CVE Monitoring - Detect and Prioritize Vulnerabilities
Automated vulnerability scanning, prioritized alerting and risk-based patch management. Affected systems, decisions and actions are documented transparently.
Critical
CVSS 9+
High
CVSS 7+
Medium
CVSS 4+
Companies worldwide trust WZ-IT
What is CVE Monitoring?
Every day new security vulnerabilities in software are discovered and published as CVEs (Common Vulnerabilities and Exposures). CVE monitoring means: your systems are continuously matched against this database.
We identify affected packages and assess exposure, exploitability and existing controls in addition to the CVSS score. This determines the appropriate patching or containment action.
CVE-2024-XXXXX
CVSS 9.8 - Remote Code Execution
CVE-2024-XXXXX
CVSS 7.5 - Privilege Escalation
Patched
142 packages up to date
Four Steps to Secure Infrastructure
From automated scanning to documented risk assessment and action, our CVE process is transparent and traceable.
Continuous Scanning
Inventory & Exposure
Regular automated vulnerability scans of all systems and services using up-to-date CVE databases.
CVE Alerting
Automated Notification
Automatic notification for new CVEs affecting your deployed software versions - prioritized by CVSS score.
Patch Management
Risk-based & documented
We assess exposure, exploitability, affected systems and existing controls. The service level governs response, not a blanket patch-completion deadline.
Compliance Reporting
Documentation
Regular reports on the security status of your systems - for audits, ISO certifications and internal compliance.
What We Scan
From OS packages to container images - we cover all layers of your software infrastructure.
OS Packages
- Debian/Ubuntu APT packages
- RPM-based distributions
- Kernel versions
- Systemd services
Application Dependencies
- npm / yarn packages
- Python pip dependencies
- Go modules
- Java Maven/Gradle
Container Images
- Docker image layers
- Base image CVEs
- Registry scanning
- Runtime configuration
Network Services
- Open ports & services
- SSL/TLS configuration
- Web servers (Nginx, Apache)
- Database versions
Response by Service Level, remediation by risk
The service level defines when a qualified response begins. The appropriate protective or patching action follows from affected systems, exploitability, exposure and technical scope.
| Service level | Qualified response | Service window | Scope |
|---|---|---|---|
Essential | By the end of the next business day | Mon-Fri 08:00-17:00 CET/CEST | Assessment and regular remediation in the appropriate maintenance window. |
Business | P1 within 4 service hours | Mon-Fri 08:00-18:00 CET/CEST | Faster qualified response during the service window. |
Production | P1 within 60 minutes | P1 around the clock | 24/7 P1 response for the explicitly covered customer environment. |
Critical | P1 within 30 minutes including callback | P1 around the clock | Available only after readiness review, runbook approval and capacity confirmation. |
A response time is not a guaranteed resolution time. General vulnerability notices and vulnerabilities without evidence of exploitation are not automatically P1 incidents.
From CVE to Decision
New vulnerabilities are published every day - only a few affect your systems, and even fewer require immediate action. The value is not in collecting CVEs, but in filtering and assessing them.
- 01
Feed Matching
New CVEs arrive daily from multiple sources: NVD, vendor advisories and the distribution security trackers. No single feed is complete - which is why we cross-check several against each other.
- 02
Relevance Filter
Every CVE is checked against your software inventory: deployed packages, versions, container images. What does not run in your environment does not trigger an alert - which keeps the noise low.
- 03
Prioritization
The CVSS score alone is not enough. We additionally assess exploitability and exposure: is there a public exploit? Is the service reachable from the internet or only internally behind a VPN? Not every 9.8 is critical in your environment - and some 6.5 very much is.
- 04
Patch Decision
The result is a documented decision: a regular patch in the appropriate maintenance window, a compensating control or immediate containment where there is an acute material threat. The exact action depends on risk, approvals and technical scope.
The difference to a bare scanner: a tool hands you a list of a hundred findings. We hand you the few decisions that actually need to be made this week.
Tools & Feeds
We do not invent our own vulnerability data - we evaluate the established sources and match them against your systems.
NVD (National Vulnerability Database)
The central CVE database maintained by NIST with CVSS ratings - our basis for matching and scoring.
