We use WordPress ourselves. That is why we take a closer look at the components we rely on, using our own testing tools and manual reviews. Findings from this work enter DebugTeam after review.
Keep track of your software
Record not only your websites but also the software you use: applications, server services and operating systems with vendor, product and version. DebugTeam compares your private inventory with our own NVD/CVE data and notifies you of matching security advisories.
You decide which products to track. The inventory is private. You maintain the details yourself; we require neither computer access nor credentials for this. If a product is missing from the catalogue, you can initially record it without automatic CVE mapping.
Register for free · Manage software inventory
Our research and advance notices
If you choose, you can additionally receive reviewed notices from our own work and confidential submissions when they match your recorded products and versions. A notice may therefore reach you before wider public reporting. You can find this option in your software inventory.
We review reports, clarify the affected scope and release suitable information to relevant recipients. Incoming reports are not forwarded automatically. Confidential technical evidence and the reporter's details remain protected.
Report a vulnerability confidentially
Have you discovered a flaw for which no public advisory or CVE exists yet? Select “Report a vulnerability confidentially” in the contact form. Start with the product, affected versions and a short description. We will discuss further technical evidence and coordinated disclosure directly with you.
Please do not submit other people's credentials, customers' personal data or private keys. A report does not authorize testing of other people's systems.