A New Year Begins: Looking Ahead with BaseFortify
As we step into the new year, we’d like to take a moment to thank everyone who follows, supports, and uses BaseFortify. Your feedback, ideas, and real-world use cases continue to shape the platform and guide our priorities.
The year behind us was one of deliberate progress — focused on building solid foundations that allow us to deliver meaningful capabilities in the year ahead.
What We Accomplished Last Year
Over the past year, BaseFortify has steadily evolved into a more complete and practical Vulneravility Management platform:
- Integration of EPSS and the CISA Known Exploited Vulnerabilities (KEV) Catalog, adding exploit likelihood and real-world exploitation context alongside CVE data
- Introduction of a Threat Notification System with user-defined thresholds, helping teams focus on what genuinely requires attention
- Completion of our OAuth-based REST API, enabling secure integrations and automation
- Launch of the Documentation Center, including structured guides and onboarding material
- Deployment of a Support Ticketing System to streamline communication and feedback
- Publication of our first tutorial videos, lowering the barrier for new users
- An important milestone: the successful renewal of our ISO/IEC 27001:2022 certification, now explicitly covering BaseFortify — reaffirming our commitment to security, transparency, and risk management
Each of these steps was taken with a single goal in mind: enabling better, more defensible security decisions.
What We’re Building This Year
With the new year underway, our focus shifts toward usability, collaboration, and clearer decision support:
- Improved onboarding, making it easier to reach value quickly
- Multi-user accounts, enabling shared visibility and collaboration across teams
- Broader advisory coverage through the integration of GHSA and OSV.dev, alongside CVE vulnerabilities
- A redesigned Vulnerable Vendors & Products view, aimed at answering concrete risk and decision questions rather than just listing data
- Expanded and refined attack scenarios for nodes and devices, translating findings into realistic threat paths and actionable mitigations
At every step, the emphasis remains the same: not just identifying vulnerabilities, but explaining why they matter and what can be done about them.
Thoughtful Digital Choices
During December, from the 1st through the 24th, we ran an Advent calendar in which we shared one concrete alternative each day to Big Tech and long-established proprietary vendors across the modern digital stack. Each day highlighted a specific choice — spanning infrastructure, collaboration, security, and operational tooling — all published via our social media channels.
The aim was not to promote wholesale replacement or to reject established technology, but to demonstrate that credible and mature alternatives exist. As a company, we are making similar decisions ourselves, gradually replacing parts of our own stack where better-aligned options are available. We believe our customers may benefit from exploring these choices as well, particularly where transparency, control, and long-term resilience matter.
This approach aligns closely with how we see security evolving. Digital sovereignty and informed choice are no longer abstract concepts; they are practical considerations. BaseFortify supports this way of working by helping organisations understand exposure, prioritise risk, and make deliberate, well-informed decisions.
Onward into the New Year
We’re grateful for the trust placed in BaseFortify and for the conversations that continue to shape its direction. Whether you’re using the platform to understand your attack surface, modernise your environment, or improve your security posture, we look forward to building alongside you in the year ahead.
Here’s to a secure, structured, and thoughtful new year. 🥂
Stay connected via our channels on LinkedIn, Bluesky, Mastodon, and YouTube — and thank you for being part of the BaseFortify journey.
