Limits and coverage.
A finding is a warning sign. Read the linked evidence before you choose a response. Each detection path has its own limits.
Vulnerable software
- 01No match does not mean a package is clean. The built-in advisory set is a one-advisory starter; you supply and sign the feed.
- 02Distro packages carry vendor backports, so an upstream version comparison alone can raise false alerts. Why backports confuse version checks
- 03Python and distro packages match exact versions only. Ranges work for Go, npm and Rust crates.
Suspicious activity
- 04An open file does not prove anyone read it, and a rule name does not mean data left the server.
- 05Backup and inventory tools can open decoys too.
- 06Activity that starts and ends between checks can be missed.
Works today
Tested in set scenarios
- Reads installed packages from dpkg and apk databases and from requirements.txt, poetry.lock, package-lock.json, go.sum and Cargo.lock.
- Matches exact versions, plus SemVer ranges for Go, npm and Rust crates, against a local signed advisory snapshot.
- Checks the recorded inventory again when a new snapshot arrives. The agent can fetch one every 6 hours from an endpoint you configure.
- Producer tools compile OSV, GHSA, KEV and EPSS records into a snapshot when you run them by hand.
- Records selected program, network, persistence and decoy findings in a local hash chain the agent verifies.
- Shows findings as CLI JSON, on a local API, and in the systemd journal when it runs as a service.
- Private trial: a notification service you configure emails host, issue, severity and a sign-in link to acknowledge, and emails when a heartbeat goes overdue.
Not built yet
Planned or out of scope today
- RPM databases, and Composer, Gemfile, pnpm and yarn lockfiles.
- Identifying PHP, Ruby or Node runtime versions.
- Distro backport and vendor fix versions. Until then, upstream version comparison can raise false alerts.
- Fixed versions and reference links in a finding.
- Marking a finding verified when the next check finds the fixed version.
- A maintained advisory feed, or a scheduled producer run.
- Blocking a process, or patching for you.
- A hosted service, and measured results on production servers.
- Agent-first setup: the setup prompt, command schemas, resumable sign-in, agent adapters and the test alert.