Hear about the patch-now bugs the day they land.
The free brief is weekly. CISA adds exploited vulnerabilities every few days, often with a deadline only three days out. Pro sends a same-day Flash alert when a new KEV entry needs attention now, plus the full ranked queue, a monthly kit refresh, and a deadline calendar.
Fires on known ransomware use, EPSS 90%+, or a CISA deadline of 7 days or less.
Fires when its EPSS probability crosses 90% for the first time.
Every alert says which rule fired and links its sources.
Built from the same public CISA KEV and FIRST EPSS data as the free brief, and checked before sending.
Plans
Start free. Upgrade when a weekly cadence is too slow for your patch window.
Gridwatch Pro Open now
or $96/year (save 20%)
- Everything in the free brief
- Same-day Flash and escalation alerts
- Full ranked deadline queue weekly
- Monthly Patch Priority Kit refresh
- CISA deadline calendar (.ics)
Patch Priority Kit One-time
- Full catalog spreadsheet (CSV + XLSX)
- Inventory matcher tab
- PDF triage playbook
Compare
| What you get | Free | Pro | Kit |
|---|---|---|---|
| Weekly brief: new KEV additions, ranked, with fix links | ✓ | ✓ | – |
| "Still hot" list: top recent KEV entries by EPSS | ✓ | ✓ | – |
| Full ranked deadline queue (every open CISA due date, P1/P2/P3) each week | – | ✓ | – |
| Top P1 entries across the whole catalog each week | – | ✓ | – |
| Same-day Flash alert when a new KEV entry meets the P1 rules | – | ✓ | – |
| Escalation alert when an older KEV entry's EPSS crosses 90% | – | ✓ | – |
| CISA deadline calendar (.ics) for Outlook, Google, Apple | – | ✓ | – |
| Patch Priority Kit: all 1,758 KEV entries ranked (CSV + XLSX + PDF playbook) | – | Monthly refresh | One edition |
| Archive of past Pro alerts and supplements | – | ✓ | – |
| Public archive of free issues | ✓ | ✓ | ✓ |
Pro FAQ
What triggers a Flash alert?
A new entry in CISA's KEV catalog with known ransomware use, an EPSS exploit probability of 90% or more, or a CISA deadline of 7 days or less after listing. Each alert says which rule fired and links the vendor fix.
How many alerts will I get?
It depends on CISA. They add exploited vulnerabilities most weeks, and lately most new entries have come with short deadlines, so expect several alerts in a busy week and none in a quiet one.
How fast is "same day"?
We check the KEV feed daily and send a reviewed alert the day a qualifying entry appears. Alerts are checked before sending, so they are not instant.
What is the deadline calendar?
An .ics file of CISA due dates for recent KEV entries, with tier, EPSS and fix links in each event. Import it into Outlook, Google Calendar or Apple Calendar.
I bought the kit. Do I need Pro?
The kit is a single edition. Pro includes a refreshed kit every month plus the alerts. If a one-time snapshot is enough, the kit alone is fine.
Can I cancel?
Yes, any time. Email [email protected] and we cancel it before your next renewal. Checkout runs on Stripe, so we never see your card number.
Where does the data come from?
CISA's Known Exploited Vulnerabilities catalog, FIRST's Exploit Prediction Scoring System, and the vendor advisories and NVD entries they link to. All public, all cited.
Is this a substitute for vendor advisories?
No. Gridwatch tells you what to look at first. Always confirm affected and fixed versions in the vendor's advisory before patching.
Not ready for Pro?
Start with the free weekly brief. You can upgrade any time.
Free every Tuesday. After you subscribe, check your inbox and click the link to confirm. One click to unsubscribe. See our privacy policy.