Skip to the form
TechWatchAlertTry without an account

Which vulnerabilities hit your stack?

Paste a manifest or lockfile, an SBOM, the output of dpkg -l, rpm -qa, apk info -v, winget list, Get-Package or brew list --versions, or a simple “name version” list. An answer in seconds, no account needed.

One component per line, the contents of a manifest, or the output of a package command. 200 KB at most.

Already have an account? Sign in

Nothing you paste is kept: the analysis runs on the fly and only the recognised components stay in your browser, to prefill your account if you create one.