ZeroAuthority VIGIL
Software Inventory and Vulnerability Intelligence
Only the vulnerabilities that affect the software you actually run, in the order that matters. Matching uses the ZeroAuthority CVE database already used by LAB, so no software list leaves this site.
Software inventory
Register products and versions by hand or import package.json, lockfiles, requirements.txt, go.mod, CycloneDX and SPDX files.
Version-aware matching
Each match states whether your version is inside the advisory's affected range or only shares the product name.
Exploit-first ranking
Known exploited vulnerabilities and high EPSS scores rank above raw severity, with the reason shown.
Remediation tracking
Mark items in progress, fixed or accepted for a limited period with a written reason. Accepted risks reopen automatically.
VIGIL is part of SYSTEMS, which comes with the Reserve plan. Create a free account first, then request Reserve.