Patch status your security team can file
When a critical vulnerability is published, your security and third-party risk teams want two answers quickly: does it affect us, and when will it be fixed? Your auditor or supervisor will want to see that answer in writing, on a schedule. And the pace is picking up. On 31 August 2026 the Financial Stability Board told G20 finance ministers to expect more vulnerabilities and faster patching, driven by frontier AI. Around 66,000 vulnerabilities are forecast for 2026, 37% more than in 2025.
What you get
Every commitment below is in your contract.
Every working morning
We check every supported version against newly published critical vulnerabilities.
Within 1 working day
You hear whether it affects you, even when it doesn’t.
Within 3 working days
You get a mitigation, where one is technically possible.
Within 10 working days
You get a tested fix.
There's no cap on the number of critical vulnerabilities we handle in a year, and no day rate.
Every month
We scan every supported version in full. Every finding rated high or medium is fixed or mitigated. At the close of each cycle you get a signed Vulnerability Remediation Report showing what we found and what we did about it.
What changes for you
What's included
Standard support doesn't change. Enhanced Security is an annual upgrade, priced on your estate.
Available for all versions of the Wordwatch Compliance Platform.
Questions
Our policy needs critical vulnerabilities handled faster than monthly. Does Enhanced Security meet that?
Critical vulnerabilities have their own track, outside the monthly cycle. We check for newly published critical vulnerabilities every working morning. If a critical vulnerability affects your version, you'll know within one working day. Where a mitigation is technically possible, you'll have it within three working days. A tested fix follows within ten working days. The monthly cycle is the routine assurance that covers high and medium findings as well.
We already send Wordwatch an annual security questionnaire. What does Enhanced Security add?
A questionnaire gives you our answer on the day we complete it. The Vulnerability Remediation Report records what our scan found in each monthly cycle and what we did about it, dated and signed by the person accountable. You get monthly reports.
Do we need Enhanced Security?
You don't have to. Standard support stays exactly as it is. Enhanced Security writes the patch timetable into your contract and gives you signed evidence on a schedule. It's built for organisations facing supplier assurance reviews or third-party risk attestations. If that isn't you yet, you can move later.
What's in a Vulnerability Remediation Report?
Each report covers one month. It records what the full scan found across the Wordwatch versions in scope and what we fixed or mitigated. You can request a sample.
Which versions are covered, and what costs extra?
Enhanced Security covers named Wordwatch versions, on the basis that you run the current version or the one before it. We quote separately for changes you request outside the cycle, for rejoining the cycle after a missed update, and for responding to a third-party scan.
Talk to us about Enhanced Security
We'll walk you through the cycle and show you a sample Vulnerability Remediation Report.