Your security watchdog in Slack

Watches everything before you wake up. Pings you only when it’s yours.

InfraStack checks every new advisory, vendor incident and attack technique, continuously, nights and weekends included. It knows what you run, so you get one Slack message when a threat is actually yours, with what to do.

Describe your stack in one message. Your first scan is free.

Search
security
Today
InfraStackAGENT
First scan done. 4,853 threats this week: 4,737 new vulnerabilities, 58 attacks on AI agents and MCP, 13 being exploited right now. Getting the most attention, plus what I found in your stack:
Affects youSeverityThreat
🟢No🔴CriticalPHP2Shell · no PHP anywhere
🟠Likely 70%🔴CriticalHTTP2Shell · billing on node:24-alpine, patch level unknown
🔴Yes🔴Criticalcertifi · emSign roots in uv.lock, fix 2026.10.19
🟢No🔴CriticalVeloCloud Orchestrator · not in your stack
⏳Checking🔴CriticalSentry MCP injection · reading your MCP config
Details and evidence are in this thread. Next scan today 15:00, then every 6 hours in business hours.
4 replies
InfraStackAGENT
AI-agent risk worth checking.
Attackers can hijack coding agents through malicious Sentry reports. Does your Claude Code setup read Sentry through MCP?
YesNo
Message #security

One message a day beats a feed you never read.

The threats never stop. Neither does the watching.

New vulnerabilities, vendor incidents, and attacks on AI coding agents and MCP servers land every hour, nights and weekends included. Nobody on your team has time to follow them all. InfraStack does.

01

Watches what matters, around the clock.

NVD, GitHub advisories, CISA’s exploited list, vendor status pages, and security researchers. Reports of the same issue become one threat page, with every source linked.

02

Checks it against your stack.

Tell it about your stack in a sentence, or share a lockfile, Dockerfile, or Terraform config. Get a No, Likely, or Yes verdict with the evidence behind it. When it’s unsure, it asks.

03

Pings you only when it’s yours.

One Slack message with the affected component, the fix, and the patched version. Workarounds if you can’t update yet, plus relevant Cloudflare or AWS protections and their limits.

Everything we’re watching.

CVEs and actively exploited vulnerabilities, vendor incidents, and attacks on AI agents and MCP servers. Search for a tool you use to see what affects it.

Affects youSeverityThreatCategorySourcesFirst seenTalking

These threats are real.Know which ones affect you?

InfraStack checks new threats against your stack and tells you what needs attention, why, and what to do next. Right in Slack.

Free to start · No GitHub connection required

Keep building.We’ll watch your back.

Only what matters to you. Right in Slack.