Vendor Advisories
Security announcements from the software in use - from Proxmox and Nextcloud to PostgreSQL. Often faster and more precise than the corresponding NVD entry.
Distro Security Trackers
The Debian Security Tracker and Ubuntu Security Notices show whether and in which package version a vulnerability is fixed for your distribution - decisive for the patch decision.
BSI CERT-Bund (WID)
The warning and information service of the German BSI aggregates and assesses current vulnerabilities for the German market - including a criticality assessment.
One alert flow for security and operations
For us, CVE monitoring is not an isolated tool but a building block of the monitoring ladder: CVE alerts run in the same alert flow as the infrastructure monitoring on our Zabbix cluster. The same escalation chains, the same contacts - from CPU spike to critical vulnerability.
Further guides
These services complement your vulnerability management.
More Managed Operations Services
SLA & Service Levels
Four tiers with clearly defined response times.
Monitoring Only
24/7 monitoring from €79.90; alerts go to your team.
Managed Zabbix
Platform operations from €79.90; alerts go to your team.
Compliance
GDPR, ISO 27001 and BSI C5.
Server Management from €149.90
Your servers, our operations - patching, monitoring, and response.
Contract & Maintenance Model
How scope, maintenance cadence, and responsibilities are defined.
Legacy Operations
Operation and modernization of legacy systems.
CVE (Common Vulnerabilities and Exposures) is a standardized directory of publicly known security vulnerabilities. Each CVE has a unique ID and a CVSS score (0-10) that rates the severity. Unpatched CVEs are one of the most common entry points for cyberattacks.
Scan targets, methods and frequency are agreed according to inventory, exposure and system load. The selected service level governs response time for qualified incidents; it does not automatically determine the scan schedule.
We assess more than the CVSS score: actual exposure, affected systems, known exploitation and existing controls. Where there is an acute material threat, we initiate necessary containment and inform you as quickly as possible. A general vulnerability notice without evidence of exploitation is not automatically a P1 incident. The service level governs qualified response, not a blanket patch-completion deadline.
Yes. We provide exportable reports in your preferred format (PDF, CSV) suitable for ISO 27001, BSI C5 and GDPR audits. Reports document all found vulnerabilities, their status and the measures taken.
From multiple sources that we cross-check against each other: the NIST NVD, the security advisories of the vendors in use, the security trackers of Debian and Ubuntu, and the warning and information service of the German BSI (CERT-Bund). The matching against your software inventory happens through our scans - turning the global feed into a list that only concerns your systems.
Not indiscriminately. Every relevant CVE is first assessed for affected systems, exploitability, exposure and existing controls. Regular updates are applied in the next appropriate maintenance window. An acute material threat may require immediate, preferably reversible protective action. Implementation follows a documented decision and the agreed approval and action boundaries.
A zero-day is a vulnerability for which no patch exists yet - so patching is not an option. Instead, we reduce the attack surface: limit exposure (firewall, VPN), implement vendor-recommended workarounds and sharpen monitoring on the affected systems. As soon as a fix is available, it is applied with priority.
How secure are your systems?
Tell us briefly what it is about - we will get back to you within one business day.
Operations that visibly relieve customers
Customer feedback on monitoring, updates, maintenance, support and stable production systems.
“Professional, honest and technically thoroughly sound: WZ-IT set up our Proxmox and backup infrastructure securely and future-proof. The consulting from Timo and Robin was objective and needs-driven, the implementation smooth and the final documentation exemplary. You can tell immediately that business-critical infrastructure is thought through holistically from the outset here and implemented with clear ownership.”
Pascal Block
Project Manager, Stadtwerke Brühl GmbH
Stadtwerke Brühl - municipal energy and infrastructure utility.
“WZ-IT provided very competent support in implementing our server and virtualization infrastructure. As part of the project, a Proxmox-based virtualization environment was set up along with a virtual machine for our application systems. Additionally, a structured backup concept was implemented. A particular focus was on security: the setup of a VPN tunnel and the clean implementation of encryption and access concepts were professionally executed. The structured consulting as well as the reliable and swift implementation deserve special mention. We are very satisfied with the services provided and are happy to recommend WZ-IT.”
