Live security intelligence

Your vendors. Your feed.
Your edge.

OmenPoint turns the security-news firehose into a filtered, plain-English briefing built around the products you work with - one view for the engineers who architect it, another for the sellers who need a reason to call.

Start your free trial See how it works ↓
550+curated sources
100+vendors, filterable
190+countries tracked
13categories

Watch the firehose become your feed

Scroll, and OmenPoint builds itself around you: the vendors you cover, the signal it attaches to each story, and the two very different ways of reading it.

OmenPoint TechnicalCommercial
◎ Your vendors
Meridian Networks Solstice Data Archway Cloud Palo Alto Okta Cisco Microsoft
Meridian NetworksMeridian PSIRT · 2h

EdgeGate VPN pre-auth bypass now exploited in the wild

CVE-2026-00000 KEV CVSS 9.8 EPSS 94% patch by 26 Aug
Technical read Unauthenticated bypass on the SSL-VPN listener. Patch 4.x to 4.7.2 today, rotate local admin credentials, and check the appliance logs back to 3 August.
Commercial read Any account running EdgeGate at the perimeter has a government patch deadline of 26 August. That deadline is the call: patch status, upgrade path, and who owns the appliance.
Vulnerabilities +9 sources Saved
Industry newsQuarterly roundup · 11h

Threat-actor roundup: the quarter in review

Technical read A broad industry write-up, not tied to anything you run. Still in the feed, just no longer in your way.
Commercial read General background. Nothing here names an account of yours.
Industry News
Solstice DataSolstice Blog · 5h

Identity governance release adds session recording

Technical read Session capture on privileged roles, with export to the usual SIEM sinks. Worth a look if privileged access review is on your audit list.
Commercial read The feature two of your accounts asked for last quarter just shipped. Easiest follow-up call there is, and it lands before the renewal conversation.
Vendor Research+3 sources
Archway CloudArchway Status · 9h

Region-wide IAM policy change lands 1 September

Technical read Default deny on cross-account role assumption. Anything relying on implicit trust breaks on the day, so audit the role graph this week.
Commercial read A dated change every Archway account has to act on. A short, genuinely useful heads-up email is a warm way back into a quiet account.
Cloud & DevSecOps+2 sources
Known-exploited alert · Meridian Networks
A vendor you follow just landed on CISA's known-exploited list. The email was sent the cycle it happened, before you went looking.

An illustrative feed: these vendors and this CVE are invented. Today's real headlines are below.

01

Every security source, one feed

Vendor research, CVEs, exploits, national CERTs, news, podcasts, YouTube: 550+ sources, collected every 30 minutes into a single stream.

Which, so far, is a list of headlines. Everyone has one of those.

02

Tell it who you work with

Pick your vendors, plus the categories and countries you cover. Two minutes, once, and it holds for good.

03

Your vendors rise; the noise fades

Everything about the products you touch floats to the top. The rest of the wire dims rather than disappears, so nothing is hidden from you.

04

Then the part you are paying for

Every story carries what we worked out about it: whether it is known-exploited, its severity, the exploit-probability score, the government patch-by deadline, its category, and how many other outlets ran the same story.

And under all of it, a custom-written note on this specific story: not the publisher's summary rewritten, but what it means for your morning.

05

One switch. Two different pieces of writing.

Watch the note change, not the story. Technical is the practitioner's read: what is affected and what to do this morning. Commercial is the seller's: the conversation this opens with a customer.

Two jobs, two answers. Almost all security news is written for the first one.

06

Known-exploited? You'll know first

When one of your vendors lands on CISA's Known Exploited Vulnerabilities list, an email is already on its way. No dashboard-watching.

07

Add anything you read

Paste a news site or a YouTube channel and it is parsed into your feed on the next sync, and admins can promote the best ones for everyone.

08

Every bit of it, in your pocket

The same tailored feed, the same notes, built for the phone in your hand between meetings rather than the desk you left behind.

And here it is, on today's real headlines

Nothing below is authored for this page. One story with both halves, then the feed itself: the same headlines read twice, once for the person who has to fix it and once for the person who has to sell around it.

Sample an authored example, until today's stories load

EdgeGate VPN pre-auth bypass now exploited in the wild

Meridian Networks · Meridian PSIRT
Illustrative
The headline everyone gets

A pre-authentication bypass in the EdgeGate SSL-VPN listener allows remote attackers to reach the management plane without credentials. Meridian has published fixed builds for the 4.x branch.

