Software suppliers are a security risk as well as a commercial one. For watched companies that are software vendors, LemReveal checks the US National Vulnerability Database (NVD) for new advisories listed under that vendor since the last check and includes them in your alerts.
Built for: Security, vendor-risk and IT procurement teams. The risk it removes: Learning about a serious vulnerability in a supplier's product weeks after it was published.
New NVD advisories (CVEs) listed under the vendor since the previous check
Severity as published by NVD
The company's register changes, as on every watch
What this does not do. Advisories are matched on the vendor name NVD uses, so companies that do not publish software, or that NVD lists under a different name, will not get advisories. This is not a vulnerability scan of your systems.
Coverage follows what each official register publishes. These are the registers we can re-query right now — each page lists exactly which change types it exposes.
For larger portfolios, API access or batches of dossiers, we'll scope which countries and fields we can cover.
No. Only companies that match a vendor in NVD. Checks are spread out to respect NVD's rate limits, so an advisory may arrive on a later run.
No. The first check records which advisories already exist; you are only told about ones published after that.