emCVE-Watch

Home 9 Services 9 Life Cycle Management 9 emCVE-Watch

emCVE-Watch provides a service to check the common software components in your product for security gaps.



How does emCVE-Watch work?

At the beginning, the (software) components and versions of the Linux file system to be monitored are defined. For example, libraries and tools such as systemd or bluez.

This list is reconciled daily with the newly disclosed security gaps from known CVE (Common Vulnerabilities and Exposures) databases.

Database examples:

Debian Security
NIST

What happens if a security vulnerability is detected?

In case of a hit, we check how critical this security gap is for your monitored product.
Depending on the severity of the security gap, a recommendation is issued as to whether and when an update needs to be rolled out to fill this gap.



What we require from you

A list of the software to be monitored, even directly from an Elbe project, for example
Information about your product, so we can get a picture, evaluate your system better and make targeted recommendations for the security gaps



What you get from us