Hi Reader,

It's been way longer than three months since the last report—we've been taking heaps of your feedback on-board which means even more to write about.

It's two weeks until StripeCon EU and I'm excited to announce that I've been invited as a speaker. The title of my talk is Promoting Stewardship with Metaport & Silverstripe - and while yes, the title names a particular CMS, the talk itself applies to purveyors of all technologies.

Now, it shouldn't be news to you that security vulnerabilities continue to pile on your teams' backlogs via human and LLM vectors. But with Metaport's new vulnerability prioritisation system, teams can prioritise as part of their patch management policies based on real exploit data.

Talking of LLMs, we're planning the MCP tools for Metaport and we're keen to know how you'd interrogate your own portfolios—something like these?

• Which customer sites are affected by CVE-2026-55779?
• How many Drupal 7 projects should we upgrade this quarter?
• Draft me a customer email explaining the risks of remaining on Drupal 7

Hit 'reply' and let us know.
​
Metaport has always claimed multi-tenant capability, but until recently per-organisation secrets management wasn't a reality. That changed with Metaport's support for Hashicorp Vault. And the way we built it means OSS contributors are free to add their own. AWS Secrets Manager anyone?

We're also seeking expressions of interest from companies offering EOL and upgrade support services for referral and listings packages. Hit 'reply' or email hello@dcentrica.com to find out more.

And finally, Metaport SaaS is generally available! 🥳 Head to the we​bsite to get started with a free tier and a generous 30 day trial.

I know I just said 'finally' but if you're visiting Wellington, I'm always keen to meet and learn from new people. Plus, I'm buying the coffee ☕. Get your free one by hitting 'reply'.

And with that, onward with with the report—thanks for reading!
​
—Russ

StripeCon EU 2026 StripeCon EU is the premier European Silverstripe conference and I was lucky enough to be invited to speak later this month. Promoting Stewardship with Metaport & Silverstripe is the talk's title, where I'll provide a brief history and context of Metaport and introduce an ideal vision of support and maintenance to a room full of developers. Do you wish me luck? I may need it. Get tickets

CVE Prioritisation Look on any subreddit with the word "sec" in its title at the moment, and you'll see that CVEs are choking backlogs, leaving teams searching for better ways to act only on what matters. Metaport now imports KEV and EPSS data daily alongside existing CVSS severity scores and applies a scoring algorithm to your dependency CVEs. KEV—Known Exploited Vulnerability—flags that a vulnerability has already been exploited in the wild. While EPSS—Exploit Prediction Scoring System—indicates the likelihood a vulnerability may be exploited in the next 30 days. A customisable scoring algorithm is used to automatically sort by dependencies with corresponding CVEs, as well as providing a visual representation of exploited vs exploitable. Learn more

MCP Tools We're in the planning stages of bringing MCP tools into Metaport. This is likely be a paid feature initially and rolled out to CE users thereafter. I entertained the idea of 3-Dimensional Support in a recent LinkedIn post. Assuming your agency's data is also its moat (against competitors) then leveraging LLM based reasoning over that data and being able to interrogate your portfolio, looks like it could be a huge boon for support planning. But what do you think? What would you use it for? Read post

What kind of agency are you? We published our latest blog post in August, where we dared to postulate that there exists a significant difference between digital agencies that offer true customer support, and those merely keeping the lights on. Have a read, let me know what you think. ​ Read post

From end-of-life expiry and security vulnerability prioritization and notifications, to executive health reports and proactive portfolio-wide search. Metaport is the support and maintenance strategy and planning tool for agencies, studios, and in-house delivery teams.