Vulnerability monitoring

Vulnerability monitoring checks whether your website's software has known security flaws. With DockRay, you can use our plugin to report installed components or subscribe to the newsletter and review relevant advisories yourself.

Why monitor vulnerabilities regularly?

A new flaw can be discovered in a version your website has used for months. This applies to the platform, plugins, modules and libraries. A website may keep working normally while its software allows unauthorised access to data or unsafe operations. Regular checks help identify which components need updating sooner.

Continuous monitoring with the DockRay plugin

Use our plugin to find out which known vulnerabilities affect your website. After connecting it to a DockRay project and configuring software inventory reporting, DockRay compares reported components and versions with its vulnerability database. You receive findings linked to your application instead of reviewing every security advisory manually.

The panel shows the affected component and environment. Projects with confirmed, unresolved vulnerabilities are marked as requiring attention, and notifications help the people responsible respond. Keep the plugin active and make sure reports stay current, including after software updates.

Start by choosing a DockRay integration for your website's technology. The plugin helps detect known vulnerabilities; applying updates and fixing issues remains the application administrator's responsibility.

The newsletter as an alternative

If you are not connecting your website yet, subscribe to our security newsletter. Select your technologies and confirm your email address. You will receive information about new vulnerabilities, with explanations and recommended actions.

Critical vulnerability notices are sent after publication. Important updates are included in the following day's summary at 10:00, while other notices appear in Monday's summary at 10:00, Europe/Warsaw time. We skip empty summaries. You can unsubscribe using the link in each message.

The newsletter helps you follow threats but does not check software versions on your website. Compare the affected versions with your installation after receiving a notice. The DockRay plugin automates this comparison using application reports.

What should you do after receiving a vulnerability notice?

Check whether your installed version is affected, read the vendor's guidance and plan an update according to the risk. Prepare a backup and test the fix before deployment. Afterwards, verify website behaviour and the latest software inventory report in DockRay.

Visit the vulnerability archive for explanations and update guidance.