Broadsheet

Broadsheet is a vulnerability intelligence platform designed for security analysts. It enables users to track vendors and products within their technology stack and receive notifications when new CVEs (Common Vulnerabilities and Exposures) are matched against those tracked items. The platform draws from live sources including the NVD (National Vulnerability Database) and CISA KEV (Known Exploited Vulnerabilities) catalog. It indexes over 1.7 million CPE (Common Platform Enumeration) products from the NVD CPE dictionary, synced weekly, allowing users to track vendors and products using structured data before a CVE is even published. Core features include: - CVE matching against a user's tracked stack with CVSS scores and exploitability signals - CISA KEV and known-ransomware-campaign flags on matched CVEs - A daily brief generated at 06:00 UTC using Claude (Anthropic's AI) that summarizes the last 24 hours of vulnerability activity, grouped by theme and prioritized by active exploitation - Filtered security press coverage matched against tracked vendors, surfacing incident write-ups rather than general mentions - Email digests (daily or weekly) ranked by KEV status, CVSS score, and recency, with no email sent during quiet periods Pro tier features (priced at $12/month) include near-real-time email alerts (within approximately 15 minutes) when a tracked item hits CISA KEV or crosses a user-defined CVSS threshold, a personalized daily brief scoped to the user's stack, and performance enhancements. The free tier allows tracking up to 50 vendors with CVE match visibility. The platform emphasizes user data privacy, with row-level security on all tables, no advertising, and no sale of tracked stack data.