Support

Open your environment and add the products you actually use — an operating system, a browser, a router, a firewall, a cloud service. Add them by name; CySec matches them against what the sources report.

Add the things you would care about if they were attacked. A short, accurate list is better than a long, aspirational one: everything you add is something CySec can alert you about.

A component is a software library that someone's code depends on — the building blocks inside an application rather than the application itself.

If you do not write software, you do not need any. If you do, you can add them from a lockfile or a bill of materials, and CySec will alert you when one of your dependencies is reported vulnerable.

Almost always because of the notification preset. The default, Follows the Radar, notifies you about anything that reaches the Radar — which is deliberately more than some people want.

Change the preset in Settings to something quieter, or narrow your environment to the products you genuinely run. Both reduce the volume straight away.

It means: you run it, and it is being attacked now. CySec only uses that tier for something in your environment that a credible source has confirmed to be under active attack in the last two weeks, and that you have not already dealt with.

The other tiers are Review today (yours, ranked urgent, not confirmed under attack), Changed since last view (something about it moved since you last looked) and Watching (near you, but not confirmed as yours).

No. CySec tells you what is publicly known about problems that affect what you run. It does not patch anything, block anything or protect anything. You — or the person who looks after your systems — act on what it shows you.

Public sources, read every few minutes: CISA's Known Exploited Vulnerabilities list, the National Vulnerability Database, the CVE programme, GitHub's advisory database, Microsoft's Security Update Guide including Patch Tuesday, vendor advisories and security news.

Every item links back to its source so you can read the original. Public sources are sometimes wrong and sometimes late; where CySec knows that, it says so on the item.

Only the product names reach our server, and only while you have environment sync on — so that the server knows which alerts to push to you. Never version numbers, never your components, never your notes.

Turn environment sync off and your phone does all the matching itself; the server then knows nothing about what you run. The full detail is in the privacy policy.

Ask CySec answers questions about any item in plain language. It runs on your phone using Apple Intelligence, so by default nothing leaves the device.

You can optionally connect your own Claude account with your own API key for longer answers. That does send text to Anthropic — but only the text you approve in the preview the app shows you first, and only once you have turned the feature on. It is off by default.

Widget: touch and hold the Home Screen, tap Edit then Add Widget, search for CySec and pick a size.

Watch app: it installs with the iPhone app. If it has not appeared, open the Watch app on your iPhone, scroll to CySec and turn on Show App on Apple Watch.

Lock Screen incident: when something is live, CySec shows it on the Lock Screen and in the Dynamic Island automatically. Allow Live Activities for CySec in iPhone Settings if you do not see them.

On your iPhone: Settings → your name → Subscriptions → CySec → Cancel Subscription.

The subscription renews unless you cancel at least 24 hours before the current period ends. Refunds are handled by Apple, not by us — request one at reportaproblem.apple.com.

The app has a Report a problem button in Settings, which is the fastest route because it tells us which item you were looking at.

Or email [email protected]. If it is about a specific item, the CVE identifier or the headline helps.