Getting Started with FixTheCVE: Monitor Your Server Vulnerabilities in 5 Minutes

FixTheCVE makes it easy to know exactly which vulnerabilities affect your servers. No agents to install, no complex setup. Here's how to go from zero to full CVE monitoring in under 5 minutes.

Step 1: Create Your Free Account

Head to fixthecve.com/register and create your account. You'll get:

• Unlimited CVE database access (50,000+ CVEs and growing)
• Dashboard to manage your systems
• Email alerts when new CVEs affect your packages
• CVSS scores, EPSS data, and CISA KEV status for every CVE

Step 2: Download the Scanner

After logging in, go to Get Scanner. Download the lightweight scanning script for your operating system:

Linux (Ubuntu, Debian, RHEL, Rocky, Alma, etc.)

# Download the scanner
curl -O https://fixthecve.com/download-scanner/linux

# Make it executable
chmod +x fixthecve-scanner.sh

# Run your first scan
sudo ./fixthecve-scanner.sh

Windows

# Download via PowerShell
Invoke-WebRequest -Uri "https://fixthecve.com/download-scanner/windows" -OutFile "fixthecve-scanner.ps1"

# Run the scanner (as Administrator)
.fixthecve-scanner.ps1

The scanner reads your installed packages and sends the list to FixTheCVE for matching. No passwords, no credentials, no persistent agent.

Step 3: View Your Results

After scanning, go to your Dashboard. You'll see:

• System overview: Each scanned server with its OS, package count, and vulnerability status
• CVE breakdown: Critical, High, Medium, and Low vulnerabilities
• Security score: An overall security rating for each system
• Remediation steps: Click any CVE to see exactly how to fix it

Step 4: Set Up Automated Scans (Optional)

To scan automatically on a schedule, add a cron job:

# Scan every 6 hours
0 */6 * * * /path/to/fixthecve-scanner.sh >> /var/log/fixthecve-scan.log 2>&1

This way, when you install or update packages, FixTheCVE knows about it within hours.

Step 5: Enable Email Alerts

Go to Alert Settings to configure:

• Instant alerts: Get emailed within minutes when a new critical CVE affects your packages
• Daily digest: Summary of all new CVEs that affect your systems, delivered each morning
• Weekly roundup: A weekly summary of your security posture and any new threats

What Makes FixTheCVE Different?

Truly Agentless

Unlike tools that install background processes on your servers, FixTheCVE only runs when you tell it to. The scanner is a single script that runs, reports, and exits. Zero performance impact, zero attack surface added.

Real-Time CVE Intelligence

Our database syncs with NVD hourly and enriches every CVE with AI-powered analysis, EPSS exploit probability scores, and CISA KEV data. You don't just see a CVE ID—you see actionable fix instructions.

Package-Level Matching

We match CVEs against your exact installed packages and versions. No false positives from software you don't have. No missed vulnerabilities because of incomplete scanning.

Ready to start? Create your free account and run your first scan in under 5 minutes. Know exactly where you stand.