CVE Tracker vs Sentient Spire

CVE Tracker brings the National Vulnerability Database (NVD) to your pocket. Stay on top of vulnerabilities affecting the software you actually use — fast, focused, and privacy-respecting. WHAT IT DOES • Live CVE feed from NVD 2.0, newest first, with severity and CVSS at a glance • Watchlist for the vendors and products you care about — up to 3 free, unlimited with CVE Tracker Pro — synced across your iPhone and iPad with iCloud • CISA KEV (Known Exploited Vulnerabilities) catalog tracking — see what's actually being exploited in the wild • EPSS scoring on every CVE detail page — the probability a vulnerability will be exploited within 30 days • Awaiting Analysis tab for brand-new CVEs that NVD hasn't yet attributed • Security news from Hacker News, BleepingComputer, Krebs on Security, Dark Reading, and CISA Advisories • Local notifications for KEV additions, free for everyone. Watchlist and news alerts are part of CVE Tracker Pro THE DASHBOARD A single screen designed to read in seconds: • Threat Snapshot — today's CVE volume vs. yesterday, with hourly sparkline and severity breakdown • Year So Far — total CVEs published this year with year-over-year comparison bars • Exploit Velocity — cumulative distribution curve showing how quickly CVEs land on CISA's KEV catalog • Watchlist tiles — vendor and product activity in the last 24 hours • Top Scoring — today's highest CVSS CVEs DESIGNED FOR PRACTITIONERS • Strict CPE-only matching for watched vendors and products — no description-text guessing, no false attribution • Filter by severity and CVSS range • Search by keyword, full CVE ID, or vendor scope • Bookmark anything for offline reference • Optional NVD API key (stored in iOS Keychain) for higher rate limits PRIVACY FIRST • No account required • No analytics, no telemetry, no third-party tracking • Your watchlist and bookmarks live on your device and iCloud — never on our servers • The NVD API key is stored in the iOS Keychain and only ever sent to NVD Built for security engineers, IT operators, and anyone who needs to know what just got disclosed and whether it matters. CVE TRACKER PRO CVE Tracker is free to use. CVE Tracker Pro unlocks: • Unlimited watchlist — track every vendor and product you run • Watchlist alerts — get notified when a CVE lands for something you watch • Relevant news alerts — only the stories that mention your watchlist KEV alerts stay free for everyone, always. • CVE Tracker Pro Yearly — $19.99 per year, with a 7-day free trial • CVE Tracker Pro Monthly — $2.99 per month • CVE Tracker Pro Lifetime — $29.99 one-time purchase, does not renew Payment is charged to your Apple Account at confirmation of purchase. Subscriptions renew automatically unless auto-renew is turned off at least 24 hours before the end of the current period. Your account is charged for renewal within 24 hours prior to the end of the current period. You can manage and cancel your subscriptions in your Apple Account settings. Terms of Use (EULA): https://www.apple.com/legal/internet-services/itunes/dev/stdeula/ Privacy Policy: https://fgalves34.github.io/cve-privacy.html Data sourced from the National Vulnerability Database (NVD) at NIST, the CISA KEV catalog, and the EPSS project.

The threats facing your phone today are not the threats from five years ago. AI-generated phishing is indistinguishable from human writing. Voice-cloning scams call your parents using your voice. Autonomous malware adapts to your defenses in real time. Surveillance-grade threats reach journalists, executives, and activists every week. Sentient Spire is mobile threat defense built to match. — THE NEW THREAT LANDSCAPE Scam Check. AI-generated phishing is hard to spot, even for experts. Paste any text, link, call number, or email and get a verdict from an on-device safety advisor that runs on infrastructure we own. Your queries never reach a third-party language model. Spyware Scan. Detect behavioral indicators of advanced commercial surveillance implants. Continuous device-integrity monitoring catches the anomalies that static scans miss. Network Shield. A configuration profile filters scam infrastructure across every app on your phone. No per-app setup. No traffic logging. Identity Monitor. Tracks your accounts across known breach databases. All lookups proxy through our backend so your email addresses never leave our infrastructure. Phishing Defense. Real-time link and message analysis, hardened against AI-generated lures. Shared threat intelligence gets smarter every time anyone in the network reports a new scam. Guardian. A private security advisor. Ask anything, get a direct answer, without telemetry feeding adversarial training data back to the people you are defending against. — MESSAGE SHIELD: HOW BLOCKING DECISIONS ARE MADE Message Shield only filters numbers and messages that are confirmed or highly likely to be associated with spam or fraud. A number is filtered when it is in your on-device scam database (sourced from Sentient Spire threat intelligence and the numbers you report) or matches a curated scam-prefix pattern. A message is filtered when on-device analysis detects one or more signals: sender brand-impersonation, phishing or shortened/lookalike URLs, money-mule recruitment, fake bank-alert or one-time-code theft patterns, urgency-based social engineering, or unicode obfuscation. The full criteria, and every filtering decision, are shown inside the app on the Message Shield screen. No message content ever leaves your device, and the data is used only to provide the filtering service. — THE TRUST MODEL Sentient Spire is built on a zero-collection architecture. Every piece of telemetry is opt-in. Every consent scope is granular. Every default is off. We do not sell, broker, or share user data. We do not collect it. Application-layer encryption wraps every request body before it touches the network. TLS 1.3 with certificate pinning, certificate transparency, and forward secrecy are the floor, not the ceiling. The on-device runtime ships encrypted on disk and is decrypted only into memory at launch. The app refuses to run on jailbroken devices, in debugger sessions, or when hook injection is detected. Runtime trust is verified continuously, not just at launch. — WHO IT IS FOR Security professionals who carry sensitive workloads on their phones. Executives, journalists, and activists in high-threat environments. Anyone whose phone is critical infrastructure and who wants defenses that match. — COMPLIANCE Privacy Manifest compliant per Apple's iOS 17.4 rules. GDPR Article 7 explicit-consent telemetry flow. US BIS export-classified under ENC license exception 740.17(b)(1).