John Hellmerichs
Managing Director, AInergy GmbH
AInergy - consultancy for energy and facility management.
“WZ-IT manages our Proxmox cluster reliably and professionally. The team handles continuous monitoring and regular updates for us and responds very quickly to any issues or inquiries. They also configure new nodes, systems, and applications that we need to add to our cluster. With WZ-IT's proactive support, our cluster and the business-critical applications running on it remain stable, and high availability is consistently ensured. We value the professional collaboration and the noticeable relief it brings to our daily operations.”
Pascal Hakkers
Aphy AG
Aphy AG - AI platform for hotel back-office.
“Communication with WZ-IT was open, friendly and professional from the very beginning. Mr. Wevelsiep and Mr. Zins responded to every one of our questions patiently, promptly and respectfully, and contributed their own suggestions and good ideas on how to modernize our server infrastructure and adapt it even better to our needs. Throughout, WZ-IT consistently kept our need for data sovereignty and GDPR compliance in mind. Even short-notice adjustments and change requests from our side were implemented quickly and patiently and integrated consistently into the overall concept. From planning to the final handover, every step was documented transparently and comprehensively - so if a provider change should ever become necessary, the documentation would let us onboard a successor into our infrastructure very quickly. We are extremely satisfied with WZ-IT and hope to continue working together for a long time.”
Christoph Mußmann
Project Officer, DGHO e.V.
DGHO - German Society for Hematology and Medical Oncology.
“Timo and Robin from WZ-IT set up a RocketChat server for us - and I couldn't be more satisfied! From the initial consultation to the final implementation, everything was absolutely professional, efficient, and to my complete satisfaction. I particularly appreciate the clear communication, transparent pricing, and the comprehensive expertise that both bring to the table. Even after the setup, they take care of the maintenance, which frees up my time enormously and allows me to focus on other important areas of my business - with the good feeling that our IT is in the best hands. I can recommend WZ-IT without reservation and look forward to continuing our collaboration! (translated)”
Sebastian Maier
Managing Director, Yonju GmbH
Yonju - business coaching and AI products.
“I got to know Timo and Robin as dedicated and professional partners who make a lot of things possible for their clients that initially seem impossible. I felt very well advised. The services offered have thoroughly convinced me. (translated)”
Andrea Pawlowski
Communications Manager, Golem.de
Golem.de - leading German IT news outlet.
“While looking for a partner to integrate a local AI solution, we came across Timo and Robin - and could not have made a better decision. They quickly understood our requirements and solved technical challenges competently and pragmatically. We were particularly impressed by the straightforward collaboration, their high level of expertise and the speed of implementation. We are delighted to have Timo and Robin at our side as reliable business partners and look forward to our next projects together. (translated)”
Henrik Jeche
Head of IT Administration
ml&s - full-service provider for the electronics industry.
“With Timo and Robin, you're not only on the safe side technically - you also get the best human support! Whether it's quick help in everyday life or complex IT solutions: the guys from WZ-IT think along with you, act quickly and speak a language you understand. The collaboration is uncomplicated, reliable and always on an equal footing. That makes IT fun - and above all: it works! Big thank you to the team! (translated)”
Sonja Aßer
Data Manager, ARGE
ARGE Neue Medien - master data & digital standards for plumbing and building technology.
“I recently worked with Timo and the WZ-IT team, and honestly, it turned out to be one of the best tech decisions I have made for my business. Right from the start, Timo took the time to walk me through every step in a simple and calm way. No matter how many questions I had, he never rushed me. The results speak for themselves. With WZ-IT, we reduced our monthly expenses from $1,300 down to $250. This was a huge win for us.”
Aleksandr Shuliko
CTO, EVA Real Estate
EVA Real Estate - leading real-estate agency in Dubai.
“We have had very good experiences with Mr. Wevelsiep and WZ-IT. The consultation was professional, clearly understandable, and at fair prices. The team not only implemented our requirements but also thought along and proactively. Instead of just processing individual tasks, they provided us with well-founded explanations that strengthened our own understanding. WZ-IT took a lot of pressure off us with their structured approach - that was exactly what we needed and is the reason why we keep coming back. (translated)”
Matthias Zimmermann
Managing Director, Annota GmbH
Annota - healthtech startup with an AI documentation assistant.
