MAP
Build the inventory
Identify technologies observed on the public property, with first- and last-seen dates where available.
FROM DOMAIN TO DECISION
Know where to
investigate first.
PatchWindow connects public technology evidence to vulnerabilities known to be exploited, then gives your team a ranked worklist with the context needed to act.
THE SHORT VERSION
A week of first-pass triage, compressed into minutes.
Give PatchWindow a public domain. It builds an outside-in technology inventory, checks that evidence against the CISA Known Exploited Vulnerabilities catalog, and ranks the matches most worth confirming.
Instead of starting with a generic vulnerability bulletin, your team starts with affected-looking properties, observation dates, match rationale, and a clear next question for the asset owner.
THE WORKFLOW
Four steps. One actionable shortlist.
WATCH
Track exploited flaws
Ingest the official CISA KEV catalog so prioritization begins with vulnerabilities known to be exploited.
MATCH
Connect the evidence
Resolve product aliases and connect observed technology to relevant KEV vendor and product records.
PRIORITIZE
Rank the next checks
Order potential matches by evidence and urgency, then state exactly what the authorized owner should confirm.
THE OUTPUT
A worklist your team can use immediately.
Properties to review
See which public domains have technology observations related to a known exploited vulnerability.
Evidence you can inspect
Keep the detected technology, observation timing, CISA source facts, and match rationale together.
Questions that move the work
Ask the owner to confirm version, configuration, reachability, and remediation instead of sending an open-ended alert.
WHY IT SAVES TIME
Automate the collection. Preserve expert judgment.
Inventory collection and KEV correlation are repeatable work. PatchWindow handles that work continuously so security specialists spend their time validating the shortlist and deciding what to do.
See monitoring plans →One shared view
Bring domains, observed technology, and exploited-vulnerability context into the same portfolio workspace.
Daily change detection
Re-run the correlation as CISA adds new KEVs and the public technology estate changes.
Less alert fatigue
Route a scoped potential match instead of broadcasting every vulnerability to every company.
Clear handoff
Give the authorized asset owner the evidence and confirmation requirements needed to continue.
PRECISE BY DESIGN
Evidence first. Certainty only when earned.
PatchWindow labels a passive technology match as potential exposure. That wording keeps the worklist useful and accurate: the product narrows the search, while the authorized asset owner confirms affected version, configuration, reachability, and remediation status.
SEE THE METHOD
Build your first worklist.
Start with one public domain. No agent, credentials, or active scan required.