About Cyber Pulse

What it is for

Cyber Pulse answers three questions for business owners, security and risk teams, and the IT providers who support them:

• Is anyone I work with affected? Breached and claimed organizations, their parent companies and technology vendors, with up to two years of history.
• What should be patched now? Zero-days and actively exploited vulnerabilities, ranked by how likely they are to be used, with a link to the vendor’s own advisory.
• How do these attacks work? How attacks started, the techniques ransomware groups use, and how long victims were down.

It is not an incident response service, an attribution service or a leak site. It never shows leaked data, and it does not judge the organizations it lists.

How it works

• Public sources only. Ransomware leak-site trackers, government vulnerability catalogs (CISA, NVD, ENISA), regulator breach lists (state attorneys general, SEC, HHS), vendor security advisories, data-leak listings and trusted security news. Nothing is added by hand.
• Checked continuously. The site refreshes every 5 minutes and checks each source every 5 to 60 minutes; some sources only update daily.
• Merged and labelled. One organization reported by several sources is shown once. Every entry is labelled as an unconfirmed claim, reported in the news, or confirmed by a regulator filing or the company.
• Inferred details can be wrong. Industries, countries, parent companies and how an attack started are matched automatically.

Vendor alerts

Approved customers upload their vendor list and get an email when one of those companies appears in the breach data. Sign-in is passwordless, vendor lists are stored encrypted, and each company is reported once per level, from claim to confirmed. How to get started.

Handled responsibly

• Unconfirmed claims are treated with care. Names of new ransomware claims are withheld for the first 24 hours and hidden by default after that, because many false or withdrawn posts disappear within days.
• No leaked data, no leak-site links. Links go to trackers, regulators, vendors and news, never to criminal sites.
• Corrections are honoured. Organizations listed here can ask for a correction or removal; see Contact.

Limits of the data

Cyber Pulse only sees what is reported publicly. Many attacks are never posted, tracked or disclosed, and sources can be late, wrong or change their records. A missing entry does not mean an organization is safe, and a listing does not mean it was negligent or broke any law.

Cyber Pulse is an awareness service for general information. It is not legal, compliance, insurance or other professional advice. Full terms: Sources & legal.

Privacy

No analytics, no advertising and no tracking, and nothing on the public site loads from other websites. A cookie is set only when a vendor-alerts customer signs in. Details, including your rights under GDPR and U.S. state privacy laws: Privacy notice.

Credits

Cyber Pulse exists because government agencies, researchers and journalists publish their work openly, including CISA, NIST NVD, ENISA, FIRST, MITRE ATT&CK, Google Project Zero, Microsoft, the Zero Day Initiative, RansomLook, Have I Been Pwned, state attorneys general and the SEC. Each source and its terms are listed on Sources & legal. This product uses data from the NVD API but is not endorsed or certified by the NVD.