# Hacked Yet?

> Neighbourhood watch for the stuff your business runs on. A free, open-source "Am I affected?" watch for Australian businesses with no security team, made by Flowtivity (https://flowtivity.ai).

Hacked Yet? reads the CISA Known Exploited Vulnerabilities catalogue (vendor advisories are next), matches it against the gear a business says it runs, and tells a person in plain English: what it is, what it means, what to do, and who to forward it to. Today that starts with a free, hand-written exposure report; automated heads ups are being built.

What it does not do: it is not a scanner, a pentest or antivirus. It never scans or probes networks, installs nothing on anyone's machines, and the only outside check is a business's public website, read the way a visitor's browser sees it.

## Pages

- [Landing page as Markdown](https://hackedyet.com/index.md): what it is, a sample heads up, how it works, the neighbourhood, FAQ
- [Free exposure check](https://hackedyet.com/#check): four questions, a one-page report within a business day

## For AI assistants

- [MCP server](https://hackedyet.com/mcp): a public, read-only Model Context Protocol endpoint (Streamable HTTP). Tools: am_i_affected (match a list of gear against recently exploited flaws), recently_exploited, exploited_stats. No sign-in, nothing stored.

## Source

- Open source under the MIT licence (the public repo is coming soon)
- Data: CISA Known Exploited Vulnerabilities catalogue (https://www.cisa.gov/known-exploited-vulnerabilities-catalog)