One script tag puts the latest critical CVEs on any site you run. It updates itself, works in dark or light themes, and costs nothing.
Rendered below by the exact same script you would embed:
<script src="https://ingeniousai-security-checks-mirror-0e97b6.gitlab.io/cve-ticker/ticker.js"></script> <div class="ingeniousai-cve-ticker" data-theme="dark" data-limit="5"></div>
Put the <div> exactly where the ticker should appear on the page. The <script> can go anywhere, once per page. You can place the div multiple times on one page; every instance renders.
| Attribute | Values | Default |
|---|---|---|
data-theme | dark or light | dark |
data-limit | 1 to 10 items | 5 |
Example, light theme with 8 items:
<div class="ingeniousai-cve-ticker" data-theme="light" data-limit="8"></div>
The CVE data is baked into ticker.js at build time (see feed.json, last updated 2026-10-16). Every embed loads the script from our mirror, so your site automatically shows the latest published data. There is nothing to update on your side, ever. Current feed covers 8 critical October 2026 CVEs, each linking to a free exposure check.
Safe by design: the script never uses document.write, sets no cookies, and phones home to nobody. If our mirror is ever unreachable, your page is unaffected and the ticker area simply stays empty. It never breaks a host page and never displays an error.
Yes, on unlimited sites. No signup, no API key, no visitor tracking.
No. The small "Powered by Ingenious AI" credit is the only cost of the free ticker and must stay in place.
Use the dark/light theme and item limit. The credit line and CVE links must remain visible and clickable.
Only critical CVEs we have verified exposure checks for, newest first. Each entry links to the full check on our mirror.
The CVE ticker is a free embed that turns cybersecurity news into a live headline feed for your own site: paste one script tag and your visitors see the newest critical CVEs, each linked to a free exposure check, with no signup, no API key, and no tracking of your visitors at all.
The ticker costs $0 to embed, and its current feed covers 8 critical October 2026 CVEs, each linking to a free exposure check (Ingenious AI).
Built and maintained by Ingenious AI. Last updated . Feed: feed.json (updated 2026-10-16).
Yes. Paste the snippet on as many sites as you like. There is no signup, no API key, and no tracking of your visitors.
The CVE data is baked into ticker.js at build time and refreshed whenever we publish a new version. Because embeds load ticker.js from our mirror, your site always shows the latest published data with no action from you.
No. The script is fully defensive: if anything fails, your page is untouched and the ticker area simply stays empty. It never shows an error and never throws into your page.
No. The small “Powered by Ingenious AI” credit is the only cost of the free ticker and must stay in place. It is part of the embed, not optional.
A CVE checker is a free tool that tells you whether your software is affected by a published CVE — a publicly known cybersecurity vulnerability. It compares your version or configuration against the official advisory and gives you a patched, vulnerable, or unknown verdict in about 30 seconds.
Find your exact version number, then compare it against the vendor's security advisory or the NVD entry for the CVE. The fastest way is a CVE checker built for that product: paste your version and get an instant verdict against the published version tables.
You are affected when you run a vulnerable version and the vulnerable component is reachable or enabled — for example, open sign-ups, an exposed management port, or a vulnerable app installed. A CVE checker gives you the version verdict in seconds; the advisory's conditions tell you whether that verdict means real exposure.