Overview & core concepts

What the platform is, the tier model, and how storage degrades gracefully.

Passwordless OTP sign-in, the limits that apply, and disposable-email handling.

Plans, prices & quotas

Every SKU and quota, read live from the platform catalog.

Every tool on the platform, grouped by category, listed live from the catalog.

Multi-tenant log ingestion, detection and AI triage — with API examples.

QR enrolment, the installable PWA, posture signals and fleet reporting.

Website monitoring & agent

Register a site you own, prove control of the domain, install the PHP agent, and watch events arrive.

Seats, invitations, and the Team Security Center.

Free modules, progress sync, AI tutor, and verified certificates.

Authentication, every endpoint, rate limits and status codes.

Security & privacy model

What is never stored, the defences in force, and how to report a vulnerability.

Quick reference (printable)

Every tool on one page: tier, what it takes, whether it uses AI, and whether it stores anything.

What each panel means: usage, quotas, pack balances and account state.

The problems users actually hit, and what to do about each.

How prepaid passes work, what expiry means, receipts, and where the binding terms live.

// tool reference · Vulnerability & Assessment

KEV Lookup Free

Check whether a CVE is on the CISA Known Exploited Vulnerabilities catalog.

Open KEV Lookup →

What it does

Answers one question fast: is this being exploited in the wild? KEV membership should dominate your patch order.

When to use it

Deciding what to patch this week. A KEV entry outranks a higher CVSS that nobody is exploiting.

Inputs

Field names are the actual form parameters, verified against source.

Field	Type	Required	Notes
cve	text	required	CVE ID.

What you get back

KEV status, date added, and the remediation due date.

Worked example

Input

CVE-2026-0001

Output (abridged)

NOT ON KEV

  No confirmed in-the-wild exploitation is recorded by CISA.

  This is NOT 'safe'. KEV is a LAGGING indicator -- it records what has
  been observed and reported. Absence means 'not yet catalogued', not
  'not exploitable'.

  Use KEV to ESCALATE, never to defer. A KEV hit is a hard signal to
  patch now; a KEV miss is not permission to wait.

How it works

Deterministic lookup against the CISA KEV catalog.

Limits

Read live from the platform configuration.

Rate limit

30 requests / 60s (platform default)

Limitations — what it does not do

KEV is a lagging, US-federal-scoped catalogue. Absence proves nothing. Never use a KEV miss as a reason to defer patching.

Privacy

Nothing is stored.

Standards

CISA KEVBOD 22-01

← All tools Manual home