Your security watchdog

Know when a new threat actually affects your stack.

InfraStack watches vulnerabilities, vendor incidents, and emerging attacks on AI tools 24/7. It checks your stack and tells you when something needs attention, and what to do next. Right in Slack.

Free to start · No code changes · Watching in minutes

Search
security
Today
InfrastackAGENT
First scan done. 4,853 threats this week: 4,737 new vulnerabilities, 58 attacks on AI agents and MCP, 13 being exploited right now. Getting the most attention, plus what I found in your stack:
Affects youSeverityThreat
🟢No🔴CriticalPHP2Shell · no PHP anywhere
🟠Likely 70%🔴CriticalHTTP2Shell · billing on node:24-alpine, patch level unknown
🔴Yes🔴Criticalcertifi · emSign roots in uv.lock, fix 2026.10.19
🟢No🔴CriticalVeloCloud Orchestrator · not in your stack
⏳Checking🔴CriticalSentry MCP injection · reading your MCP config
Details and evidence are in this thread. Next scan today 15:00, then every 6 hours in business hours.
4 replies
InfrastackAGENT
AI-agent risk worth checking.
Attackers can hijack coding agents through malicious Sentry reports. Does your Claude Code setup read Sentry through MCP?
YesNo
Message #security

Security threats don’t wait for you to notice.

New vulnerabilities, vendor incidents, and attacks on AI tools land every hour. Nobody on your team has time to follow them all. InfraStack does.

01

Watches what matters, around the clock.

NVD, GitHub advisories, CISA’s exploited list, vendor status pages, and security researchers. Reports of the same issue become one threat page, with every source linked.

02

Checks it against your stack.

Tell it about your stack in a sentence, or share a lockfile, Dockerfile, or Terraform config. Get a No, Likely, or Yes verdict with the evidence behind it. When it’s unsure, it asks.

03

Tells you what to do, in Slack.

The affected component, recommended fix, and patched version. Workarounds if you can’t update yet, plus relevant Cloudflare or AWS protections and their limits.

Everything we’re tracking.

CVEs and actively exploited vulnerabilities, vendor incidents, and attacks on AI agents and MCP servers. Search for a tool you use to see what affects it.

Affects youSeveritySignalCategorySourcesFirst seenTalking

These threats are real.Know which ones affect you?

InfraStack checks new threats against your stack and tells you what needs attention, why, and what to do next. Right in Slack.

Free to start · No GitHub connection required

Keep building.We’ll watch your back.

Only what matters to you. Right in Slack.