenwatch reads every publicly known software flaw, checks which ones touch the systems you and your suppliers run, and puts the handful that attackers are really using at the top, with a plain reason for each one.

Signal filterIllustrative
How it works

Three questions instead of one scary number

Most teams sort flaws by a severity score, which says how bad a flaw could be. It doesn't say whether anyone is using it against you. Stenwatch asks three questions instead.

01

Do we run it?

Your list of software is matched against every known flaw, by product and version.

02

Do our suppliers run it?

IT providers, cloud services and partners count too, weighted by how much of your data and access they hold.

03

Are attackers using it?

It checks official lists of flaws already being exploited, predictions of what will be next, and the criminal groups known to target organisations like yours.

The answer

Every flaw gets one of four clear decisions

Each one comes with its reasoning written out, so anyone can check why it landed where it did.

  • ActAttackers are using it and it's exposed or critical. Fix within 48 hours.
  • AttendBeing exploited, or likely to be soon. Fix in the next update cycle.
  • TrackSerious on paper, not yet in use. Keep an eye on it.
  • IgnoreNo action needed right now.
Built to be trusted

Your data never leaves your computer

Your list of systems says exactly where you are weak, so Stenwatch treats it that way. It runs on your own machine and only downloads public information.

  • Runs locally. Nothing about your organisation is uploaded anywhere.
  • Explainable. Every ranking shows the sum behind it. No black box, no AI guesswork in the scoring.
  • Repeatable. The same information always gives the same answer.
  • Reports for everyone. A detailed view for analysts and a one-page summary for managers.

Try it on a sample organisation

Stenwatch comes with a made-up example company, so you can see a full report before adding any of your own details. Setup takes about ten minutes.