Cyber risk priorities, backed by current evidence
Know what deserves your attention this week.
Tell us your sector, location and most important systems. The workbench sorts recent intelligence into a concise, source-linked priority list with a practical mitigation for each threat.
Open the free workbenchExplore without signing in. Verify a work email to save your profile and reports or receive a weekly summary.
Live source archive
Signals from people who investigate threats
The archive refreshes on a schedule and shows when a source last succeeded. A failed refresh leaves earlier evidence visible with a freshness warning.
Repeatable ranking
Transparent ordering
Source authority, publication recency, observed exploitation, ease of exploitation and direct matches to your profile determine the relative priority. A match does not prove exposure.
Focused AI brief
Short enough to use
The ranking happens before report writing. The model receives short, server-selected evidence fields and writes a brief threat definition and mitigation; it cannot choose the model or reorder the list.
Intelligence provenance
Sources you can open and check
Collection covers NCSC reports and malware analysis, NHS England Cyber, public Health-ISAC, WaterISAC and RH-ISAC articles, the National Crime Agency, CERT-EU, NCC Group, PortSwigger Research, Google/Mandiant, CISA Known Exploited Vulnerabilities, Sophos X-Ops, The Register Security, and CISA ICS and medical advisories. WaterISAC collection is limited to explicitly TLP:CLEAR posts.
For a matched CVE, FIRST EPSS adds a dated exploitation-likelihood signal. OSV adds package-specific vulnerability evidence only if you enter an exact ecosystem, package and version. Neither signal establishes that your organisation runs an affected product.
Explore the workbench →