Help centre
WatchMyStack tells you when software or devices you run have a vulnerability that attackers are actively exploiting. Here’s how to get set up and make the most of it.
Getting started
- Create your free account on the sign-up page with your email address and a password, then click the link in the confirmation email.
- Turn on two-step verification. Scan the QR code with an authenticator app (such as Microsoft Authenticator, Google Authenticator or 1Password) and enter the 6-digit code. This is required for everyone, because your stack shows what you run.
- Pick your stack. You go straight to the product list. Tick what you run and save.
- Open your dashboard. Anything already known to be exploited in your products shows up straight away.
Each time you sign in, you enter your password and then a fresh code from your authenticator app.
Pick your stack
Go to My stack. Search by product or vendor and tick everything you run. We currently watch 142 products across firewalls and VPNs, identity and email, remote access and RMM, endpoint protection, backup, servers, operating systems, browsers, cloud and DevOps tools, and AI and machine learning: assistants like ChatGPT, Claude, Copilot and Gemini, AI coding tools, and self-hosted AI software such as Ollama, LangChain and vLLM.
For each product you can add three optional details. They don’t change which alerts you get, but they make the ranking on your dashboard much sharper:
- Internet-facing: tick this if the product can be reached from the internet, like a VPN gateway, firewall or web server. These are the first things attackers scan for.
- Criticality: how important it is to your business (high, medium or low).
- Count: roughly how many you run.
Can’t find something? Use “Can’t find a product? Tell us and we’ll add it.” on the same page. You’ll get an email confirming we received it. Click Save my stack when you’re done. You can change it any time.
Use your dashboard
The Dashboard shows every vulnerability that affects your stack, ranked by real risk rather than severity score alone.
- Priority P1 to P4. Each vulnerability gets a score out of 100. The CVSS severity score counts, but so do whether it’s being exploited, whether the product is internet-facing, how critical it is, how many you run, whether a fix exists and whether the CISA deadline has passed. P1 is the most urgent.
- Why it’s ranked this way. Open any vulnerability to see the score broken down factor by factor, plus what’s affected, the fix and the CISA due date.
- Mark as handled. Once you’ve patched or mitigated something, open it and choose Mark as handled. It moves out of your open list and counts in your reports. Changed your mind? Use Undo straight away, or Reopen later.
- Filters and search. Search by CVE, product or vendor, filter by severity, exploitation, exposure or fix, and sort the list your way. Select a summary card or a technology to filter by it.
- Recent first. The list shows what was first seen in the last 14 days. Older items are behind the button at the bottom of the list.
- What’s new. When you come back, a message tells you how many new vulnerabilities affect your stack since your last visit.
Email alerts
Go to Alert settings to choose how you hear about new vulnerabilities:
- Instant: an email as soon as we find a match, usually within the hour.
- Daily digest: one email a day (around 07:00 UTC) with everything new.
- Known exploited flaws always get through. We strongly recommend leaving this on.
- Minimum severity for other vulnerabilities: critical only, high and up, or medium and up.
Alerts go to the email address you signed up with and only ever cover the products in your stack. You never get the same alert twice.
Sound while you’re signed in. While WatchMyStack is open in any tab, even in the background, we check every 5 minutes. When a new vulnerability affects your stack, you see a pop-up message, the tab title shows a count, and you hear a short, quiet chime. Switch the sound off, or play a test sound, under Alert settings → While you’re signed in. That setting applies to the browser you’re using. Browsers only play sound after you’ve clicked somewhere on the site, so if you open WatchMyStack and leave it untouched, you’ll see the message without the chime.
Reports
Go to Reports to show management what was found and what was done about it.
- Choose a period (last 30 or 90 days, this quarter, this year, or custom dates).
- Narrow it if you like: status (handled or still open), severity, known exploited only, or one technology.
- Read the summary: how many were handled, how many on time, the typical days to handle, and what’s still open or overdue.
- Click Print or save as PDF for a clean A4 report, or Download CSV to open it in Excel.
Fill in your name, job title and organisation on your profile, and they appear on the report as “Prepared by”.
Share a vulnerability
Open a vulnerability and choose Share. You can copy the link, or open LinkedIn, X, Bluesky, Facebook, Reddit, WhatsApp, Telegram or email with the post ready to check and send. Nothing is posted for you.
The link contains only the vulnerability ID. It never includes your stack, priorities or settings. Whoever opens it is asked to create a free account or sign in, and then sees whether it affects their own stack.
Your activity log
Activity is your private record of what you’ve done in WatchMyStack: vulnerabilities marked handled or reopened, stack and settings changes, shares, reports and sign-ins. Use it to answer “when did we patch that?” or to show an auditor what was done. You can filter it, search it and download it as CSV. Only you can see it, and nobody can edit it.
Your profile, security and data
Click your name in the top right to open your profile.
- Photo: click Add a photo under your name and pick a JPG, PNG, WebP or GIF. It’s cropped to a square and shrunk on your device before upload, which also removes location and other hidden data. Only you can see it. Use Change photo or Remove photo any time.
- Basic details: name, job title, organisation, role, country and time zone. All optional.
- Password: change it here. If you’ve forgotten it, use Forgot password on the sign-in page.
- Automatic lock: after 15 minutes without activity, WatchMyStack locks itself. You get a warning a minute before. Enter a code from your authenticator app to carry on. All your open tabs lock and unlock together.
- Your data: download everything we hold about you, clear your data but keep your account, or delete your account completely. Both deletions ask for an authenticator code first. See our privacy notice for details.
Frequently asked questions
Is WatchMyStack free?
Yes. Creating an account, picking your stack, the dashboard, email alerts and reports are all free, and you don’t need a credit card.
Where do the vulnerabilities come from?
From CISA’s Known Exploited Vulnerabilities (KEV) catalogue, the official US list of vulnerabilities that attackers are actively using. We check it every hour and add CVSS severity scores from the US National Vulnerability Database (NVD).
Why don’t I see every CVE for my products?
On purpose. Thousands of CVEs are published every year, and most are never used in real attacks. We focus on the ones known to be exploited, so every alert is worth acting on.
Can I monitor AI tools like ChatGPT, Claude or Copilot?
Yes. Tick them under “AI & machine learning” on My stack. One thing to know: when you use an AI service only in the browser, the vendor fixes problems on their side, so those rarely get public vulnerability IDs. Most alerts in this section come from AI software you install or host yourself, like desktop apps, coding tools, Ollama, LangChain, n8n or vLLM, which is where most AI security flaws are found.
A product I use isn’t in the list. What can I do?
On My stack, type the vendor and product name under “Can’t find a product? Tell us and we’ll add it.” and click Request. We review every request, and you get an email confirming we received it. Reply to that email if you have more details, like the exact version or a link to the vendor’s security advisories.
Who can see my stack?
Only you. Your stack, statuses, reports and activity log are tied to your account, and the database only shows them after you have signed in with your authenticator code. Links you share contain the vulnerability ID only, never your stack or settings.
I lost my phone or authenticator app. How do I get back in?
Resetting your password doesn’t remove two-step verification. Email contact@watchmystack.com from the address you signed up with and we’ll help you get back into your account.
How do I stop the emails?
Go to Alert settings and switch off “Send me email alerts”, or switch to one daily digest. Your dashboard keeps working either way.
How do I delete my account?
Go to your profile (your name, top right) → Your data → Delete my account. You’ll be asked for an authenticator code and to type DELETE. Everything is removed straight away and we email you a confirmation.
Still need help?
Use the at the bottom of any page, or email contact@watchmystack.com. A real person reads every message.