Written by the publisher. Every aggregator has this half.
The note we wrote for you

Any account running EdgeGate at the perimeter has a government patch deadline of 26 August. That deadline is the opening line: patch status, upgrade path, and who owns the appliance.

Written per story, per lens. This is the half you are paying for.
◆ Meridian PSIRT
KEV

EdgeGate VPN pre-auth bypass now exploited in the wild

SummaryA pre-authentication bypass on the SSL-VPN listener, now listed as known-exploited with a 26 August patch deadline.

Meridian Networks#illustrative
◆ Solstice Blog
Vendor Momentum

Identity governance release adds session recording

SummarySession capture on privileged roles, exportable to the usual SIEM sinks.

Solstice Data#illustrative
◆ Archway Status
Deal Triggers

Region-wide IAM policy change lands 1 September

SummaryDefault deny on cross-account role assumption, with a dated cutover every tenant has to plan for.

Archway Cloud#illustrative
◆ Quarterly roundup
Industry News

Threat-actor roundup: the quarter in review

SummaryA broad industry write-up, kept in the feed and ranked below the things you actually run.

Industry news#illustrative

An authored example of how each story is framed, tagged as one. Today's real stories load in its place.

Your analyst briefing

Two emails. Neither one is a link dump.

The daily brief lands at 7am in your own timezone. It opens with a custom-written analyst note: two or three paragraphs on the last 24 hours, drawn from 550+ sources. What actually mattered, how the day sits against the days before it, what was quiet, and what you do differently because of it. Then a personal "For you:" line on your pinned vendors, then the day itself, ranked, known-exploited first and badged.

The Monday weekly is a different document, not a longer one. A week is a different unit of analysis, so it is written as one: what developed across the week, what got worse or better than the week before, which vendors kept coming back, and what is still open going into next week. The sections sit inside that read rather than under it.

Both are written in the voice you choose: a practitioner's, a seller's, or a mix of the two.

Inbox 2 messages
Daily brief
✶OmenPoint

Your OmenPoint briefing - Tue 12 Aug

to you · 07:02 · your local morning
Analyst note · Cyber

Meridian Networks' EdgeGate VPN is the only thing on today's list that changes what you do this morning. CVE-2026-00000 went from a published proof of concept to broad scanning inside twelve hours and was added to the known-exploited catalogue overnight, with a 26 August deadline attached. Two managed service providers have confirmed compromise, which is what turns this from a patch ticket into a question about who else runs your appliances.

Underneath it the day was ordinary. Volume sat close to the recent median and had the same shape as the three days before it: edge devices and identity, very little cloud. Meridian has now been named on five of the last seven days, which usually means a story still unfolding rather than one vendor having a bad week. Ransomware posts were flat against the median, and nothing crossed on the operational technology side at all.

So: if you run EdgeGate, today is the patch, a credential rotation and a log review back to the third. If you sell around it, lead with the deadline rather than the vulnerability, because the deadline is the part your customer's board has already heard about. Solstice Data's identity governance release is the one other item worth reading before a renewal conversation this week.

For you: Meridian Networks (6 stories, incl. known-exploited); Solstice Data (3 stories) moved. Quiet: Archway Cloud.

Known-exploited · your vendors
Meridian Networks: EdgeGate VPN pre-auth bypass now exploited in the wild
Meridian PSIRTCVE-2026-00000KEVpatch by 2026-08-26
Your vendors
Solstice Data: Identity governance release adds session recording
Solstice Blog
Meridian Networks: What the EdgeGate 4.7.2 patch actually changes
Meridian Engineering
Also notable
Extortion crew claims 14 new victims across freight and logistics
Ransom trackerRANSOMWARE
Regulator opens consultation on incident-reporting deadlines
National CERT
Open your feed · Change frequency or switch this off in Settings · Unsubscribe

An illustrative sample: the vendors and the CVE are invented. Subscribers get the real note, written fresh each morning from the live feed.

Monday weekly wrap
✶OmenPoint

Your OmenPoint briefing - Mon 11 Aug

to you · 07:01 · your local Monday
For you

Your corner of the week first: the vendors you follow.

Meridian Networks: 6 stories, e.g. EdgeGate VPN pre-auth bypass now exploited in the wild
Solstice Data: 3 stories, steady week.

Your OmenPoint week · 4 Aug – 11 Aug

2,900 stories crossed the feed this week; here is the week on the tools and on the market. Edge appliances dominated it from Tuesday, and the market moved around identity.

