NextGuard is a SaaS platform for continuous vulnerability monitoring of your software dependencies. It detects known CVEs (Common Vulnerabilities and Exposures) across 50+ platforms including WordPress, Node.js, Python, PHP, Docker, and more.

How does scanning work?

You upload your dependency files (like composer.lock, package-lock.json, requirements.txt) or enter dependencies manually. Our engine cross-references every component and version against our database of 91,000+ classified CVEs, giving you instant results.

Is NextGuard free to use?

Yes! Our free plan includes 1 project with daily scans, weekly email summaries, and 30 days of history. Paid plans start at $5/month for teams that need more projects and faster scan frequencies.

What file formats are supported?

We support composer.lock (PHP), package-lock.json and yarn.lock (Node.js), requirements.txt and Pipfile.lock (Python), Gemfile.lock (Ruby), pubspec.lock (Flutter/Dart), Podfile.lock (iOS), build.gradle (Android/Java), Dockerfile, and docker-compose.yml.

How often are scans performed?

Scan frequency depends on your plan: Free (daily), Starter (every 12 hours), Professional (every 6 hours), Agency (hourly). You can also trigger manual scans at any time.

Can I search for CVEs without an account?

Absolutely. Our public CVE search is free and requires no registration. Simply enter a component name to check for known vulnerabilities.

NextGuard

91,000+ CVEs tracked across 50+ platforms

Know your vulnerabilities before attackers do

Upload your dependency files, get instant vulnerability reports. Continuous monitoring alerts you when new CVEs threaten your projects.

91,000+

CVEs Classified

50+

Platforms

24/7

Monitoring

<1min

Scan Time

Free Tool

Is your component affected?

Search our database of 91,000+ classified CVEs. No account required.

Try: nginx · woocommerce · react · wordpress

Free Scan

Test your dependencies right now

Upload your dependency file or paste your component list. Get an instant vulnerability report — no account required.

Drag & drop your dependency file

composer.lock, package-lock.json, requirements.txt, Gemfile.lock, pubspec.lock, Dockerfile...

Browse files

Live Feed

Latest Vulnerabilities

Stay informed about the latest CVEs affecting popular components

Latest Vulnerabilities

Sample data — connect your NextGuard API to see live CVEs

CVE ID	Severity	CVSS	Component	Description
`CVE-2025-21298`	CRITICAL	9.8	Windows OLE	Windows OLE Remote Code Execution Vulnerability
`CVE-2025-0411`	HIGH	7	7-Zip	7-Zip Mark-of-the-Web Bypass Vulnerability
`CVE-2024-55591`	CRITICAL	9.8	FortiOS	Fortinet FortiOS Authentication Bypass
`CVE-2024-53104`	HIGH	7.8	Linux Kernel	Linux kernel USB Video out-of-bounds write
`CVE-2024-12356`	CRITICAL	9.8	BeyondTrust	BeyondTrust Command Injection Vulnerability
`CVE-2024-50302`	MEDIUM	5.5	Linux Kernel	Linux kernel HID use of uninitialized resource
`CVE-2024-49138`	HIGH	7.8	Windows CLFS	Windows CLFS Driver Elevation of Privilege
`CVE-2024-44308`	HIGH	8.8	WebKit	Apple WebKit JavaScriptCore arbitrary code execution
`CVE-2024-44309`	MEDIUM	6.1	WebKit	Apple WebKit cookie management cross-site scripting
`CVE-2024-43573`	MEDIUM	6.5	MSHTML	Windows MSHTML Platform Spoofing Vulnerability
`CVE-2024-43572`	HIGH	7.8	MMC	Microsoft Management Console Remote Code Execution
`CVE-2024-43451`	MEDIUM	6.5	NTLM	NTLM Hash Disclosure Spoofing Vulnerability
`CVE-2024-40711`	CRITICAL	9.8	Veeam	Veeam Backup & Replication deserialization RCE
`CVE-2024-38812`	CRITICAL	9.8	vCenter Server	VMware vCenter Server heap overflow vulnerability
`CVE-2024-38094`	HIGH	7.2	SharePoint	Microsoft SharePoint deserialization vulnerability

Loading latest CVEs...

Ecosystems

Supported Platforms

Scan dependencies from all major ecosystems

WordPress

Node.js

PHP

Python

Docker

iOS

Android

Java

Process

How It Works

Three ways to input your dependencies. One powerful scanning engine.

Upload & Detect

Drop your composer.lock, package-lock.json, requirements.txt, or any dependency file. Auto-detection included.

Manual Entry

Enter dependencies manually in a table or paste them as text. Support for pip, npm, yaml, and more formats.

