Vulnerability monitoring for what you run

Tell us what you run. We’ll show you what’s exposed.

Ovesion checks published vulnerabilities against the exact versions you run and turns them into a short list of fixes, each with how fast to apply it.

  • New and changed CVEs every 15 minutes
  • Four public decisions, no 0 to 100 score
  • The vendor’s own data first
  • Priced in rand

IMMEDIATEFix 01 · Head office

Upgrade Fortinet FortiOS (FortiGate) 7.4.2 to later than 7.4.12

Closes 79 CVEs. 7 are being exploited.

From the demo account

The problem

The feed doesn’t know what you run.

You get the whole feed.

Thousands of new CVEs every month.

Names don’t match.

The same product, different names in different records.

Mentions aren’t exposure.

A CVE naming your product may not affect your version.

Fewer than 1 in 5

new CVEs published in the 30 days to 10 October 2026 had NVD product data on that day. Ovesion reads vendor and CNA records too, so it doesn’t depend on NVD.

Source: Ovesion analysis of NVD data, 10 October 2026Background: NIST, April 2026

01 · Tell Ovesion what you run

Run the collector, or type it in.

A short script reports your servers’ software once a day. Type in the rest.

Collectors for Linux and Windows

A readable script, never an agent. See supported systems

Everything else, typed in

Firewalls, appliances and applications, by product and version.

Oracle Linux is next

Setting up the collector for a Windows server in the app
The real app, demo account · click to enlarge

02 · Get a fix plan

A short list of fixes, not a CVE list.

  1. One row per fix.

    Each says what to do, how many CVEs it closes and how many are being exploited.

  2. Open a fix to see why.

    Six plain inputs: Act, Exploited now, Likely next, Automatable, Reach and Job size.

  3. One public decision.

    The CERT/CC SSVC method gives one of four decisions. No opaque score.

The real fix plan in the app, with fix 01 open

Built from the demo account’s real fix plan. Click the screen to see it in the app.

03 · Try it

How urgent is this fix?

Flip the four inputs. It’s the same table the app uses, and only 1 of the 36 combinations is Immediate.

Is it being exploited?
Where does it run?
Can an attack be automated?
How critical is the system?

Ovesion’s decision

Immediate

Act now: put everything into applying the fix.

This is the demo account’s FortiOS fix: exploited, internet-facing, automatable and business-critical.

CERT/CC SSVC deployer model. Reach and criticality come from what you declare.

04 · Honest

Honest about what it can’t decide.

Can’t confirm lists what the records don’t settle, and who can settle it. Ovesion never says a system is safe.

Can't confirm: what the records don't settle, grouped by who can settle it
The real app, demo account · click to enlarge

05 · Stay informed

An alert when a fix becomes urgent.

An email when a fix becomes urgent, with the reason, and a correction if an answer changes.

Ovesion

Ovesion: 1 fix needs action now

The urgent-fix email in a dark mail app: 1 fix needs action now, with the reason
The real email, as a dark-mode mail app shows it · click to enlarge

Why Ovesion

Answers you can check.

Version-level answers

Not keyword matches. Ovesion applies version rules per vendor family.

The vendor’s word first

Microsoft, Red Hat, Cisco, Fortinet, Oracle and others, then NVD.

Every 15 minutes

New and changed CVEs are collected every 15 minutes.

Your data kept apart

The database itself keeps each customer’s data apart. Card details go to PayFast and never reach Ovesion.

Pricing

What would it cost for you?

Each server a collector reports, and each technology you type in, is one machine. Monthly, in rand, no VAT.

Pro

Up to 100

Pro covers up to 100 machines: 50 included, then packs of 25 at R399 a month.

Enterprise

R2,499 a month

150 machines included, shared by up to three environments.

Questions

Common questions before you sign up.

How long does setup take?

Typing in a technology takes about a minute. You give the product, the version, whether it faces the internet and how critical it is. For Linux and Windows servers, you download the collector in the app, check its fingerprint and run it. From then on it reports once a day.

What’s in the free trial?

We set up trials on request. You get Enterprise for 30 days with collectors included, and you don’t need a card. When the trial ends, your account goes back to Free and your environments are kept until you subscribe.

Is this a scanner? Do you need access to our systems?

No. Ovesion doesn’t scan your network and doesn’t install an agent. It works from the technologies you type in and the software list the collector reports. The collector is a readable script you run yourself, and its token can only upload.

Which systems does the collector support?

On Linux, Red Hat Enterprise Linux 8, 9 and 10, with Oracle Linux coming next. On Windows, Windows Server 2016 to 2025 and the Windows 10 and 11 versions Microsoft still updates, including SQL Server and Exchange. You type in firewalls, appliances and anything else without a collector, and you can ask for a new collector in the app.

How is our data handled?

We use your data only to run Ovesion for you. We don’t sell it, use it for advertising or send marketing emails. It’s stored in the European Union, and the database itself keeps each customer’s data apart. Card details go to PayFast and never reach us. To close your account, email support@ovesion.com. You can read more on our Security page and in our Privacy Policy.

How do I cancel?

In the app, on the Subscription page. Your plan keeps running until the end of the month you’ve paid for.

Stop searching feeds. Start knowing what’s actually exposed.

No agent. A readable script you run yourself.

Early access

You won’t be customer #10,000.

You deal directly with the people who build Ovesion. Every product request is reviewed by an engineer, and your feedback shapes what gets built next.