Ursa
A self-contained security appliance for small and mid-sized organisations that need continuous visibility without running a security team.
Find and track vulnerabilities
Full and discovery scans
Run a full vulnerability scan, or a lighter discovery scan to map what is on the network without touching your findings.
Scheduled and compliance scans
Scan each subnet on its own schedule. Compliance scans keep their own results.
Single-check scans and retests
Test one named check, such as a newly published CVE, against chosen hosts, then retest after the fix.
Reopen threshold
Choose the minimum severity at which a fixed finding is reopened, so low-level flapping does not flood the list.
Decide what to fix first
Patch priority
Priority 1+ to 4, from severity, exploit likelihood and known exploitation, with a configurable threshold.
Finding verification
Check a finding with a matching template, and optionally sweep open priority findings nightly.
Risk-based reporting
A risk rating alongside the scanner's own, a dedicated PDF, and a risk section in the monthly report that tracks month on month.
AI explanations
An optional button explains a finding in plain language. Off-site, and labelled as such.
Assign, track and prove it was fixed
Finding problems is half the job. Ursa helps you get them fixed and shows the evidence.
Assign to staff
Give any finding to a team member with a due date. Assign many at once, and overdue items stand out in red.
Record the work
Keep a log of what was done against each finding, with a complete audit trail of every status change and assignment.
Accept or adjust risk
Mark false positives, or adjust a rating for your environment with a written justification and an optional expiry. The original rating is always kept.
Close the loop
Retest after remediation to confirm the fix, and carry the outcome into your monthly report.
Watch the edge, the LAN, and trap intruders
External port monitoring
A daily check of your public addresses with change tracking, so a newly exposed service is noticed.
Decoy services
Decoys record connections, login attempts and port scans. Email alerts and a digest are optional, with a whitelist for your own scanners.
New device detection
Ursa scans the local subnet with ARP and compares every device against the ones you know. An unauthorised device that appears is detected rapidly and reported, so you can authorise it or act on it. Covers the subnet the appliance is connected to.
Run it with confidence
- Every optional feature is a switch on one page, with a clear note when it sends data off-site.
- Password length and complexity rules, expiry warnings, and emailed two-factor sign-in with remembered browsers.
- Use a self-signed certificate for your IP or DNS name, or install one from your own certificate authority.
- Signed, self-updating management, so the appliance stays current.
- Monthly PDF reports, ready to hand to management or an auditor.