Patchpager
Patchpager
Know what to patch first.
Connecting to threat feeds

You're viewing a preview. Create a free account to see the last 7 days.

Patchpager/Active Intel/Target Scanner

Attack Surface Scanner

Domain · IP · ASN — OSINT from 10+ sources
Map an external attack surface
Enter a domain, IP address, or ASN to generate a comprehensive attack surface report — open ports, DNS records, subdomains, email security posture, geolocation, reputation, and more.
—
Try: microsoft.com github.com 8.8.8.8 AS15169
Scans are passive by default: public sources, DNS, TLS and page headers. Active checks request hidden paths and send harmless SQL-injection and XSS test strings to the target, so only enable them where you have permission.
No target selected
Enter a domain name, IP address, or ASN above and click Scan Target to map the external attack surface — live subdomains, per-host vulnerabilities, web weaknesses, and a prioritized fix list. A domain scan probes many hosts and may take 30–60 seconds.
Patchpager/Overview/Command Center

Threat Command Center

Global threat posture across all sources

Know what to
patch first.

Loading the latest threat picture.

Pillars show threat indicators per country. Drag the globe to rotate it.

Exploited CVEs
—
CISA KEV catalog
Critical CVEs
—
CVSS ≥ 9.0, last 30d
Total IOCs
—
IPs + URLs + Hashes
Threat Actors
—
MITRE ATT&CK groups
Breach Records
—
HIBP tracked
Countries
—
Active threat origins
Research Briefs
—
Exploit & vuln analysis
CVE Severity Distribution
Top Countries — Active Threats
IOC Type Breakdown
Patchpager/Advisories/Top Exploited CVEs

Top Exploited CVEs

Source: CISA Known Exploited Vulnerabilities Catalog
CVE IDVendor / ProductVulnerabilityDate AddedDue DateRansomware
Loading…
Patchpager/Advisories/Immediate Attention

CVEs Requiring Immediate Attention

Source: NVD — CVSS Critical, last 30 days
Loading…
Patchpager/Threat Intel/Indicators of Compromise

Indicators of Compromise (IOCs)

Sources: Feodo Tracker · URLhaus · MalwareBazaar
Malicious IPs—
Malicious URLs—
Malicious Hashes—
IP AddressMalware FamilyCountryStatusFirst Seen
URLStatusThreatTagsDate Added
HashName or kindTypeSignatureFirst Seen
Patchpager/Threat Intel/Threat Actors

Top Threat Actors

Source: MITRE ATT&CK Enterprise (cached 24h)
Loading…
Patchpager/Threat Intel/Geo-Political

Geo-Political Threat Intelligence

Derived from Feodo Tracker C2 infrastructure data
CountryThreat CountRisk LevelMalware FamiliesPrimary ThreatActivity
Loading…
Patchpager/Threat Intel/Dark Web

Dark Web Intelligence

Sources: Have I Been Pwned · Security News Intelligence
Data Breaches—
Forum & Activity—
Loading…
Loading…
Patchpager/Threat Intel/Security Research

Security Research Intel

Exploit analysis & advisories · 0day Research · ZDI · Rapid7 · CISA · SANS
Loading…
Patchpager/Analytics/Trends & Landscape

Threat Analytics

Trends, threat landscape, industry targeting & heatmaps — click any chart to drill in
Activity Trend — indicators discovered over time
Threat Landscape — top malware families
Threats Targeting Industries
Geographic Threat Map — C2 / threat-actor origins by volume
LowerHigherShaded by indicator volume · hover for details
Zero-Day Watch
Activity Calendar — CVE + IOC volume by day
QuietBusy
Top 10 Exploitable CVEs — MITRE ATT&CK mapping (CWE → CAPEC → Technique)
Patchpager/Integrations/Connectors

Scanner Connectors

Bring in vulnerability scan data — then see it prioritized against live threat intel
Findings Ingested
0
Across all sources
Assets
0
Unique hosts
Unique CVEs
0
Distinct vulnerabilities
Exploited
0
In CISA KEV
Import Scan Export
Drop a scan file here or click to browse
Supports Nessus .nessus, Qualys .xml / .csv, or any generic vulnerability CSV.
Parsed locally — nothing leaves your machine.
Live API Connectors
Tenable.io
Vulnerability Management
Not configured
Base URL
Access Key
Secret Key
Qualys VMDR
Cloud Vulnerability Mgmt
Not configured
API Base URL
Username
Password
API keys are stored on this server in plaintext with owner-only file permissions, and are only ever sent to the vendor's own API address.
Patchpager/Integrations/Risk Prioritization

Risk Prioritization

Your scanned vulnerabilities, ranked by real-world exploitation & threat intel
Patchpager/Integrations/PatchSphere

PatchSphere

De-duplicated fixes, blast radius & choke-point analysis across Tenable / Qualys