VersionOps User Guide

Getting Started

Welcome to VersionOps! This section will guide you through setting up your account and organization to start tracking your infrastructure.

Creating Your Account

Organization Setup

An organization is the container for all your infrastructure data. When you first sign up, you'll be prompted to create an organization or join an existing one.

Inviting Team Members

Collaboration is key to effective infrastructure management. Invite your team members to join your organization:

1. Navigate to Settings → Team Members
2. Click the "Invite Member" button
3. Enter their email address and select a role:
   • Admin - Full access including settings and billing
   • Member - Can view and manage hosts and applications
   • Viewer - Read-only access to dashboards and reports
4. Click "Send Invitation"

Dashboard Overview

The dashboard is your command center for monitoring your infrastructure. Here's what you'll find when you log in.

Key Metrics

At the top of the dashboard, you'll see important metrics at a glance:

Quick Actions

The dashboard provides quick access to common tasks:

• View All Servers - Jump directly to your server inventory
• Check Vulnerabilities - See the latest CVE scan results
• Add Service Token - Create a new token for agent authentication
• Export Report - Download inventory data in various formats

Navigation

The main navigation menu on the left provides access to all features:

Managing Servers

Servers are the VMs or machines that run your applications. VersionOps automatically discovers servers when agents report data.

Viewing Server List

Navigate to Servers in the main menu to see all your monitored servers. The server list displays:

• Hostname - The server's name as reported by the agent
• IP Address - Primary network address
• Operating System - OS distribution and version
• Applications - Count of detected software packages
• Last Seen - When the agent last reported data
• Status - Online, offline, or warning indicators

Server Details Page

Click on any server to view detailed information:

Filtering and Searching

Use the search and filter options to quickly find servers:

• Search - Type to search by hostname, IP, or application name
• OS Filter - Filter by operating system (Ubuntu, CentOS, etc.)
• Status Filter - Show only online, offline, or warning servers
• Tag Filter - Filter by custom tags you've assigned

Server Status Indicators

Applications & Software

The Applications section provides a complete inventory of all software detected across your infrastructure.

Application Inventory

Navigate to Applications to see all detected software. Each application shows:

• Name - Application name (e.g., nginx, postgresql, redis)
• Installed Versions - All versions found across your servers
• Latest Version - The most recent release available
• Server Count - Number of servers running this application
• CVE Count - Known vulnerabilities affecting installed versions

Version Information

Click on any application to see detailed version information:

Filtering by Type

Use the category filters to focus on specific types of software:

Dependencies

In addition to server-based inventory, VersionOps can track npm package dependencies for your Node.js projects. Create dependency projects to monitor package.json files, scan for vulnerabilities, and get update recommendations.

Creating a Dependency Project

Navigate to Dependencies in the main menu to manage npm projects:

1. Click "New Project" button
2. Enter a name (typically matching your repository name)
3. Add an optional description
4. Click "Create"

Importing Dependencies

After creating a project, import your dependencies. You can upload either:

Import Methods

Dependency Dashboard

Each dependency project has its own dashboard showing:

• Package Count — Total number of dependencies (direct + transitive)
• Vulnerability Summary — Count by severity level (Critical, High, Medium, Low)
• Outdated Packages — Dependencies with available updates
• Last Scan Time — When the project was last scanned for CVEs

Dependency Actions

The dependency view provides two main actions:

Vulnerability Sources

VersionOps scans npm dependencies against multiple vulnerability databases:

Update Recommendations

Get intelligent update recommendations that respect semantic versioning:

CI/CD Integration

Integrate npm scanning into your build pipelines to catch vulnerabilities before they reach production:

• GitHub Actions — Scan on push and pull requests
• GitLab CI — Add security stage to your pipeline
• Jenkins — Include in your Jenkinsfile

See CI/CD Integration Guide for detailed configuration examples.

Notifications & Alerts

Stay informed about important events in your infrastructure with configurable notifications delivered via email or webhooks.

Setting Up Notifications

Navigate to Settings → Notifications to configure your alert preferences:

1. Click "Add Notification Rule"
2. Choose the trigger event:
   • New CVE detected
   • Server goes offline
   • New application version available
   • Agent hasn't reported (configurable threshold)
3. Select the delivery channel (email, Slack, webhook)
4. Configure recipients and save the rule

Alert Rules

Create sophisticated alert rules to filter notifications:

Email and Webhook Delivery

Severity Levels

Notifications are categorized by severity to help you prioritize:

CVE Scanning

VersionOps automatically scans your software inventory for known security vulnerabilities (CVEs) and provides actionable remediation guidance.

How CVE Scanning Works

1. Inventory Collection - The agent reports installed software and versions
2. CVE Database Matching - VersionOps compares versions against known CVE data
3. Severity Assessment - Each vulnerability is rated by CVSS score
4. Notification - Alerts are sent based on your notification rules

Viewing Vulnerabilities

Navigate to CVE Scanning to see all detected vulnerabilities:

• CVE ID - Unique identifier (e.g., CVE-2024-12345)
• Affected Application - Software with the vulnerability
• Affected Servers - Servers running vulnerable versions
• Severity - Critical, High, Medium, or Low
• CVSS Score - Numeric severity rating (0-10)
• Fixed In - Version that addresses the vulnerability

Severity Levels

Remediation Guidance

Click on any CVE to see detailed remediation guidance:

Security Hub

The Security Hub is your unified security dashboard. It aggregates vulnerabilities from container images, Infrastructure as Code files, Kubernetes manifests, and npm dependencies into a single view — powered by Trivy.

Navigating the Security Hub

Go to Security in the main menu. The Security Hub has several tabs:

Scanning Container Images

Infrastructure as Code Scanning

Scan your IaC files for misconfigurations before they reach production:

Kubernetes Security Analysis

Upload your Kubernetes manifests to check against CIS Kubernetes Benchmarks, Pod Security Standards, network policy gaps, and RBAC configuration issues.

Security Notifications

Configure alerts for scan results through your existing notification channels:

• Slack — Get instant alerts in your security channel
• Email — Receive scan summaries with actionable details
• Telegram / Discord / MS Teams — Use your team's preferred platform
• PagerDuty — Trigger incidents for critical vulnerabilities

Private Container Registries

Connect your private container registries to scan images for vulnerabilities without exposing credentials or deploying additional agents. VersionOps stores credentials securely (AES-256 encryption) and applies them automatically during scans.

Adding Registry Credentials

Supported Registries

Security

• Encrypted at rest — All credentials use Fernet (AES-256) encryption
• Masked in API responses — Raw credentials are never exposed in the UI or API
• Full audit trail — Every create, update, delete, and connection test is logged
• SSRF protection — Connection tests block requests to internal network addresses

Version History

Track all software changes across your infrastructure with a complete audit trail.

Tracking Changes Over Time

The Version History page shows all version changes detected by VersionOps:

• Timestamp - When the change was detected
• Server - Which server had the change
• Application - Software that was updated
• Previous Version - Version before the change
• New Version - Current installed version
• Change Type - Upgrade, downgrade, or new installation

Audit Trail

Use the version history for compliance and troubleshooting:

Export Options

Export version history data for external analysis or reporting:

• CSV - Spreadsheet-compatible format
• JSON - For programmatic processing
• PDF Report - Formatted report for stakeholders

Settings & Organization

Manage your profile, organization settings, team members, and billing information.

Profile Settings

Update your personal account settings in Settings → Profile:

• Name - Your display name visible to team members
• Email - Your login email address
• Password - Change your account password
• Timezone - For accurate timestamp display
• Notification Preferences - Email digest settings

Organization Settings

Organization administrators can manage settings in Settings → Organization:

• Organization Name - Update your organization's display name
• Default Timezone - Timezone for reports and dashboards
• Data Retention - How long to keep historical data
• API Access - Enable or disable API access

Team Management

Manage team members and their access levels:

Billing

Manage your subscription and billing information in Settings → Billing:

• Current Plan - View your active subscription tier
• Usage - Monitor host count and feature usage
• Payment Method - Update credit card or payment info
• Invoices - Download past invoices for accounting
• Upgrade/Downgrade - Change your subscription plan

Account & