Tell us what you run. We’ll show you what’s exposed.Tell us what you run.We’ll show you what’s exposed

Minutes. Search the catalogue, pick the product and enter the exact version you run. First findings usually appear within a few minutes. There’s nothing to install.

Our team sets up trials on request: Enterprise for 30 days, with no card needed. When the trial ends, your account returns to Free, and your environments and history are kept.

No. A scanner tells you what’s installed. Ovesion tells you which of the world’s disclosed vulnerabilities matter for what you run, and how urgently. You describe your technology stack (vendor, product and version) directly in Ovesion. There’s no agent, and we never request infrastructure credentials, network access or scanning permissions. Ovesion doesn’t discover assets: it knows only what you add.

New CVEs come from NVD, which Ovesion checks every 15 minutes. NVD no longer adds product data to most new CVEs, so Ovesion doesn’t rely on it alone. It also reads the CVE records published by the organisations that assign CVEs, and security advisories from a growing list of software vendors. CISA’s list of actively exploited vulnerabilities is checked on every run, and FIRST EPSS exploitation scores are updated daily. Each finding shows which sources it came from, and the app shows when the NVD, KEV and EPSS data last updated.

Yes, on Pro and Enterprise: one email digest when a new CVE is confirmed against the exact versions you run, at most four times a day. You won’t get every CVE that mentions your vendor, or a flood of old CVEs when you add a technology. If Ovesion’s own data changes a verdict, the next digest tells you what changed and why. Unsubscribe from any digest.

Not yet. Technologies are added one at a time from the catalogue.

Enterprise accounts can keep up to 3 separate environments, for example a head office, a production site or a client, each with its own technology stack, pressure scores and threat list. Today each account has one sign-in. Shared access, so several people in your organisation can work on the same environments, is planned. If your team needs it, tell us when you request a trial.

We use your data only to run Ovesion for you. We don’t sell it, we don’t use it for advertising or profiling, and we don’t send marketing emails. Your technology stack and environment data is stored in the European Union, and each customer’s data is kept separate by the database itself, not only by the app. Access is limited to the small team that runs and supports the service. To close your account or delete an environment’s data, email support@ovesion.com. Our Privacy Policy has the full details, including the providers we use.

Plans renew automatically until cancelled. To cancel or change plan, email support@ovesion.com. If you cancel, your account returns to Free and your environments are kept.