“Counting on WZ-IT team was crucial, their expertise and solutions gave us the pace to deploy in production our services, even suggesting and performing improvements over our configuration and setup. We expect to keep counting on them for continuous maintenance of our services and implementation of new solutions.”
Gabriel Sanz Señor
Managing Director, Odiseo Solutions
Odiseo Solutions - software engineering for the space industry.
“Professional, honest and technically thoroughly sound: WZ-IT set up our Proxmox and backup infrastructure securely and future-proof. The consulting from Timo and Robin was objective and needs-driven, the implementation smooth and the final documentation exemplary. You can tell immediately that business-critical infrastructure is thought through holistically from the outset here and implemented with clear ownership.”
Pascal Block
Project Manager, Stadtwerke Brühl GmbH
Stadtwerke Brühl - municipal energy and infrastructure utility.
“WZ-IT provided very competent support in implementing our server and virtualization infrastructure. As part of the project, a Proxmox-based virtualization environment was set up along with a virtual machine for our application systems. Additionally, a structured backup concept was implemented. A particular focus was on security: the setup of a VPN tunnel and the clean implementation of encryption and access concepts were professionally executed. The structured consulting as well as the reliable and swift implementation deserve special mention. We are very satisfied with the services provided and are happy to recommend WZ-IT.”
John Hellmerichs
Managing Director, AInergy GmbH
AInergy - consultancy for energy and facility management.
“WZ-IT manages our Proxmox cluster reliably and professionally. The team handles continuous monitoring and regular updates for us and responds very quickly to any issues or inquiries. They also configure new nodes, systems, and applications that we need to add to our cluster. With WZ-IT's proactive support, our cluster and the business-critical applications running on it remain stable, and high availability is consistently ensured. We value the professional collaboration and the noticeable relief it brings to our daily operations.”
Pascal Hakkers
Aphy AG
Aphy AG - AI platform for hotel back-office.
“Communication with WZ-IT was open, friendly and professional from the very beginning. Mr. Wevelsiep and Mr. Zins responded to every one of our questions patiently, promptly and respectfully, and contributed their own suggestions and good ideas on how to modernize our server infrastructure and adapt it even better to our needs. Throughout, WZ-IT consistently kept our need for data sovereignty and GDPR compliance in mind. Even short-notice adjustments and change requests from our side were implemented quickly and patiently and integrated consistently into the overall concept. From planning to the final handover, every step was documented transparently and comprehensively - so if a provider change should ever become necessary, the documentation would let us onboard a successor into our infrastructure very quickly. We are extremely satisfied with WZ-IT and hope to continue working together for a long time.”
Christoph Mußmann
Project Officer, DGHO e.V.
DGHO - German Society for Hematology and Medical Oncology.
“Timo and Robin from WZ-IT set up a RocketChat server for us - and I couldn't be more satisfied! From the initial consultation to the final implementation, everything was absolutely professional, efficient, and to my complete satisfaction. I particularly appreciate the clear communication, transparent pricing, and the comprehensive expertise that both bring to the table. Even after the setup, they take care of the maintenance, which frees up my time enormously and allows me to focus on other important areas of my business - with the good feeling that our IT is in the best hands. I can recommend WZ-IT without reservation and look forward to continuing our collaboration! (translated)”
Sebastian Maier
Managing Director, Yonju GmbH
Yonju - business coaching and AI products.
“I got to know Timo and Robin as dedicated and professional partners who make a lot of things possible for their clients that initially seem impossible. I felt very well advised. The services offered have thoroughly convinced me. (translated)”
Andrea Pawlowski
Communications Manager, Golem.de
Golem.de - leading German IT news outlet.
“While looking for a partner to integrate a local AI solution, we came across Timo and Robin - and could not have made a better decision. They quickly understood our requirements and solved technical challenges competently and pragmatically. We were particularly impressed by the straightforward collaboration, their high level of expertise and the speed of implementation. We are delighted to have Timo and Robin at our side as reliable business partners and look forward to our next projects together. (translated)”
Henrik Jeche
Head of IT Administration
ml&s - full-service provider for the electronics industry.
