Measure and track the exposure window for vulnerabilities on your website

For businesses in the real estate and property industry, the website is often the one public-facing system that sits outside the controls applied to everything else. Our Vulnerability Tracker shows the vulnerabilities disclosed across the technologies your website runs on, and how many could be exploited remotely.

Vulnerability tracker

Set the clock

Pick a date

Last pentest: DD / MM / YYYY

XX:XX:XX UTC

In the last 30 days:

Sep XX, XXXX → Oct XX, XXXX · 30 days of public disclosure

CVEs were published

- MIN

Average time between CVE disclosures

Figures are drawn from public vulnerability data and updated once a day. The Vulnerability Tracker does not scan any website and does not store anything entered.

XX:XX:XX UTC

Exposure cascade

Everything published, narrowed to what an attacker can actually reach and exploit

CVEs published

Externally exploitable

Added to CISA KEV

Externally exploitable KEVs

Over 30 days, - vulnerabilities in internet-reachable systems were discovered. Of these, - are known to be exploited by threat actors.

Filter by technology

Explore the number of exposures in the last 30 days by vendor, application or service.

- CVEs mention “” · - externally exploitable · - in CISA KEV

CVE	Severity	Flags	Date	Description
		Network KEV
No CVEs match “”.

Want to know what’s exposed on your site?

Schedule a consultation

Top exposures exploited

The most critical exploited exposures in the last 30 days

No critical exploited vulnerabilities in the last 30 days.

The importance of website security in the real estate and property sector

A compromised website can quickly damage the trust that clients place in the business, which can impact transactions, relationships and long-term growth.

The top WordPress vulnerabilities in 2026: what the latest Wordfence data tells us

Reputation and client trust

Property businesses rely on reputation to win clients and instructions, and a compromised website is visible to clients, investors and the wider market in a way most security incidents are not.

Client and investor data

Websites and portals can hold personal and financial information from clients and investors, which carries significant data protection obligations.

Regulatory obligations

Many property businesses operate under anti-money laundering and data protection regulations, so a weakness in the website can put regulatory standing at risk.

Investor and stakeholder confidence

For property investors and listed real estate businesses, the website is a key channel for investor communications, so a compromise can undermine confidence well beyond the site itself.

What an optimal patching posture looks like for real estate and property websites

Websites need to be held to the same vulnerability management standard as any digital asset. That means monitoring vulnerability feeds at least daily, patching to a fixed monthly baseline and addressing high and critical vulnerabilities as soon as they are disclosed.

Our Cyber Shield SLA delivers this standard across every site we manage, with real-time vulnerability monitoring and between-cycle patching at no additional cost, giving security teams records they can include in their wider assurance reporting.

Cyber Shield SLA

Websites typically sit outside a business’s security perimeter

Security investment in real estate and property is rightly focused on core business systems and the platforms that handle transactions and client data, while the public website is often managed by marketing teams or an external agency.

Websites typically run third-party code, represent the business publicly and could host client or investor portals, so an unpatched vulnerability there carries reputational and regulatory consequences out of proportion to its technical scope.

SoBold’s Vulnerability Tracker brings disclosures across the technologies websites run on into view, giving IT and security teams the visibility to bring the website into the same vulnerability management programme as the rest of the business.

What the Vulnerability Tracker can't show

Code Audit service

The Vulnerability Tracker counts disclosures across the selected technologies, while a code audit checks what is actually installed on a site against them.

Code Audits

FAQs on the Vulnerability Tracker data

Get in touch with Will for more answers.

020 3137 8596 hello@soboldltd.com

Vulnerability data is published by technology rather than by sector, so the tracker filters by default to technologies commonly found across energy and infrastructure web platforms. Clearing the filter shows every disclosure in the selected date range.

The tracker shows disclosures across selected technologies rather than the software running on a specific site.

A code audit or penetration test identifies whether those vulnerabilities affect a particular platform.

Message sent

Thanks for reaching out. We’ll be in touch within one working day to confirm your .