Getting started

1. What you need

An Ovesion account, which is free. Every account starts on the Free plan, with the worldwide CVE picture and a watch list. Your own fix plan needs Pro or Enterprise, or a free trial.

To try Ovesion on your own systems, request a free trial: a 30-day Enterprise trial with collectors included and no card needed.

2. Create your account

1. Go to app.ovesion.com and select Create account.
2. Confirm your email address from the email Ovesion sends, then sign in.
3. To choose a plan, open the Account menu at the top right and select Subscription. If Ovesion has set up a trial for you, skip this step.

3. Create an environment

An environment is one place you look after, for example “Head office”, “Production” or, for a service provider, one client. Each has its own technologies, machines and fix plan.

1. In the left-hand menu, select Environments.
2. Select Add an environment and give it a name.

4. Tell Ovesion what you run

There are two ways, and most customers use both.

Run a collector on your servers

On Linux and Windows servers, run Ovesion’s collector: a short, readable script that lists what is installed and reports it once a day. Set it up on the Environments page, under Collectors. Collectors explains each step.

Type in what a collector cannot see

For firewalls, network appliances, applications and anything else a collector cannot run on:

1. In the left-hand menu, select Technology stack.
2. Under Register technology manually, use Search the product catalogue to find the product, for example “FortiOS”.
3. Enter the exact version you run.
4. Answer Does it face the internet? and How critical is it to your business? These answers decide how urgent its fixes are.
5. Register it.

If a product is not in the catalogue, ask for it from Request coverage in the app.

5. Read your fix plan

Open My exposure. After a few minutes of evaluation it shows your fix plan: one row per fix, with the CVEs it closes and how many are being exploited.

• Start with the fixes marked Immediate, then Out of cycle.
• Open a fix to see why it ranks where it does: six cards, the remediation steps, the CVEs and the machines.
• Then open Can’t confirm and settle what you can, for example by entering a more precise version.

How Ovesion decides explains the four decisions.

6. Bring your team

On a paid plan, the account owner can invite people from Team in the Account menu. Each person has a role: admin, vulnerability analyst or viewer, for every environment or chosen ones. Pro includes 2 people and Enterprise 3. The owner can require an authenticator app for everyone.

7. Stay informed

Ovesion emails you when a fix becomes urgent or gains an exploited CVE, with the reason, and sends a correction notice when its own analysis changes an answer. You can unsubscribe from any of these emails.

Questions? Write to support@ovesion.com. We usually reply within one business day.