If you run a Cisco/Windows/VMware estate, your morning vulnerability check probably looks like mine used to: open the CISA KEV catalog, open the MSRC update guide, open Cisco's software download pages to see if the gold-star release moved, skim a couple of news feeds, and try to remember what version of FTD is actually deployed. Twenty minutes of tab-juggling, most of it re-reading things that didn't change overnight.
This is a tutorial for automating that into a single dated HTML report that lands before you sit down. The tool is called sec-watch. It's around 600 lines of plain Node.js, no npm dependencies, and it answers three questions every morning:
Is anything in my stack being actively exploited? (CISA Known Exploited Vulnerabilities catalog)
What did the latest Patch Tuesday drop on my Windows Server and Configuration Manager estate? (Microsoft MSRC CVRF feed)
Am I drifting off Cisco's recommended releases? (gold-star compliance for FTD, FMC, ISE, ASA, Secure Client)
