CVETodo

Real-time CVE tracking with per-product alerts, CISA KEV status and remediation priority scoring.

ToolVulnerability ManagementCloud

Pricing: Free CVE database browsing without an account. Basic $14.99/month (unlimited CVE tracking, 10 products with email alerts), Pro $49/month (50 products, agent scanning with 3 device keys, team of 5), Enterprise $249/month (10 users, unlimited tracked products). 14-day trial, up to 17% off annually.

Reviewed by the Cyber Vendor Guide editorial team against the public sources cited below · Last reviewed September 2026 · How we review listings

What is CVETodo?

CVETodo aggregates CVE data into a browsable database with real-time tracking and alerting. Listings carry AI analyst deep dives, remediation priority scoring, and exploit and patch status, with CISA Known Exploited Vulnerabilities tracked and a Critical Patch Now ranking ordered by remediation priority. Alongside the database it offers an open-source inventory agent for servers, agentless appliance inventory for firewalls and VPN gateways, repository scanning for dependencies, an SBOM grading tool, and remediation reports with SLA aging, benchmarked against PCI DSS, Cyber Essentials and Essential Eight. Browsing the CVE database needs no account; tracking and alerting are paid. CVETodo is an independent New Zealand business, built and run from Tauranga, founded by Anthony Walker.

Best for: Small teams and MSPs that want CVE alerting tied to a live software inventory without an enterprise scanner
Pros
  • CVE database browsable free with no account required
  • Published pricing from $14.99/month rather than contact-sales
  • Combines CVE intelligence with asset inventory, so alerts map to software you actually run
Things to check
  • Tracked-product counts are capped per tier (10 on Basic, 50 on Pro)
  • Small independent vendor; team and support depth below the enterprise scanners it sits alongside

Reported in public reviews and vendor documentation. See sources below.

Key Features

Real-time CVE tracking with email alerts per tracked product
CISA KEV (Known Exploited Vulnerabilities) tracking
Critical Patch Now ranking by remediation priority
AI analyst deep dives with exploit and patch status per CVE
Open-source inventory agent for servers, agentless for appliances
Repository scanning for dependency detection
SBOM grading tool
Remediation reports with SLA aging, benchmarked to PCI DSS, Cyber Essentials and Essential Eight

Do you work at CVETodo? to confirm the details or send us a correction.

Sources & references

Where the information on this listing comes from. Always verify pricing and capabilities against the vendor before a purchasing decision.

Spot an error, or do you represent CVETodo? Request a correction.

Quick Info
PricingFree CVE database browsing without an account. Basic $14.99/month (unlimited CVE tracking, 10 products with email alerts), Pro $49/month (50 products, agent scanning with 3 device keys, team of 5), Enterprise $249/month (10 users, unlimited tracked products). 14-day trial, up to 17% off annually.
ModelFreemium; monthly or annual subscription
CloudYes
Self-HostedNo

Last updated: Sep 1, 2026