FirstSignalSupport
Questions, problems and ideas all go to one address.
Contact
- Support and questions
- support@firstsignalcyber.com
- A security issue in FirstSignal itself
- Read the disclosure policy
It helps to include the app version (Settings, About), your Android version and phone model, and what you expected to happen. Please do not send your product list or API keys; we never need them. Emails are kept only to reply, as the privacy policy says.
"Ranking wrong?"
Every item's detail screen has a "Ranking wrong?" link. It opens a draft in your own email app, addressed to support, with:
- the item's ID, and its CVE ID, or "none (news story)";
- the lane it is in, and the rule that placed it there;
- the app version.
It carries nothing about you: no product list, feeds, industry, region or device details. You can read and edit all of it, and nothing is sent until you send it. Add a line on what you expected and why. Reports like these are how the lane rules on How it ranks get better.
Send feedback
Send feedback (in Settings, under About) also opens your email app. By default the message includes a short diagnostic block: the app version, the Android version, your phone's manufacturer and model, the time of the last check and how many sources are working. The block is shown in full before you send, and you can switch it off. It never includes your stack, settings, feeds, alert rules or triage history.
Common questions
Is FirstSignal a vulnerability scanner?
No. It never scans, probes or attacks any system, and it cannot see a network. It ranks public vulnerability data and news by your industry and location, the products you choose to enter, and the feeds you add.
Do I need an account?
No. There is no FirstSignal account, and FirstSignal does not receive your lists, settings or products. They are stored on your phone.
Do I have to enter my products?
No. Industry and region come first, and the app works without a product list. If you add products (pick them, paste a list, or import CSV, CycloneDX or SPDX), matches come with proof: the version you entered, the vulnerable range, the fixed version, the source and the confidence.
Why did an alert arrive later than the news?
Checks run on Android's scheduler, typically every 15 minutes or longer, and battery settings can delay them further. Alerts are not instant. Do not rely on FirstSignal as your only alerting channel. To make checks run more reliably, change FirstSignal's battery setting in Android.
Can an alert sound during Do Not Disturb?
Only if you ask for it. By default a Priority item is a normal notification that follows Do Not Disturb. In Settings, Alerts, a rule can be set to sound during Do Not Disturb, and it does so only after you switch on Override Do Not Disturb for that rule in Android's notification settings.
Which phones does it run on?
Android 10 and later: phones, foldables and tablets. On phones with a supported on-device model, FirstSignal can write short summaries on the phone. Every feature works without it.
Can I add my own feeds?
Yes. Add any RSS or Atom feed, such as a team blog, a vendor's advisories or a CERT you follow, in Settings. Its items are ranked like the built-in ones, showing the title, a short snippet and the link.
What is in Free, and what is in Pro?
FirstSignal is free during early access, with every feature and no limits. The only purchase is Founding supporter, a one-time payment that keeps Pro permanently when early access ends. After early access, Free has all lanes and every Priority alert, industry and region filtering, three alert rules of your own, one product list with up to 15 products, three of your own feeds, the home-screen widget, the version checker, the indicator extractor and 30 days of history. Pro (one-time purchase) adds unlimited product lists, products and alert rules, up to 25 feeds of your own, daily and weekly summaries, search-rule drafts for security log tools, software-list (SBOM) and CSV import and unlimited history. Your own API keys work in Free. Google Play handles purchases.
How do I move to a new phone?
Your lists can move with you. Settings, Back up and restore makes a backup file locked with a passphrase you choose. Android's phone-to-phone transfer also carries one file with your lists (products, Saved, Later and Dismissed, alert rules, your own feeds, watchlist and settings) to the new phone. Google backup holds the same file only if you turn on "Back up my lists with Google" in that screen; it is off until you do. API keys, downloaded records and news never move, so add your API keys again on the new phone.
How do I delete my data?
In the app, use Settings, Data on this phone, Delete all data. Uninstalling the app, or Android Settings, Apps, FirstSignal, Storage, Clear storage, also deletes everything the app stored.
Does it download exploit code?
Never. Public exploit code and scanner templates are linked, for reference only, and never downloaded or run by the app.