The week in review

The week broke on Tuesday and never settled. EdgeGate started as a single advisory on Monday, drew four outlets on Tuesday and eleven by Thursday, which is the shape of a story that built rather than one that landed. Identity ran quietly underneath it and only surfaced on Friday, when three vendors shipped session recording inside a day of each other.

Known-exploited entries in the week's coverage are up on the week before, and two of them fell due during the week rather than ahead of it. Meridian Networks was named on six days of seven, against two the week before. Ransomware victim posts were down slightly. Cloud stayed thinner than it has been all month.

Exploited in the wild

Actively exploited this week: the patch-now list.

[Meridian Networks] EdgeGate VPN pre-auth bypass now exploited in the wild
EPSS 94%patch-by 2026-08-26
[Archway Cloud] Metadata service SSRF reachable from tenant workloads
EPSS 61%ransomware-linked
The week's big stories

The stories the most outlets agreed mattered.

EdgeGate exploitation spreads to managed service providers (covered by 11 outlets)
Identity vendors converge on session recording (covered by 6 outlets)
Actor watch

Who was loudest on the ransomware side.

Cleaver Bay: 14 mentions
Harrow Group: 9 mentions
Market signals

Market signals from the commercial wire.

Solstice Data: Solstice Data buys a privileged-access startup for an undisclosed sum
Deal triggers

Events that open sales conversations.

Regulator sets a 30-day patch deadline for critical infrastructure operators
Most read on OmenPoint

What readers across OmenPoint actually opened.

What the EdgeGate 4.7.2 patch actually changes
Still open next week

Two deadlines fell due during the week and the coverage suggests plenty of appliances are still unpatched, so treat the EdgeGate list as unfinished rather than closed. The managed service provider angle only appeared on Friday and has not been picked up widely yet, which usually means it runs into next week. Identity vendors converging on the same feature is a competitive story that has not resolved.

Open your feed · Change which briefings you receive in Settings · Unsubscribe

An illustrative sample. Monday's email carries that morning's analyst note on top of this, so the week's read and the day's read arrive together.

Your portfolio, not the whole internet

Pick the vendors you work with; everything else fades away. It's your slice, not everyone's firehose.

Two reads, one story

One switch changes the writing, not the filter. A practitioner's triage line, or the conversation the story opens with a customer.

Signal attached, not implied

Known-exploited flags, severity, exploit probability, patch-by deadlines and the outlets that covered it, on the story itself.

Five minutes, not twenty tabs

One filtered feed replaces the blog / newsletter / social shuffle. Search it, save what matters, share a story in a click.

One plan. No surprises.

The live feed, the briefings and the alerts: all of it, built around your vendors and your regions.

A$5 / month
First 30 days free - cancel anytime
  • Live feed, every 30 minutes: 550+ curated sources, from vendor research and CERTs to exploit feeds, news, podcasts and YouTube
  • Technical / Commercial lens: one switch reframes every story for engineers or for sellers. Commercial cards carry a custom-written talk track: the conversation each story opens with a customer. Actionable technical stories carry a triage line: what is affected, whether exploitation is live, and the first move
  • Story clustering: each story appears once, under one clean headline, with every outlet that covered it stacked behind it
  • English headlines on foreign sources: stories from national CERTs and non-English outlets arrive with a faithful English headline, the original a hover away
  • KEV + EPSS enrichment: known-exploited flags and exploit-probability scores on every CVE
  • Analyst briefing: a daily brief plus a Monday weekly, each opening with a custom-written analyst note in your chosen voice
  • Pinned vendors & regions: your portfolio floats to the top, with a personal "For you" line in every brief
  • Mutes: "see less of" any source, category or signal, respected across feed, briefs and alerts
  • Alerts: KEV hits and saved-search matches, emailed when they happen
  • Add your own sources: paste any news site or YouTube channel and it is parsed into your feed on the next sync
Start your 30-day free trial

Card required to start. We email you before the first charge.
Cancel in one click from Settings - no phone calls, no retention flow.

What happens when the trial ends?

Your card is charged A$5 and the feed keeps flowing. We send a reminder email a few days before, so nothing is a surprise. Cancel before then and you pay nothing.

What happens if I cancel?

You keep access until the end of the period you've paid for. Your interests, sources and saved items stay put, so reactivating later picks up where you left off. You can also export or delete everything from Settings at any time.

Is payment secure?

Payments run entirely on Stripe - your card details never touch OmenPoint's servers.

Stay credible on security - without being a security analyst.

Start your free trial