Live security incidents, brewed hourly
Actively maintained
- Is it safe? We have not read the data policy of Live security incidents, brewed hourly yet. Read it on the official site before you upload anything.pwned.coffee ↗
- Is it free? We have not read the prices of Live security incidents, brewed hourly yet; they are next in our queue. Until then, the official site has them.pwned.coffee ↗
- What else does this?
Hacktron AIfree
Fluid Attacks
ShipReady MetricsSee ↓
not read yet
Use
- For
- Security teams and system admins checking which actively exploited vulnerabilities affect their own software stack
- Activity
- Actively maintainedrelease 2 days ago · site updated 2 days ago
- Used for
- filter known exploited vulnerabilities down to software you run
- check whether a fix or mitigation exists for each flaw
- prioritise patching by severity and known-exploitation status
- 161,399 stars on GitHubGitHub ↗
- Has an MCP server (1 in the registry)public registry →
- Publishes llms.txt, a file written for AI assistantspwned.coffee ↗
- MCP servercoffee.pwned/pwned-coffeeverified in the MCP registry
- Stateanswers, 6 toolschecked 2026-11-02
- Address to connectpwned.coffee/mcp
- MCP docspwned.coffee/mcpthe vendor's page ↗
This card as JSON, for your agent →
Each line is something a program found when it went looking: the registry entry, the server's own answer, a spec that parses. A missing line means we did not find it, not that it does not exist.
Figure and bar: visits/mo, estimate · year: online since
- #1
Hacktron AIMCP · sign-in
Analyzes pull requests to find exploitable vulnerabilities and generates working proofs of concept before code ships.
68ActiveFrom $40/user/mo - #2
Fluid Attacks
Scans applications for vulnerabilities with automated tools and human penetration testing, ranks findings by exploitability and tracks their remediation.
4.3kActive - #3
ShipReady MetricsMCP · open
Scores engineering and security posture from connected repositories and cloud systems, mapping findings to compliance frameworks and estimating risk dollars.
42.9kActiveFrom $29.99/user/mo - #4
OpenCTI Agent
Unifies threat intelligence, validates exposures, and orchestrates security responses across your security stack.
2kActive2022 - #5
XposedOrNotMCP · open
Searches indexed data breach records for an email address or domain and reports which breaches, leaked fields and a risk score appear.
1.3kActiveFrom $9/mo2017
All 10 alternatives to Live security incidents, brewed hourly →
Not it? Say what you need
betaThree tools from the Atlas for the job you describe, each with what fits and what does not.
No notes yet. What do you use Live security incidents, brewed hourly for?
Sign in to leave a noteWhat is Live security incidents, brewed hourly?
Tracks actively exploited software vulnerabilities in a live feed, ranking each by severity and patch status, filterable to your own stack. It is listed in the Atlas under Security.
Who is Live security incidents, brewed hourly for?
Security teams and system admins checking which actively exploited vulnerabilities affect their own software stack
Is Live security incidents, brewed hourly still maintained?
Actively maintained: release 2 days ago · site updated 2 days ago.
What are alternatives to Live security incidents, brewed hourly?
In Security, by use: Hacktron AI, Fluid Attacks, ShipReady Metrics, OpenCTI Agent, XposedOrNot.
How we read a tool
No votes, no reviews, no vendor claims. Every week a crawler reads each tool's own site and a few public registries, and the words on the card are bands over what it read.
- Use: visits to the site (estimated), installs from npm and PyPI, presence in Chrome's usage report.
- Activity: the newest release on GitHub, npm or PyPI; the newest dated page on the site; open roles on a public jobs board.
- Price: the vendor's own pricing page, read with the date. A figure is printed only when it is on that page.
- The line and the use cases are written by us from the homepage, one tool at a time, and refused when they repeat the vendor's marketing.
How AI assistants read each site — the reading vendors ask us about — is on each tool's own visibility page.
How we read every tool → · By INITE Atlas Desk
Before we count this visit
Analytics and ad measurement tell us which pages and which of our ads do their job: Google Analytics and Google Ads, the Meta pixel, Yandex Metrica, and one first-party id of our own. Nothing is stored until you answer, and declining changes nothing about the site.