Keep infrastructure security risks connected to your inventory.
Infrastructure security depends on understanding the services and software versions your applications rely on. Cevnitra helps platform and operations teams review known vulnerabilities in recorded infrastructure products and keep their findings visible alongside application dependencies.
Get started with Cevnitra →Record infrastructure products and versions
Add the infrastructure products and services your team maintains, with the versions you run. Keeping these assets in the same workspace as application dependencies helps engineers understand which parts of the stack need investigation and which applications rely on them.
- Maintain an inventory of infrastructure software and service versions.
- Keep recorded versions aligned with upgrades made by your operations team.
- Review infrastructure and application findings from the same workspace.
Review NVD vulnerability and CVE context
Cevnitra uses NVD product and vulnerability data from its private advisory mirror to identify potential infrastructure matches. Review the CVE record, affected configurations, and vendor guidance. Product naming and version details matter: a potential match still needs validation against the infrastructure you operate.
- Investigate potential NVD matches for recorded infrastructure products.
- Check advisory configurations and affected versions before planning an upgrade.
- Prioritize findings using severity, applicability, and your environment’s exposure.
Coordinate infrastructure vulnerability remediation
Share relevant new scan findings with the people who maintain the affected service. Configured alerts and Jira issue creation help teams coordinate the work. After changing a service version, update the recorded inventory and run another scan to review remaining findings.
- Notify connected channels when a completed scan finds relevant vulnerabilities.
- Use Jira to assign infrastructure remediation work.
- Review a new scan after your team records an upgraded version.
Questions about infrastructure security
Does Cevnitra actively scan my network or cloud configuration?
Cevnitra checks the products and versions you record against known security advisories. It does not probe network ports, inspect live cloud configuration, install an agent, or provide an active intrusion-blocking service.
Is infrastructure security monitoring continuous?
Scans are currently started by your team. Alerts depend on completed scans, selected notification preferences, and configured integrations. Scheduled monitoring is planned, so Cevnitra should not be treated as continuous monitoring of your live infrastructure.