Always on the latest advisories
New vulnerabilities are picked up as they are published, not at the next audit.
SECURITYIN PRODUCTION
Know which new vulnerability is yours.
Security watch follows newly published advisories and checks them against the exact versions your projects lock, together with the security settings of your repositories. With TamTam it does not stop at an alert: a finding becomes an issue, an agent ships the upgrade as a reviewed pull request and checks the result after the deploy. We run it on our own code every day.
What it does
Matched to your lockfiles
Advisories are checked against the exact dependency versions you ship, so a hit means you are actually affected, and you see every repository that is.
Repository settings checked too
Security settings that drift off are reported, not discovered after an incident.
From finding to fix in TamTam
A finding lands on the TamTam board as an issue with the advisory attached. An agent plans the upgrade, opens the pull request, keeps CI green and verifies it after the deploy.
Dependency updates reviewed, not rubber-stamped
Agents read the changelog and release notes, run the tests and hold back a release that is too new, before anything is merged.
Alerts next to the rest of your monitoring
Findings arrive through the alerting you already use, with the affected project named, so nothing waits in yet another dashboard.
How it works
From idea to verified deploy.
- 01
Detect
A new advisory is published and picked up.
- 02
Match
It is checked against every lockfile and repository you run.
- 03
Plan
Each affected project gets an issue in TamTam with the fix it needs.
- 04
Fix
An agent upgrades the dependency in a reviewed pull request.
- 05
Verify
After the deploy the agent confirms the vulnerable version is gone.
Who it is for
- ↳Teams with more repositories than anyone reviews by hand
- ↳Anyone who wants to hear about a vulnerability before a customer does
Start
Tell us what you need; we answer with a plan.
Write to info@datacrash.io. We reply with what we can do, how long it takes and what it costs.