Patchsignals
Vulnerability management without scanning.
Patchsignals isn't a scanner – it's a vulnerability intelligence layer on top of your asset inventory. It takes products and versions from your CMDB or a simple CSV, matches them precisely against vulnerabilities and shows what really affects you, how actively it's exploited and what to do. No agents, no network traffic, no impact on OT or critical systems.
Book a demoThe problem
Classic vulnerability management is costly and complex.
Scanners, agents, network permissions and teams to analyse the results.
Some environments can't be scanned.
OT, manufacturing, healthcare, energy or supplier systems.
An asset inventory without risk context.
Your CMDB tells you what you have, not what is vulnerable.
How it works
Asset inventory
Import from CSV or CMDB: products, versions, editions, platforms.
Normalisation
Unified vendor, product and edition names.
Version-aware matching
Precise matching of specific versions to vulnerabilities.
Exposure & risk
Confidence score, asset risk score, active exploitation and exploit probability signals.
Action & evidence
Alerts, SIEM forwarding, exposure lifecycle and audit trail.
Key features
- No scanners or agents – no active network traffic
- Version-aware Matching Engine and Exposure Intelligence Engine with confidence scoring
- Exposure lifecycle: open, in progress, resolved, suppressed, accepted
- Email and webhook alerts, SIEM forwarding (syslog, CEF, LEEF, JSON)
- Read-only REST API with scoped keys, audit trail, CSV/JSON export
- Multi-tenant for MSPs, CZ/EN/DE interface, built and operated in the EU
When it makes sense
- As a fast, low-cost start to vulnerability management
- For OT and sensitive environments that can't be scanned
- Alongside scanners (results can be passed to Black Radar)
- For MSPs managing many customers
Who it's for
- CIO
- CISO
- IT security and vulnerability managers
- MSPs
- Manufacturing, healthcare, energy
Compliance
- NIS2 / Czech Cybersecurity Act: asset inventory, identification and management of technical vulnerabilities, input for incident reporting
- ISO 27001:2022: A.8.8