We have added a secure link sharing feature to Tacit Vulnerability Statements. While our platform already automates notifications to your "Watchers" via email and SMS, this update provides a manual, direct way to broadcast specific statements to stakeholders who may not be active on the platform yet or are requesting information on a specific campaign or CVE.

How it Works

You can now access a unique, secure URL for any statement. This link acts as a live reference point that can be shared by customer-facing teams, embedded in support tickets, or posted on external communication channels.

• Centralized Data: The statement remains hosted within Tacit and is still accessible from your Publisher page or your Watchers’ feed. When someone clicks the link, they land directly on your Publisher page with a pre-set filter for that specific statement.

• Protecting Engineering Focus: During a crisis, security and engineering teams are often interrupted by internal support or sales teams seeking updates for customers. Providing a shareable "single source of truth" allows these teams to reassure clients independently, without pulling developers away from remediation.

• Flexible Distribution: This is an additional layer to our existing notification system, designed for high-visibility situations where you need to reach stakeholders who aren't on your primary Watcher list or who may have missed the initial notification.

Let your team focus on what matters

The shift toward faster, more transparent communication is driven by a clear industry trend. Data from Zerodayclock.com shows that the Mean Time-to-Exploit (TTE), the gap between a CVE disclosure and an actual attack, is dropping rapidly.

In 2021, the average window was nearly a year; by 2026, it has collapsed to approximately 1.6 days.

Additionally, because modern security tech scans for vulnerabilities almost instantly, and major media coverage of campaigns like Shai Hulud or Log4shell spreads quickly, your clients are often aware of a CVE as soon as your team is. This creates a "noise" problem where silence can trigger panic. Especially for on-premise setups, providing a clear, shareable statement is an ethical necessity to help your partners secure their own environments before that 48-hour exploit window closes.

Tacit is a platform built to streamline vulnerability communication. We help software publishers and security teams manage their disclosure process by connecting them directly to their Watchers: the clients and partners who need real-time, actionable data to stay secure and confident in your product.