Precise Scanning

91,000+ classified CVEs across 50+ platforms. Know exactly what affects your stack.

Real-time Alerts

Get notified the moment a new vulnerability affects your dependencies. Email alerts for critical issues.

Continuous Monitoring

Automatic re-scans when new CVEs are published. Track your security posture over time.

False Positive Management

Mark false positives, mitigated issues, or accepted risks. Your decisions persist across scans.

91K+

CVEs in Database

50+

Platforms Supported

2min

Setup Time

Cost to Start

Don't wait for a breach

Set up monitoring in under 2 minutes. Free plan includes 1 project with daily scans.

Pricing

Simple Pricing

Start free. Upgrade when you need more.

Free

Try before you commit

$0forever

1 project

Weekly scans
5 vulnerabilities visible
7 days history
5 searches/day

Basic

For personal projects

$3/month

1 project

Daily scans
All vulnerabilities visible
30 days history
Weekly email summary
JSON export
Analytics dashboard
EPSS exploit probability

Pro

For freelancers with clients

$5/month

3 projects

Scans every 12h
3 projects
90 days history
Daily email alerts (2 recipients)
JSON + CSV export
Custom sender name in emails
Email open tracking
Analytics dashboard
Threat Intelligence (EPSS, CISA KEV, PoC)

Coming Soon

Business

Real-time protection

$7/month

5 projects

Scans every 3h
5 projects
180 days history
Alerts every 3h (3 recipients)
JSON, CSV + XLSX export
Custom logo & colors in emails
Custom sender name in emails
Email open tracking
Analytics dashboard
Threat Intelligence (EPSS, CISA KEV, PoC)

Coming Soon

Developer

Automate with API

$9/month

5 projects

Everything in Business
REST API access
1,000 API calls/month
Hourly alerts (5 recipients)
Custom reply-to email
200 searches/day
1,000 vuln views/day
Priority support (12h)
Analytics dashboard
Threat Intelligence (EPSS, CISA KEV, PoC)

Frequently Asked Questions

Everything you need to know about NextGuard and vulnerability monitoring.

Latest Vulnerabilities

Sample data — connect your NextGuard API to see live CVEs

CVE ID	Severity	CVSS	Component	Description
`CVE-2025-21298`	CRITICAL	9.8	Windows OLE	Windows OLE Remote Code Execution Vulnerability
`CVE-2025-0411`	HIGH	7	7-Zip	7-Zip Mark-of-the-Web Bypass Vulnerability
`CVE-2024-55591`	CRITICAL	9.8	FortiOS	Fortinet FortiOS Authentication Bypass
`CVE-2024-53104`	HIGH	7.8	Linux Kernel	Linux kernel USB Video out-of-bounds write
`CVE-2024-12356`	CRITICAL	9.8	BeyondTrust	BeyondTrust Command Injection Vulnerability
`CVE-2024-50302`	MEDIUM	5.5	Linux Kernel	Linux kernel HID use of uninitialized resource
`CVE-2024-49138`	HIGH	7.8	Windows CLFS	Windows CLFS Driver Elevation of Privilege
`CVE-2024-44308`	HIGH	8.8	WebKit	Apple WebKit JavaScriptCore arbitrary code execution
`CVE-2024-44309`	MEDIUM	6.1	WebKit	Apple WebKit cookie management cross-site scripting
`CVE-2024-43573`	MEDIUM	6.5	MSHTML	Windows MSHTML Platform Spoofing Vulnerability
`CVE-2024-43572`	HIGH	7.8	MMC	Microsoft Management Console Remote Code Execution
`CVE-2024-43451`	MEDIUM	6.5	NTLM	NTLM Hash Disclosure Spoofing Vulnerability
`CVE-2024-40711`	CRITICAL	9.8	Veeam	Veeam Backup & Replication deserialization RCE
`CVE-2024-38812`	CRITICAL	9.8	vCenter Server	VMware vCenter Server heap overflow vulnerability
`CVE-2024-38094`	HIGH	7.2	SharePoint	Microsoft SharePoint deserialization vulnerability

Know your vulnerabilities before attackers do

Is your component affected?

Test your dependencies right now

Latest Vulnerabilities

Latest Vulnerabilities

Supported Platforms

How It Works

Upload & Detect

Manual Entry

Precise Scanning

Real-time Alerts

Continuous Monitoring

False Positive Management

Don't wait for a breach

Simple Pricing

Free

Basic

Pro

Business

Developer

Frequently Asked Questions

What is NextGuard?

How does scanning work?

Is NextGuard free to use?

What file formats are supported?

How often are scans performed?

Can I search for CVEs without an account?

Latest Vulnerabilities