Africa-rooted · Worldwide defense

We Find The Cracks Before They Do

Advanced vulnerability management through intelligent automation and proactive defense strategies.

Get Started

VUNVAULT

Live Attack Surface

SYSTEM STATUS: SECURE

Nodes Monitored 1,284

Threats Blocked 12,904

Mean Patch Time 1.2s

CVE-2025-18820 – SQL injection in unsanitized search parameter MEDIUM |

CVE-2026-9122 – Critical Remote Code Execution in API Ingress CRITICAL |

CVE-2026-4401 – Directory Traversal in Unauthenticated RMM Agent HIGH |

CVE-2026-1104 – Zero-Day Memory Exfiltration Attempt Intercepted HIGH |

CVE-2025-18820 – SQL injection in unsanitized search parameter MEDIUM |

CVE-2026-9122 – Critical Remote Code Execution in API Ingress CRITICAL |

CVE-2026-4401 – Directory Traversal in Unauthenticated RMM Agent HIGH |

CVE-2026-1104 – Zero-Day Memory Exfiltration Attempt Intercepted HIGH |

No cost · No commitment

We Offer a Free Vulnerability Scan — Scan Now

Point us at a web application, API gateway or public IP range and watch our reconnaissance engine enumerate live exposure in real time. Evaluate your perimeter before an attacker does.

Runs in your browser · Nothing is stored

ATTACK SURFACE MAPPING

Every login page, API and subdomain is a door. We map them all.

Before a single test runs, we build a live picture of your exposed assets — the same view an attacker builds during reconnaissance.

Domains, subdomains and exposed services are enumerated and scored by exposure.

Each node is cross-referenced against known CVEs and misconfiguration patterns.

You receive a prioritized map — not a 40-page PDF nobody reads.

Latest Insights & Intelligence

From the VUNVAULT News & Blog

Explore all news & reports

Tailored Defense Strategies

How Can VUNVAULT Help You?

Select your organization type for customized vulnerability assessments.

I run a Small Business

Starter Scan

Affordable starter vulnerability scans with clear, actionable executive reporting.

I’m in a SACCO or Fintech

Compliance Ready

Regulation-aware security testing for financial institutions & Central Bank readiness.

I’m in IT / Enterprise

Retainer Protection

Full-scope retainer testing and board-ready reporting for complex estates.

I run a SOC / Security Team

Purple Team

Adversary emulation, detection-rule validation and purple-team exercises that harden your SOC.

Proactive Security Ecosystem

Comprehensive tools designed to map, analyze, and secure your infrastructure seamlessly.

Zero-Day Exploit Tracking Dashboard

Continuous coverage of past and active zero-days across cloud, endpoint, network, web, mobile and OT/ICS — with live exploitation status, CVSS severity and patch availability in one view.

VUNVAULT | Zero-Day Exploit Tracking | --:--:-- UTC

Live

Dr. Evelyn Reed

Total Active Zero-Days

1,284

▲ 62 this week

Weaponized in the Wild

● Active exploitation

Patched Vulnerabilities

37,910

▼ 18% open backlog

Mean Time to Patch

1.2s

Automated validation

Live Zero-Day Intelligence Stream Auto-refresh · 8s

Critical CVE-2026-21447 14:36:45 UTC

Apache Struts 2 — OGNL injection RCE

Web & API · Apache Software Foundation · CVSS 9.8

● Unpatched

Critical CVE-2026-0091 14:35:12 UTC

Cisco IOS XE — Web UI authentication bypass

Network & Edge · Cisco · CVSS 9.1

● Patch in progress

High CVE-2026-3327 14:32:01 UTC

Oracle WebLogic Server — deserialization RCE

Web & API · Oracle · CVSS 8.8

● Unpatched

High CVE-2026-18820 14:28:55 UTC

Microsoft Windows Print Spooler — privilege escalation

Endpoint / Desktop · Microsoft · CVSS 8.1

● Patched

Critical CVE-2025-53112 14:25:11 UTC

Google Chrome V8 — type confusion in JIT

Endpoint / Desktop · Google · CVSS 9.6

● Patched

High CVE-2026-1104 14:21:40 UTC

Linux Kernel io_uring — use-after-free memory corruption

OT / ICS · Linux Kernel · CVSS 7.8

● Patched

Tracking System Status

All Sensors Nominal

Active Zero-Days 1,284

Weaponized in Wild 37

Critical Unpatched 46

Sensors Online 412 / 412

Patch Coverage 68%

Quick Actions

Refreshed continuously from NVD, vendor advisories and the VUNVAULT sensor network. Times shown in UTC.

