workspace / analysis · 122 tracked

Product Analysis

Diff security patches between versions of a tracked product. Pick one of the four flows below — single, bulk, CVE-driven, or Wordfence intelligence — and let the pipeline work.

Manage products + Add to library
01

Single & Bulk diff

version-pair → ai pipeline
single diff
Run AI pass on each diff hunk to triage vulnerability impact.
bulk comparison
3 → N vs N-1, N-1 vs N-2, N-2 vs N-3.
Per-pair AI pass · same model and parameters as single mode.
Select a product and count to preview comparisons.
    Tracked · 122 Manage →
    02

    CVE-driven bulk

    cpe → version pairs from cve metadata
    cve-driven bulk

    Input a CPE plus a CVE count; PatchLeaks resolves which version pairs to test by reading which versions fixed which CVEs. No need to pre-select versions yourself.

    Common Platform Enumeration identifier.
    0 = all matching CVEs.
    Per-task AI pass against the diff for each version pair.
    Click "Preview tasks" to see which version pairs will be tested.
    Tracked · 122 Manage →
    03

    Wordfence intelligence

    cwe + year → analyzed plugin tasks
    Wordfence CVE Analysis filtered by cwe class & year

    Analyze WordPress plugins driven by Wordfence vulnerability intelligence. Filter by CWE type and CVE year to discover and analyze vulnerable versions.

    Optional · leave empty for all CWE types.
    Max plugins to analyze per run.
    Skip CVEs that already produced an analysis record.
    Per-plugin AI pass on the diff hunks.
    Click "Preview vulnerabilities" to see which plugins will be analyzed.