Tell us what you run. We’ll show you what’s exposed.Tell us what you run.We’ll show you what’s exposed

Minutes. Pick the products you run from the catalogue and enter their exact versions, or run the collector on a Red Hat Enterprise Linux 8, 9 or 10 server and it reports every installed package. First findings for a typed product usually appear within a few minutes.

Our team sets up trials on request: Enterprise for 30 days, with no card needed. A trial can’t invite team members or buy add-ons. When the trial ends, your account returns to Free, and your environments and history are kept.

No. Ovesion doesn’t scan your network, and never asks for network access, infrastructure credentials or scanning permissions. It tells you which of the world’s disclosed vulnerabilities matter for what you run, and how urgently. You tell it what you run in one of two ways. Type the vendor, product and version. Or, on a Red Hat Enterprise Linux 8, 9 or 10 server, run Ovesion’s collector: a short shell script you can read before you run it. It lists the installed packages and a few system facts and sends them to Ovesion over HTTPS, once or daily, or saves a file you upload in the browser. It never installs or changes packages, and never sends IP addresses, user names or file contents. A Windows collector is in progress.

New CVEs come from NVD, which Ovesion checks every 15 minutes. NVD no longer adds product data to most new CVEs, so Ovesion doesn’t rely on it alone. It also reads the CVE records published by the organisations that assign CVEs, and security advisories from a growing list of software vendors. CISA’s list of actively exploited vulnerabilities is checked on every run, and FIRST EPSS exploitation scores are updated daily. Each finding shows which sources it came from, and the app shows when the NVD, KEV and EPSS data last updated.

Yes, on Pro and Enterprise: an email when a fix becomes urgent, because it needs action now or before your next maintenance window. Each person gets one email with a row for each fix, not an email for every CVE. If Ovesion’s answer on a finding changes, a notice tells you what changed. You can unsubscribe.

Not as a file yet. On Red Hat Enterprise Linux 8, 9 and 10 servers, the collector reports every installed package for you. Anything else is added from the catalogue, one technology at a time.

Yes, on Enterprise. It includes a team of three, with roles (admin, vulnerability analyst and viewer), and up to 3 environments, for example a head office, a production site or a client, each with its own technologies and fix plan. Extra people are R499 a month and extra environments R999 a month, each with one more seat. Inviting people needs a paid Enterprise plan: a trial can’t invite.

We use your data only to run Ovesion for you. We don’t sell it, we don’t use it for advertising or profiling, and we don’t send marketing emails. Your technology stack and environment data is stored in the European Union, and each customer’s data is kept separate by the database itself, not only by the app. Access is limited to the small team that runs and supports the service. To close your account or delete an environment’s data, email support@ovesion.com. Our Privacy Policy has the full details, including the providers we use.

Cancel or change plan in the app, under Subscription. Plans renew automatically until cancelled. Cancelling stops the next renewal, and you keep your plan to the end of the period you paid for; then your account returns to Free and your environments are kept. An upgrade takes effect at once, a downgrade at the next billing date. You can also email support@ovesion.com.