About CVE Hawk

Thousands of security flaws are published every month. Almost all of them are irrelevant to any one business, and the few that matter are written for security specialists. CVE Hawk exists to close that gap: you tell it what you run, and it tells you, in plain English, which new flaws affect it and how urgent each one is.

Who Runs It

CVE Hawk is a free service from Bobble Solutions, a UK company that looks after Linux servers and WordPress sites for agencies and small firms. We built it on the same monitoring we use for our own customers, Bobble Pulse, and keep it free because it's useful, and because some readers will want a hand with the patching.

Where the Data Comes From

• The US National Vulnerability Database (NVD), for every published CVE and its severity score.
• CISA's Known Exploited Vulnerabilities catalogue, for flaws attackers are already using.
• Vendor and Linux distribution security advisories.
• WPVulnerability, for WordPress plugins and themes.

Each flaw is matched to the software it affects, sorted with the exploited and most severe first, and given a one-line summary and a verdict: Patch now, Patch this week or Keep an eye.

How the Verdicts Work

• Patch now: attackers are already using it, or it scores 9.0 or more out of 10.
• Patch this week: it scores 7.0 to 8.9.
• Keep an eye: everything else. Fix it in your normal updates.