Reports, News & Research
Quarterly PreCVE disclosure reports, company announcements, and original research on software supply chain risk, all in one place.
Reports
The Disclosure Gap, Measured
320+ confirmed PreCVE detections, the GHSA/CVE gap measured in production data, and why disclosure infrastructure hit its ceiling in 2026.
VulNow's First Full Quarter of Production PreCVE Intelligence
58 verified detections across 28 packages and 13.2 billion monthly downloads, with an average lead time of 6.6 days.
Press & News
VulNow Becomes a CVE Numbering Authority under ENISA Root
VulNow B.V. announces its formal appointment as a CNA under the ENISA CVE Root, authorizing the company to directly assign CVE identifiers to vulnerabilities surfaced by its predictive intelligence engine.
Q2 2026 Report: The Disclosure Gap, Measured
320+ confirmed PreCVE detections, the GHSA/CVE gap measured in production data, and what the new CNA appointment means for VulNow's disclosure pipeline.
The Confirmed PreCVE Dataset
Every confirmed detection referenced in our reports, public, anonymous, and read-only, with an OSV-format API for programmatic access.
Latest Articles
VulNow Q2 2026 Report: The Disclosure Gap, Measured
320+ confirmed PreCVE detections, a disclosure system that has publicly said it can't keep up, and VulNow's appointment as a CVE Numbering Authority.
VulNow Becomes a CVE Numbering Authority under ENISA Root
VulNow B.V. today announced its formal appointment as a CVE Numbering Authority (CNA) under the ENISA CVE Root, authorizing the company to directly assign CVE identifiers to vulnerabilities surfaced by its predictive intelligence engine.
VulNow Q1 2026: 58 PreCVE Detections Confirmed
First full quarter of production PreCVE intelligence: 58 verified detections across 28 packages and 13.2 billion monthly downloads, with average lead time of 6.6 days.
The $60 Billion Problem Nobody's Fixing: Why Package Registries Keep Getting Hacked
A data-driven investigation into why 83% of supply chain attacks could have been prevented, and why the solution that already exists remains ignored.