About Watch Floor
Watch Floor is a free, public vulnerability-intelligence and threat-awareness site for security teams: new CVEs, exploitation, official advisories and security news in one newest-first feed.
What it shows
- Vulnerabilities: new CVEs with CVSS scores, CISA Known Exploited Vulnerabilities, exploit-likelihood (EPSS), public exploit code and detection rules, and vendor and government advisories.
- Chatter: what security researchers and the security press are discussing, linked to the CVEs it mentions.
- Threats: ransomware leak-site activity, scanning trends, threat-actor profiles and MITRE ATT&CK techniques.
- Outages: cloud, SaaS and internet disruptions, so teams can tell a local problem from a wider one.
- World (world.watchfloor.fyi): a globe of conflict, state cyber activity, sanctions, subsea cable and power grid incidents, earthquakes, disasters and disease outbreaks.
- Patch Tuesday summaries, vendor pages, a daily brief and RSS/Atom/JSON feeds.
Where the data comes from
Only public sources: NVD, CVE.org, CISA, FIRST, GitHub Security Advisories, national CERTs and vendor advisories, public exploit and detection indexes, security news and research blogs, status pages, USGS, GDACS, WHO and others. The full list, with how often each is checked, is on the Sources page.
Who it is for
Penetration testers, vulnerability managers, SOC analysts and anyone who needs to know quickly which new vulnerabilities and incidents matter. The site is read-only for visitors; it links to public exploit and detection references rather than hosting them, carries no downloads or advertising, and does not collect personal information from visitors.
Who runs it
Watch Floor is an independent, personal project. It is not affiliated with any employer, vendor or government, and it holds no organisation's internal data.