- N. Korea-linked hackers target 30 S. Korean servers: report
- New attack through npm: fake package “node-zserial” planted to hit whoever installs it
- United States: Uber Data Breach Investigation: Edelson Lechtzin LLP Probes Class Action Claims After Driver Data Is Exposed
- New attack through PyPI: fake package “gateio-v4” planted to hit whoever installs it
A new attack every hour. Can hackers get into your product?
Attackers get in through weak spots in your code. Check if your product has one, for free.
1,207 new warnings this week · 12 already used in attacks · newest 3 h ago
Check your code. Free.
No card. Your first fix is free.
or
Continue with e-mailBy continuing you agree to the Terms and the Privacy Policy.
- koreatimes.co.krN. Korea-linked hackers target 30 S. Korean servers: report
- npmNew attack through npm: fake package “node-zserial” planted to hit whoever installs it
- prnewswire.comUnited States: Uber Data Breach Investigation: Edelson Lechtzin LLP Probes Class Action Claims After Driver Data Is Exposed
- PyPINew attack through PyPI: fake package “gateio-v4” planted to hit whoever installs it
- webindia123.comUnited States: "Don't believe so": US Transportation Secy rules out cyberattack in FAA outage; aviation chief says no AI link
- Debian SecurityNew security hole found in Debian network-manager-iodine
- dagu-orgAttack code for dagu-org dagu is now public
- Public advisoryAttack code for FreeSWITCH Event Socket is now public
- zhimaAiAttack code for zhimaAi chatwiki is now public
New this week. Is one of them yours?
Real attacks and warnings, reported this week. Pick one to check your code against it.
See every report, live- New attack through npm: fake package “node-zserial” planted to hit whoever installs itIs it in mine?
- New attack through PyPI: fake package “gateio-v4” planted to hit whoever installs itIs it in mine?
- New security hole found in Debian network-manager-iodineIs it in mine?
- Attack code for dagu-org dagu is now publicIs it in mine?
- Attack code for FreeSWITCH Event Socket is now publicIs it in mine?
- Attack code for zhimaAi chatwiki is now publicIs it in mine?
What can I check?
Anything you can check by yourself, today. No call, no install.
A repo
Connect GitHub. We read the packages your code uses.
A container
The packages inside your Docker image.
An SBOM
Upload a CycloneDX or SPDX file. No code access needed.
A website or API
Type the address. Nothing to install.
An AI app or agent
LLM apps, AI agents and MCP servers are built from packages too.
Works with npm, PyPI, Maven, Go, Rust, PHP, Ruby and .NET projects. Making a device? Firmware has its own page.
From the news to a fix.
Only what hits you
Hundreds of warnings a week. You see the few that are inside your own product.
In plain words
What it is, why it matters, and what to change. No security degree needed.
Fixed for you
Rook, our AI engineer, writes the fix as a pull request and shows the checks it passed. You press merge.
Made for people who ship.
SaaS teams
No security hire. One place to see what is wrong and fix it.
Solo founders
One product, checked every day. From €59 a month.
AI and LLM builders
Agents, MCP servers and model gateways pull in packages nobody read.
Built with Cursor, Claude Code or Lovable
AI writes fast and never checks what it installs. We do.
Free to check. Pay for the fixes.
Find out what is wrong for free. Pay only when you want KROMSE to fix it for you, every month.
1 free fix
Free
€0 / month
Try it on one real product.
- 1 user
- 1 repository
- AI answer on critical and high findings
- No card
10 fixes a month
Founder
€59 / month
A solo founder shipping one product.
- 1 user
- 5 repositories
- 10 scans every 30 days
- AI usage included
50 fixes a month
Basic
€249 / month
A small team fixing every week.
- 3 users
- 25 repositories
- Scanning included
- 3 Spaces for your products
100 fixes a month
Pro
€749 / month
A product team with many repos.
- 10 users
- 200 repositories
- Scanning included
- 10 Spaces for your products
200 fixes a month
Ultra
€999 / month
Many products and brands.
- 25 users
- 500 repositories
- Scanning included
- 25 Spaces, onboarding included
The bars show fixes a month, drawn to scale. Prices per workspace in euros, excluding VAT. Yearly billing costs ten months. Paid plans have a 7-day trial and start in your workspace, under Plan and usage.
These prices are for software. Firmware and CRA evidence are priced with you, in writing, after a demo.
Questions people ask
- What does KROMSE check?
- Your GitHub repository, a container image, an SBOM file (CycloneDX or SPDX) or a website address. It looks for known vulnerabilities and for malicious packages, and it checks every new public attack report against what it found.
- Is it really free?
- Yes. Checking is free, with no card, and your first fix is free too. Paid plans start at €59 a month when you want more fixes and more repositories.
- Is there a trial, and can I pay yearly?
- Paid plans have a 7-day trial for eligible new subscriptions; a card is required, and you pay nothing if you cancel before it ends. Yearly billing costs ten months instead of twelve.
- How does the fix work?
- Rook, the KROMSE AI engineer, writes the fix as a pull request in your repository and shows the checks it passed. Nothing is merged until you say yes.
- I built my app with Cursor or Claude Code. Is this for me?
- Yes. AI coding tools add packages quickly and do not check them. KROMSE checks every package in your project, however the code was written.
- Does it work for AI agents and MCP servers?
- Yes. An agent, an MCP server or an LLM gateway is software made of packages, and fake MCP server packages have already shown up in the public feed. Connect its repository or upload its SBOM.
- Can KROMSE see my code?
- Only what you connect, and only to check and fix your own project. You can also upload an SBOM, which contains a list of parts and no source code. Where your data is processed is on the trust page.
- I make hardware. Is this the right page?
- For devices and firmware, use the firmware page and book a demo. This page is for software you can check by yourself today.
Not software?
The newest report came in 3 h ago. The next one is on its way.
Know before it hits.
Free to check, first fix included. €59 a month when you want every fix. See the plans