NaNotecyber
Menu
Sign in

Cybersecurity platform

Exploited in the wild, mapped within the hour.

NaNote Cyber turns public threat feeds into a live operations picture, and gives the governance side a workspace to act on it. One login, several modules, no vendor lock-in on the data.

Open Threat IntelRequest access

Right now

57m

Exploited CVEs added · 7d11
Ransomware claims · 7d99thegentlemen · 18
Botnet C2 online1
SANS InfoconGREEN

Latest exploited

  • CVE-2026-86060MikroTik RouterOS09-10
  • CVE-2026-67277MikroTik RouterOS09-10
  • CVE-2026-87491Google Chromium V809-09
  • CVE-2026-20079Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management09-09
  • CISA KEVlive
  • EPSSlive
  • ransomware.livelive
  • Feodolive
  • SANS ISClive
  • RSSlive
FijiTanzaniaW. SaharaCanadaUnited States of AmericaKazakhstanUzbekistanPapua New GuineaIndonesiaArgentinaChileDem. Rep. CongoSomaliaKenyaSudanChadHaitiDominican Rep.RussiaBahamasFalkland Is.NorwayGreenlandFr. S. Antarctic LandsTimor-LesteSouth AfricaLesothoMexicoUruguayBrazilBoliviaPeruColombiaPanamaCosta RicaNicaraguaHondurasEl SalvadorGuatemalaBelizeVenezuelaGuyanaSurinameFranceEcuadorPuerto RicoJamaicaCubaZimbabweBotswanaNamibiaSenegalMaliMauritaniaBeninNigerNigeriaCameroonTogoGhanaCôte d'IvoireGuineaGuinea-BissauLiberiaSierra LeoneBurkina FasoCentral African Rep.CongoGabonEq. GuineaZambiaMalawiMozambiqueeSwatiniAngolaBurundiIsraelLebanonMadagascarPalestineGambiaTunisiaAlgeriaJordanUnited Arab EmiratesQatarKuwaitIraqOmanVanuatuCambodiaThailandLaosMyanmarVietnamNorth KoreaSouth KoreaMongoliaIndiaBangladeshBhutanNepalPakistanAfghanistanTajikistanKyrgyzstanTurkmenistanIranSyriaArmeniaSwedenBelarusUkrainePolandAustriaHungaryMoldovaRomaniaLithuaniaLatviaEstoniaGermanyBulgariaGreeceTurkeyAlbaniaCroatiaSwitzerlandLuxembourgBelgiumNetherlandsPortugalSpainIrelandNew CaledoniaSolomon Is.New ZealandAustraliaSri LankaChinaTaiwanItalyDenmarkUnited KingdomIcelandAzerbaijanGeorgiaPhilippinesMalaysiaBruneiSloveniaFinlandSlovakiaCzechiaEritreaJapanParaguayYemenSaudi ArabiaAntarcticaCyprusMoroccoEgyptLibyaEthiopiaDjiboutiUgandaRwandaBosnia and Herz.MacedoniaSerbiaMontenegroTrinidad and TobagoS. SudanUS · 33 ransomware claimsBR · 6 ransomware claimsAR · 4 ransomware claimsCA · 4 ransomware claimsCO · 3 ransomware claimsDE · 3 ransomware claimsGB · 3 ransomware claimsIN · 3 ransomware claimsIT · 3 ransomware claimsPH · 2 ransomware claimsKR · 2 ransomware claimsES · 2 ransomware claimsPT · 2 ransomware claimsFR · 2 ransomware claimsRU · 2 ransomware claimsZA · 2 ransomware claimsJP · 1 ransomware claimsBA · 1 ransomware claimsRS · 1 ransomware claimsAT · 1 ransomware claimsNL · 1 ransomware claimsSG · 1 ransomware claimsUA · 1 ransomware claimsEG · 1 ransomware claimsAU · 1 ransomware claimsCL · 1 ransomware claimsTR · 1 ransomware claimsDK · 1 ransomware claimsPE · 1 ransomware claimsGE · 1 ransomware claimsSK · 1 ransomware claimsUS · 1 C2 servers

31 countriesRansomware claims in the last 7 days and botnet C2 servers online, by country.

Open the full view →

Modules

One platform, built module by module.

Each module stands on its own and shares the same login, language toggle and design. Status is stated plainly.

Live

Threat Intel

A live operations view over public feeds: exploited CVEs with exploit probability, ransomware claims by country and sector, botnet command servers, the most attacked ports, and the headlines behind them.

  • CISA KEV joined with FIRST EPSS
  • World map with ransomware and C2 layers
  • Refreshes every 15 minutes, degrades gracefully
  • Public JSON API
Open
Available

GRC

An ISO/IEC 27001:2022 workspace you can run a real programme in: all 93 Annex A controls, gap assessment, a scored risk register, and a Statement of Applicability you can export.

  • ISO 27001 available now
  • NIST CSF 2.0 and CRAF in design
  • Invite-only
Open
In design

AI Red Teaming

Adversarial testing of AI systems and AI-assisted testing of everything else: prompt-injection suites, model-behaviour probes, and attack-path simulation.

  • LLM application testing
  • Attack-path simulation
Open
In design

Training and Consulting

Certification preparation, tabletop exercises, and hands-on ISMS implementation support from a practitioner.

  • ISO 27001 Lead Implementer track
  • Incident tabletop exercises
Open

How it fits together

  1. 01

    Observe

    Threat Intel watches what is being exploited and who is being hit, so priorities come from evidence rather than headlines alone.

  2. 02

    Govern

    GRC turns that into control status, treated risks and an auditable Statement of Applicability.

  3. 03

    Test and train

    Red teaming checks the controls hold; training makes sure the people do.

Access

Request access

The GRC workspace and everything behind sign-in is invite-only. Leave an email and a line about your organisation; approvals are manual.

Already approved? Sign in