Severity at a glance
A red bar for critical, orange for high. The CVE IDs sit under the title.
Slack
CVE alerts in a Slack channel.
Click Add to Slack, pick a channel and click Allow. From then on, every new advisory from 34 vendors that is critical, in CISA KEV or known to be exploited posts there, with the CVSS score, the fixed versions and a link to the vendor's advisory.
- No webhook URL to copy
- Up to 5 channels
- Remove it any time
Each post
Enough to decide without leaving Slack.
Whoever reads the channel can see what's affected and what to upgrade to, then open the vendor's advisory to confirm.
Vendor and flags
The vendor, the CVSS score, and whether it's in CISA KEV or known to be exploited.
Affected and fixed
The affected products and the first fixed releases, when the vendor lists them.
Two links
One to the VulniPulse page for the advisory, one to the vendor's own advisory.
Setup
About a minute, start to finish.
- 1
Open your account page
Slack is under “Slack, Discord, Teams and webhooks”. It comes with Pro and with the free month.
- 2
Click Add to Slack
Slack opens its own page. Pick the channel, public or private, and click Allow.
- 3
Check the test message
VulniPulse posts a short test to the channel and lists it on your account page. Real alerts follow as advisories come in.
Pro · US$15 a month
One person, up to 5 channels.
- Every critical, CISA KEV and exploited advisory from all 34 vendors
- Discord, Microsoft Teams and signed JSON webhooks in the same place
- The first month is free with a card
Team · US$49 a month
Route team rules to channels.
- Up to 20 Slack or Microsoft Teams channels
- Each channel gets the team rules and the severity you choose, e.g. firewall advisories to #network
- Set up with each channel's webhook URL on the Team page
Sources
The vendor's advisory is the authority.
Each post comes from the vendor's own advisory feed and CISA's KEV catalogue, and links back to the vendor. Check your exact version against the vendor's advisory before you change anything. How the matching works.
Questions
Which advisories post to Slack?
Every new advisory from the 34 vendors that is critical, listed in CISA KEV, or known to be exploited. High and medium advisories without exploitation don't post to Slack; use email or app alerts with your own rules for those. If an advisory is added to CISA KEV later, a second post says "Now known exploited".
Can I choose which vendors post?
Not on Pro: each Slack channel gets every critical, KEV and exploited advisory. For alerts about specific vendors or products, use email or app rules. On the Team plan, owners route shared team rules to channels by rule and severity.
Do I need to be a Slack admin?
Not usually. If your workspace requires approval for new apps, Slack sends the request to an admin and you add the channel once it's approved.
Can it post to a private channel?
Yes, if you're a member of it. Slack's channel picker lists the channels you can post to.
What does VulniPulse keep?
The channel's webhook address, the channel name and the workspace name. Slack also returns an access token, which VulniPulse doesn't store. Removing the channel on your account page deletes all three.
How do I stop it?
Delete the channel on your account page and posts stop. To remove the app from your workspace as well, remove VulniPulse in Slack's app settings. If Slack rejects 15 posts in a row, VulniPulse switches the channel off and marks it in red on your account page.
Details of what's stored are in the privacy notice.
Send the next critical CVE to your team's channel.
Included with Pro. The first month is free, then US$15 a month on the web.
VulniPulse is independent and is not affiliated with or endorsed by Slack.