Choose how to follow security updates
Use email, RSS, API, or an agent without confusing public updates with private project alerts.
Read the public feed without an account
The public feed contains sourced advisories and collection status. Search for a package or advisory, then filter by severity or known exploitation. Public feed results are not matches against your repositories.
RSS and the public read API expose public intelligence only. They do not include private inventories, findings, or recorded response notes.
Subscribe with a verified address
Choose a topic and enter an email address on the feed page. Open the confirmation email and explicitly confirm the subscription. You do not need a Wisesama account. Opening a link alone does not activate a subscription.
The digest cadence is daily at 09:00 UTC when delivery is enabled and scheduled. An edition contains eligible new or materially changed advisories; an unchanged collection time does not make an item new. The subscription form shows whether email is available in the current deployment.
Manage public email separately
Use the preference link in an edition, or request a management link from the feed page, to change topics or unsubscribe. Unsubscribing from the public digest does not change private project notification settings.
Private project alerts require a signed-in account and a verified account address. Configure those inside workspace notifications. Provider acceptance means an email was accepted for sending; it does not prove arrival or reading.