Blog

The ZeusQA blog

What we built, how it works and where it stops, at more length than a changelog entry. Every post links to the releases it covers.

6 November 20263 min read
- security
- advisories
- free tools
Five free ways to keep up with CVEs, and one that does it for you
NVD published 32 Critical and 104 High CVEs this week. Nobody reads all of that. Here is what we built to make the feed readable: a free CVE page with CISA KEV and EPSS, a page for every CVE and every exploited vendor, a lockfile checker that runs in your browser, a Monday email and a markdown feed your agents can watch.
Read the post: Five free ways to keep up with CVEs, and one that does it for you
3 November 20265 min read
- security
- advisories
The supermarket shelves went empty. The vulnerability was already published.
Eighteen months of attacks on grocers, from Co-op's empty island shelves to the freezers running hot across Europe this week, and what a team that is not a supermarket can learn: the fix was usually out before the attack. ZeusQA's vulnerability watch reads the feed for you.
Read the post: The supermarket shelves went empty. The vulnerability was already published.
31 October 20264 min read
- security
- pull requests
Secrets never reach the reviewer
How ZeusQA's security review now finds keys, tokens and passwords in a pull request with fixed patterns, reports each one on its line without showing it, and masks it before a model reads the diff.
Read the post: Secrets never reach the reviewer
30 October 20264 min read
- pull requests
- run reports
- security
The pull request gets a tester
What ZeusQA shipped on 30 October 2026 for teams without a QA engineer, feature by feature, with what each one does not do yet.
Read the post: The pull request gets a tester