HN Explorer

Show HN: 700% Growth ( Discussion)

7 points by daudmalik06 ↗ HN
Happy to share the last week growth of https://vulert.com

https://twitter.com/DevNackOfficial/status/1490993623026270214

Vulert notifies you if a security issue is found in any of the open-source software you use.

Feedback or critics are welcome. Feel free to ask anything: info(@) vulert.com

16 comments

[ 4.9 ms ] story [ 21.5 ms ] thread
anthony_ret
Can it help to notify issues like log4j?
daudmalik06
Yes, it can send real time notification of any open source you use e.g maven requirement file.
neximo64
Doesn't github do that with the dependabot alerts, for free? On each push and via email. Why would you pick this one when you get that without even turning it on
daudmalik06
There are 2 problems with dependabot, 1: it requires you to have a code on github orherwise you can't receive alerts 2: they send months old alerts, even if you go to check security advisory of github, you'll notice the date of those issues will be very old.
daudmalik06
Further, vulert is also 100% free for open source software.
neximo64
I don't know if this is true, I saw a couple of Neo4j vulnerabilities show up as soon as the next day once it was disclosed.
aliahmedraza
Wow, it's really interesting, i was looking similar thing after log4j. I'll send you the email
stive_brown
Compliments, i have a question though, Can you alert for php packages vulnerabilities or deprecations ?
daudmalik06
Yeah, you can just upload a composer.lock file and that's it, we will track all of the open source you use and even the software that comes under first level. I.e we track the complete graph.

Feel free to contact us.

mike312
Sounds promising, though it's not very clear how do you do this
daudmalik06
Well, actually we track all of the CVE lists, security advisories of vendors, package managers and as soon as there's an issue related to the software you use, we notify you. That's it.
vilad1337
Nice design, compliments for making it user friendly,

Do you have roadmap of slack feature? Or webhooks? Like i want something that calls my webhook for issues in my app.

Thanks

daudmalik06
yes, both of these features are on our roadmap, get in touch with us to stay updated.

thanks

only4here
Sorry since this isn't related, but why was almost everyone's account in the comments created 5 hours ago... right when this post was made?
daudmalik06
even i was amazed to see the quick response