Where PocketClaw is going.
Today: CVE alerts by email, Discord or Slack for the self-hosted AI components you run, and a scanner for your compose files. Below, what has shipped and what we are considering, without dates we cannot keep.
What you get right now
Email, Discord or Slack · no app to install
Alerts arrive in your inbox, or in a channel. There is no app to install and no dashboard to watch: you hear from PocketClaw when a new CVE matches a component you picked.
20 components
The CVEs of the components in the tracker, from OpenClaw, Ollama and vLLM to n8n, LangChain and Qdrant.
Matched, not relayed
Each CVE is tied to a component and its versions are checked against the GitHub advisory and the CVE record when they exist, so an alert names the release that fixes it.
Public bets
Pro CVE alerts
Pick the components you run; every 6 hours new NVD entries are matched against them and you get an email. €9 a month or €49 a year, after a 7-day trial.
StackScanner
Paste a docker-compose.yml, requirements.txt or package.json and get the CVEs that hit the versions you pinned. The preview is free; full reports come with Pro or a scan pack.
Discord and Slack webhooks
Pro alerts can also post to a Discord or Slack channel.
Versions checked against two more sources
Affected and fixed versions are compared across NVD, the CVE record and GitHub's reviewed advisories, and each CVE page says which one it follows.
Scan a GitHub repository
Point the scanner at a public repository instead of pasting files. An idea, not a commitment.
The hosts, not only the software
Alerts on the platforms agents run on: board firmware, mini PC vendor advisories. An idea, not a commitment.
Tell us what to build next: write to [email protected] with the component or the feature you need.
Start the 7-day Pro trial