“With Timo and Robin, you're not only on the safe side technically - you also get the best human support! Whether it's quick help in everyday life or complex IT solutions: the guys from WZ-IT think along with you, act quickly and speak a language you understand. The collaboration is uncomplicated, reliable and always on an equal footing. That makes IT fun - and above all: it works! Big thank you to the team! (translated)”
Sonja Aßer
Data Manager, ARGE
ARGE Neue Medien - master data & digital standards for plumbing and building technology.
“I recently worked with Timo and the WZ-IT team, and honestly, it turned out to be one of the best tech decisions I have made for my business. Right from the start, Timo took the time to walk me through every step in a simple and calm way. No matter how many questions I had, he never rushed me. The results speak for themselves. With WZ-IT, we reduced our monthly expenses from $1,300 down to $250. This was a huge win for us.”
Aleksandr Shuliko
CTO, EVA Real Estate
EVA Real Estate - leading real-estate agency in Dubai.
“We have had very good experiences with Mr. Wevelsiep and WZ-IT. The consultation was professional, clearly understandable, and at fair prices. The team not only implemented our requirements but also thought along and proactively. Instead of just processing individual tasks, they provided us with well-founded explanations that strengthened our own understanding. WZ-IT took a lot of pressure off us with their structured approach - that was exactly what we needed and is the reason why we keep coming back. (translated)”
Matthias Zimmermann
Managing Director, Annota GmbH
Annota - healthtech startup with an AI documentation assistant.
“Counting on WZ-IT team was crucial, their expertise and solutions gave us the pace to deploy in production our services, even suggesting and performing improvements over our configuration and setup. We expect to keep counting on them for continuous maintenance of our services and implementation of new solutions.”
Gabriel Sanz Señor
Managing Director, Odiseo Solutions
Odiseo Solutions - software engineering for the space industry.
“Professional, honest and technically thoroughly sound: WZ-IT set up our Proxmox and backup infrastructure securely and future-proof. The consulting from Timo and Robin was objective and needs-driven, the implementation smooth and the final documentation exemplary. You can tell immediately that business-critical infrastructure is thought through holistically from the outset here and implemented with clear ownership.”
Pascal Block
Project Manager, Stadtwerke Brühl GmbH
Stadtwerke Brühl - municipal energy and infrastructure utility.
“WZ-IT provided very competent support in implementing our server and virtualization infrastructure. As part of the project, a Proxmox-based virtualization environment was set up along with a virtual machine for our application systems. Additionally, a structured backup concept was implemented. A particular focus was on security: the setup of a VPN tunnel and the clean implementation of encryption and access concepts were professionally executed. The structured consulting as well as the reliable and swift implementation deserve special mention. We are very satisfied with the services provided and are happy to recommend WZ-IT.”
John Hellmerichs
Managing Director, AInergy GmbH
AInergy - consultancy for energy and facility management.
“WZ-IT manages our Proxmox cluster reliably and professionally. The team handles continuous monitoring and regular updates for us and responds very quickly to any issues or inquiries. They also configure new nodes, systems, and applications that we need to add to our cluster. With WZ-IT's proactive support, our cluster and the business-critical applications running on it remain stable, and high availability is consistently ensured. We value the professional collaboration and the noticeable relief it brings to our daily operations.”
Pascal Hakkers
Aphy AG
Aphy AG - AI platform for hotel back-office.
“Communication with WZ-IT was open, friendly and professional from the very beginning. Mr. Wevelsiep and Mr. Zins responded to every one of our questions patiently, promptly and respectfully, and contributed their own suggestions and good ideas on how to modernize our server infrastructure and adapt it even better to our needs. Throughout, WZ-IT consistently kept our need for data sovereignty and GDPR compliance in mind. Even short-notice adjustments and change requests from our side were implemented quickly and patiently and integrated consistently into the overall concept. From planning to the final handover, every step was documented transparently and comprehensively - so if a provider change should ever become necessary, the documentation would let us onboard a successor into our infrastructure very quickly. We are extremely satisfied with WZ-IT and hope to continue working together for a long time.”
Christoph Mußmann
Project Officer, DGHO e.V.
DGHO - German Society for Hematology and Medical Oncology.
“Timo and Robin from WZ-IT set up a RocketChat server for us - and I couldn't be more satisfied! From the initial consultation to the final implementation, everything was absolutely professional, efficient, and to my complete satisfaction. I particularly appreciate the clear communication, transparent pricing, and the comprehensive expertise that both bring to the table. Even after the setup, they take care of the maintenance, which frees up my time enormously and allows me to focus on other important areas of my business - with the good feeling that our IT is in the best hands. I can recommend WZ-IT without reservation and look forward to continuing our collaboration! (translated)”
Sebastian Maier
Managing Director, Yonju GmbH
Yonju - business coaching and AI products.
“I got to know Timo and Robin as dedicated and professional partners who make a lot of things possible for their clients that initially seem impossible. I felt very well advised. The services offered have thoroughly convinced me. (translated)”
Andrea Pawlowski
Communications Manager, Golem.de
Golem.de - leading German IT news outlet.
“While looking for a partner to integrate a local AI solution, we came across Timo and Robin - and could not have made a better decision. They quickly understood our requirements and solved technical challenges competently and pragmatically. We were particularly impressed by the straightforward collaboration, their high level of expertise and the speed of implementation. We are delighted to have Timo and Robin at our side as reliable business partners and look forward to our next projects together. (translated)”
Henrik Jeche
Head of IT Administration
ml&s - full-service provider for the electronics industry.
“With Timo and Robin, you're not only on the safe side technically - you also get the best human support! Whether it's quick help in everyday life or complex IT solutions: the guys from WZ-IT think along with you, act quickly and speak a language you understand. The collaboration is uncomplicated, reliable and always on an equal footing. That makes IT fun - and above all: it works! Big thank you to the team! (translated)”
Sonja Aßer
Data Manager, ARGE
ARGE Neue Medien - master data & digital standards for plumbing and building technology.
“I recently worked with Timo and the WZ-IT team, and honestly, it turned out to be one of the best tech decisions I have made for my business. Right from the start, Timo took the time to walk me through every step in a simple and calm way. No matter how many questions I had, he never rushed me. The results speak for themselves. With WZ-IT, we reduced our monthly expenses from $1,300 down to $250. This was a huge win for us.”
Aleksandr Shuliko
CTO, EVA Real Estate
EVA Real Estate - leading real-estate agency in Dubai.
“We have had very good experiences with Mr. Wevelsiep and WZ-IT. The consultation was professional, clearly understandable, and at fair prices. The team not only implemented our requirements but also thought along and proactively. Instead of just processing individual tasks, they provided us with well-founded explanations that strengthened our own understanding. WZ-IT took a lot of pressure off us with their structured approach - that was exactly what we needed and is the reason why we keep coming back. (translated)”
Matthias Zimmermann
Managing Director, Annota GmbH
Annota - healthtech startup with an AI documentation assistant.
“Counting on WZ-IT team was crucial, their expertise and solutions gave us the pace to deploy in production our services, even suggesting and performing improvements over our configuration and setup. We expect to keep counting on them for continuous maintenance of our services and implementation of new solutions.”
Gabriel Sanz Señor
Managing Director, Odiseo Solutions
Odiseo Solutions - software engineering for the space industry.
Let's talk about your project - honest and no strings attached
- Straight with Timo and Robin - no sales team, no pitch
- An honest take, including when we are not the right fit
- Concrete next steps for infrastructure, software or AI
No risk: worst case, you leave with a clearer understanding of your project than before.
“WZ-IT's advice on our Azure migration was technically sound and completely non-binding right from the intro call - we took away a great deal.”
Let's Talk About Your Idea
Whether a specific IT challenge or just an idea - we look forward to the exchange. In a brief conversation, we'll evaluate together if and how your project fits with WZ-IT.
Selected customers and projects
Timo Wevelsiep & Robin Zins
Managing Directors of WZ-IT