Security Advisory

Expert guidance tailored to your risk profile. Actionable steps to remediate identified vulnerabilities swiftly.

Network Mapping

Visualize your entire attack surface. Automatically discover exposed assets and unmapped connections.

Selected Node: Core-K8s Auto-Discovered

Soft Protection for Hard Data.

VUNVAULT Academy

Learning tracks built for the real threat landscape

Structured, hands-on curriculum for defenders, analysts and offensive engineers with free certificate.

Foundations

Networking & Defense Foundations

Build the protocol-level intuition every defender needs — from TCP/IP and DNS to firewalls, segmentation and secure architecture.

TCP/IP DNS & TLS Firewalls Hardening

Explore Track

Blue Team

SOC Analyst & Incident Response

Triage alerts, hunt threats and run structured incident response playbooks inside a live SIEM and EDR lab environment.

SIEM Threat Hunting DFIR MITRE ATT&CK

Explore Track

Red Team

Ethical Hacking & Web Pentesting

Recon, exploit and report. Work through OWASP Top 10 labs, API abuse chains and real-world bug-bounty style scenarios.

OWASP Top 10 Burp Suite API Security Reporting

Explore Track

Plans & Pricing

Accessible security pricing for African & global tech

High-impact penetration testing and vulnerability assessments at balanced, competitive starting rates.

Small Business / Starter

Starter

$299 / scan

Affordable starter vulnerability scans with clear, actionable executive reporting.

External IP & domain enumeration
Port & SSL vulnerability check
Executive summary + remediation checklist

Learn More

SACCO & Fintech Compliance

Recommended

$899 / assessment

Regulation-aware testing for financial institutions, M-Pesa gateways and Central Bank readiness.

Full external & API gateway assessment
Central Bank regulatory audit mapping
Mobile app & M-Pesa security check

Learn More

IT / Enterprise Retainer

Retainer

$2,499 / month

Full-scope retainer testing, continuous red teaming and board-ready reporting.

24/7 attack surface monitoring
Quarterly penetration testing
Dedicated security architect

Learn More

All plans include a named engagement lead, encrypted report delivery and a post-remediation re-test window.

PRESS & MEDIA

For journalists and partners

VUNVAULT is an Africa-rooted cybersecurity firm headquartered in Nairobi, Kenya, providing penetration testing, vulnerability assessments and security education to organizations of every size, across Africa and worldwide.

“The Minnesota attacks were not sophisticated, and that is exactly what makes them dangerous. Attackers simply found control systems left connected to the internet, often with default passwords. Every utility should treat perimeter security as mission critical.”

— VUNVAULT Threat Intelligence Commentary Featured in Global Tech Press

Media Inquiries & Interview Requests

Direct press contact: press@vunvault.com

Contact Press Office

CONTRIBUTORS

The people behind the defense

Ethical hackers, security engineers and threat researchers building VUNVAULT’s detection, automation and education stack.

Amara Njoroge

Offensive Security Lead

Designs and runs red-team engagements for SACCOs, fintechs and M-Pesa gateway providers across East Africa.

Daniel Mwangi

Security Automation Engineer

Builds the continuous attack-surface enumeration agents and automated patch-validation CLI behind the VUNVAULT engine.

Fatima Hassan

Threat Intelligence Analyst

Curates the zero-day tracking feed, correlates CVE data with vendor advisories and authors VUNVAULT threat briefings.

Brian Otieno

Compliance & Curriculum Lead

Maps audit findings to Central Bank frameworks and authors the VUNVAULT Academy cybersecurity foundations course.

Contact & Partnerships

Get in Touch with VUNVAULT

Reach the team directly to discuss an assessment, ask a question or become a partner.

+254 705 998 032

info@vunvault.com

BASED IN

Nairobi, Kenya — serving clients across Africa and worldwide.