FirstSignal
Know what to focus on.
Vulnerabilities, exploits, advisories and security news, ranked for the industry, region and products you care about.
FirstSignal is a daily security briefing on your phone. Of the thousands of vulnerabilities and news items published each day, it shows the few that matter to you, and says in plain words why.
- Coming soon to Google Play
- Coming soon to the App Store
Android 10 and later first; iPhone to follow. No account required.
From the app
-
The morning briefingOne sentence on what matters, then the items in Priority, This week and For awareness. -
Every match shows its proofThe version you entered, the vulnerable range, the fixed version, the source and how sure the match is. -
Early signs on one timelinePublic exploit code, EPSS jumps and news surges, each with its time, before the CISA KEV line.
Screens from the app, with replayed public data from the PHP2Shell case (October 2026) and an illustrative product list.
-
Sorted by your industry and location
National and industry advisories for where you work come first. You can also add the products you use and the feeds you trust. Each item says in plain words why it is there.
-
Earlier signs than CISA KEV, with receipts
Public exploit code, jumps in the predicted chance of attack (EPSS) and a burst of coverage from many outlets, on one timeline per vulnerability. If CISA lists an item later, the app records how much earlier it flagged it. Lead time varies, and some vulnerabilities reach the list first. How it ranks
-
Clear lanes
Items land in Priority, This week or For awareness by written rules, and each says why it is there. Swipe left for Not for me and right for Save, set an item aside for Later, or Send a plain-text summary to your team. Not for me, Save and Later can be undone.
-
Alerts you set
By default only Priority items notify you, as a normal notification. Rules for vendors, severity, exploited in the wild, industry, watchlist or your products each get their own sound. Nothing sounds during Do Not Disturb unless a rule asks and you allow it in Android.
-
On your phone, no account
Your lists and the products you enter are stored on your phone, and summaries are written on the phone where it supports them. The phone fetches public feeds directly from their publishers. No ads and no tracking; optional anonymous usage counts are off by default. Privacy policy
FirstSignal is not a scanner. It never scans a network and works from what you tell it. It helps you prioritise; it does not replace vendor advisories, a vulnerability scanner or your own assessment.
Contact
- Support and questions
- support@firstsignalcyber.com
- Reporting a security issue, under the disclosure policy
- security@firstsignalcyber.com