Ask HN: What do you use to track new vulnerabilities in your stack?

I’m building a notifications service for CVEs (https://hacktrack.info) and I’m curious to know what tools, methods, or platforms you are currently using to track new CVEs.

Do you rely on feeds, manual searches, or automated systems? Are there any pain points you've encountered in keeping up with new vulnerabilities?