Capital Alert

Vulnerability and breach early warning for your business, with prioritised advice in plain English.

CAPITAL ALERT

Know which threats affect you, and what to fix first

Tens of thousands of new vulnerabilities (CVEs) are published every year. Most won't affect you. A few will. Capital Alert maps your business's digital footprint (your website platform, plugins, hosting, email setup and the software you rely on) and continuously checks it against newly published vulnerabilities, actively exploited threats and known breaches. When something matches, we warn you in plain English: what it is, how likely it is to affect you, and exactly what to do.

How it works

  1. 1

    Map your footprint

    With your permission, we build a profile of the technology your business uses and exposes online.

  2. 2

    Watch continuously

    We monitor new CVEs, the CISA Known Exploited Vulnerabilities list, exploit-likelihood scores, breach data and lookalike domains against your footprint.

  3. 3

    Alert and advise

    You get prioritised alerts ranked by how likely each one is to affect you, with clear steps to fix it. On sites we manage, we can apply the fix for you.

What you get

  • Digital footprint report
  • Prioritised vulnerability (CVE) alerts matched to your technology
  • Breach alerts when your company's email addresses appear in a leak
  • Lookalike domain alerts to catch phishing set-ups early
  • Email spoofing (DMARC) monitoring
  • Monthly plain-English security summary
Get your free footprint check

Capital Alert provides early warning and prioritised advice. No service can guarantee to prevent every attack.

Capital Alert questions

CVE stands for Common Vulnerabilities and Exposures. A CVE identifier names a publicly disclosed security vulnerability so vendors and businesses can refer to the same issue.

With your permission, we map the technology in your digital footprint and compare it with published vulnerability information. Where product versions or exposure are uncertain, further confirmation may be needed before treating a match as an affected system.

Only with your written permission. Any active scanning must have an agreed scope; Capital Alert does not authorise intrusive testing of systems you do not own or control.

We send a prioritised alert explaining the issue, why it may affect you and the next steps. On websites we manage, we can help apply an agreed fix; otherwise we advise you or your IT provider.

Yes, the service also covers breach alerts, lookalike domains and email spoofing configuration monitoring. A monthly plain-English summary helps you track relevant findings and follow-up actions.

No service can guarantee to prevent every attack. Capital Alert provides early warning and prioritised advice, alongside your existing security measures.