Most small companies have no one whose job is to read vulnerability feeds, yet they run the same open-source components as everyone else and get attacked through the same known flaws. vulneraibility.com does the reading for you and tells you what to patch first.
List the products you use, with versions if you know them. No agent, no scanner, no integration project.
CVEs that touch your stack, with exploited and version-affecting ones first.
Statuses, notes and history give you a documented vulnerability process for customer security questionnaires.
The free plan covers major alerts for two technologies; paid plans unlock the full stream, triage and integrations.
The products you run, once.
Only for CVEs that touch them.
What is exploited or affects your version.
A one-line decision you can show a customer.
It is a good start: major CVE alerts for two technologies. Teams with a larger stack or customer questionnaires to answer usually move to a paid plan for the full stream, triage workflow and reports.
No, but it helps. Without versions you still get every CVE that names your products; with them you also learn whether your version is in the affected range.
It gives you the evidence for the vulnerability management questions: an inventory of what you run, how you learn about new vulnerabilities and a record of what you decided.