► LIVE THREAT MODELLING & ATTACK SIMULATION
One Workbench
Model, Simulate, Fix.
Threat model, attack simulation, vulnerability findings and controls in one place, with a risk view that updates as you work. The full methodology →
Register your stack with versions. Every night we match it against the affected-version ranges NVD records for each CVE, put known-exploited ones first, and threat-model your design with MITRE CWE and CAPEC.
Search vulnerability data for “WordPress 6.8.1” by keyword and you drown in plugins that merely mention WordPress. Matching on the version ranges NVD records for each CVE gives a very different answer.
CVEs changed in the past year whose text matches “WordPress 6.8.1” — mostly plugins, most of them irrelevant to the core version you run.
CVEs whose recorded affected-version range includes 6.8.1. Both are on CISA's known-exploited list, so they go to the top of your queue.
CISA KEV × 2Our own comparison for WordPress 6.8.1 against NVD data, October 2026.
Threat model, attack simulation, vulnerability findings and controls in one place, with a risk view that updates as you work. The full methodology →
The free Apprentice plan gives you a full threat model of your own application: design weaknesses, attack simulation and controls.
Version-precise CVE scanning, standalone controls and AI mitigation advice come with PRO (€49 / month) and GURU (€295 / month, up to five users and five models). Compare plans →