Independent by design.

What this is

Exposure Focus is part of infosecuriosity, developed by Stephen Tate. It cuts through the hype around new vulnerabilities and gives real, actionable intelligence on exposure, so you can make informed decisions about how urgent each one is for your setup and what to do about it.

Every verdict follows a published rubric, so you can see how each one is decided. There are no sponsors, affiliate links, advertising, tracking or third-party scripts.

How facts are labelled

Every fact has a source link and an as-of date. Each carries one of three labels:

• Vendor-stated: the maker of the product said it.
• Reported: someone credible reported it, and it has not been independently confirmed.
• Inference: reasoning from the facts above, not a sourced fact.

Unconfirmed claims are labelled as such, never stated as fact. Every call can change as the evidence does, and the date on each verdict shows when it was last checked. Mistakes are listed on the corrections page.

Verdicts are guidance, not a guarantee

A verdict is a reading of the evidence on the date shown. It does not know your systems, so check the evidence date before you act.