Low-noise patch intelligence for IT teams.
Filter Microsoft, Fortinet, VMware, Ubuntu and Cisco advisories down to what your servers actually need. Monthly advisory floods become verified action items, each linked to its source.
Open the Demo (No Login)Try the Free BetaFree public beta — no credit card required.
KB5126655 — Windows Server 2022
Closes all 977 CVEs Microsoft fixed for Windows Server 2022 in October 2026 (1 actively exploited: CVE-2026-96951)
- 977 CVEs for Server 2022
- 1 exploited
- 1 update closes them all
No new dashboard to check
Pick your stack once. After that, ChangeSignal comes to you by email, with only what applies to it.
- After every Patch TuesdayYour digest names the update per product that closes the month’s CVEs — the KB number WSUS and Intune deploy.
- When an exploit hits your stackCISA KEV or Microsoft flags exploitation: the patch moves up. If your pinned version is confirmed affected, an email goes out without waiting for the digest.
- Before support endsReleases you run that reach end of support within 90 days appear in your digest, while there is still time to plan.
One digest a week by default, or daily if you prefer. In a quiet week it is one line: nothing new requires action.
Three kinds of action, each linked to its source
Every Patch Tuesday brings dozens of advisories. Most don’t apply to you.
Install what closes vulnerabilities
Dozens of CVEs roll up into a single KB number — the one WSUS & Intune deploy.
Prioritise what is actively exploited
When CISA flags a bug in the wild, the matching patch moves up.
Plan before support ends
Get notified of approaching release deadlines before they become emergencies.
Engineered for sysadmins
- No agentsNothing to install. We know only what you tell us.
- No network scanningNothing ever touches your network or your systems.
- Quiet by defaultNo padding. When nothing applies, you hear nothing.
- Verifiable sourcesEvery item links to the source record it rests on.
What we monitor
6 sources, for 8 technologies — only those we have verified matchers for.
Monitored platforms
- Microsoft Windows Server
- Microsoft Windows 11
- Microsoft Exchange Server
- Microsoft SQL Server
- Fortinet FortiOS
- VMware ESXi
- Ubuntu Server LTS
- Cisco IOS-XE
Upstream intelligence sources
- CISA Known Exploited Vulnerabilities CatalogVulnerabilities confirmed to be exploited in the wild
- Microsoft Security Response Center (Security Update Guide)Microsoft security advisories and the updates that fix them
- CVE Program (CNA-authored vendor advisory data)Vendor-authored vulnerability records, including affected versions
- Ubuntu Security Notices (Canonical)Ubuntu security updates, by release
- Canonical distro-info-dataUbuntu support and end-of-life dates
- endoflife.dateEnd-of-life and end-of-support dates for everything else
Questions
What does the public beta cost, and what happens after it?
Nothing, and no card is asked for. Before the beta ends we email you at least 30 days ahead. Nothing becomes chargeable unless you subscribe yourself, and your workspace stays if you don’t.
Do you cover Microsoft 365 or Windows 10?
No. On the Microsoft side we cover Windows Server, Windows 11, Exchange Server and SQL Server. Windows 10, Microsoft 365, Office, SharePoint and Exchange Online are not covered.
How do you decide whether something affects me?
You list what you run, with a version where you know it. Every change gets one of three verdicts:
- Affected — your version is inside the published range.
- Not affected — your version is outside it, and the source is precise enough to rule you out.
- Product matches, version not evaluated — no version given, or no range published. We say so instead of guessing.
How is importance decided?
By fixed rules, not AI: severity, active exploitation, support deadlines and how exact the match is. A match on the product alone is never rated Critical.
Can you tell whether a machine is already patched?
No. We evaluate at release level, not per host. That would need a host inventory, which we deliberately don’t collect.
Do you patch or change anything?
No. We do not patch, deploy or change anything. You stay in control.
What does every item tell me?
What changed, whether it affects you, how important it is, why it matters and what to consider doing — with a link to the source behind it. Every action shows whether the wording is the vendor’s or ours.
Why do some items show severity as unknown?
Ubuntu security notices carry no severity of their own, and we don’t invent one.
Pricing
Free while the public beta runs. One flat rate for your whole team after it.
After the beta:
€39 per month*
or €390 per year two months free
- One workspace
- Up to 10 team members
- All supported technologies included
- Scored feed and email digest
- A source link on every item
No credit card required · At least 30 days’ notice by email before the beta ends
* Net prices excl. VAT · B2B only (companies, sole traders & freelancers, not for consumers). Details in our Terms.