CVE Tracker

CVE Tracker brings the National Vulnerability Database (NVD) to your pocket. Stay on top of vulnerabilities affecting the software you actually use — fast, focused, and privacy-respecting.

WHAT IT DOES

• Live CVE feed from NVD 2.0, newest first, with severity and CVSS at a glance
• Watchlist for the vendors and products you care about — up to 3 free, unlimited with CVE Tracker Pro — synced across your iPhone and iPad with iCloud
• CISA KEV (Known Exploited Vulnerabilities) catalog tracking — see what's actually being exploited in the wild
• EPSS scoring on every CVE detail page — the probability a vulnerability will be exploited within 30 days
• Awaiting Analysis tab for brand-new CVEs that NVD hasn't yet attributed
• Security news from Hacker News, BleepingComputer, Krebs on Security, Dark Reading, and CISA Advisories
• Local notifications for KEV additions, free for everyone. Watchlist and news alerts are part of CVE Tracker Pro

THE DASHBOARD

A single screen designed to read in seconds:
• Threat Snapshot — today's CVE volume vs. yesterday, with hourly sparkline and severity breakdown
• Year So Far — total CVEs published this year with year-over-year comparison bars
• Exploit Velocity — cumulative distribution curve showing how quickly CVEs land on CISA's KEV catalog
• Watchlist tiles — vendor and product activity in the last 24 hours
• Top Scoring — today's highest CVSS CVEs

DESIGNED FOR PRACTITIONERS

• Strict CPE-only matching for watched vendors and products — no description-text guessing, no false attribution
• Filter by severity and CVSS range
• Search by keyword, full CVE ID, or vendor scope
• Bookmark anything for offline reference
• Optional NVD API key (stored in iOS Keychain) for higher rate limits

PRIVACY FIRST

• No account required
• No analytics, no telemetry, no third-party tracking
• Your watchlist and bookmarks live on your device and iCloud — never on our servers
• The NVD API key is stored in the iOS Keychain and only ever sent to NVD

Built for security engineers, IT operators, and anyone who needs to know what just got disclosed and whether it matters.

CVE TRACKER PRO

CVE Tracker is free to use. CVE Tracker Pro unlocks:
• Unlimited watchlist — track every vendor and product you run
• Watchlist alerts — get notified when a CVE lands for something you watch
• Relevant news alerts — only the stories that mention your watchlist

KEV alerts stay free for everyone, always.

• CVE Tracker Pro Yearly — $19.99 per year, with a 7-day free trial
• CVE Tracker Pro Monthly — $2.99 per month
• CVE Tracker Pro Lifetime — $29.99 one-time purchase, does not renew

Payment is charged to your Apple Account at confirmation of purchase. Subscriptions renew automatically unless auto-renew is turned off at least 24 hours before the end of the current period. Your account is charged for renewal within 24 hours prior to the end of the current period. You can manage and cancel your subscriptions in your Apple Account settings.

Terms of Use (EULA): https://www.apple.com/legal/internet-services/itunes/dev/stdeula/
Privacy Policy: https://fgalves34.github.io/cve-privacy.html

Data sourced from the National Vulnerability Database (NVD) at NIST, the CISA KEV catalog, and the EPSS project.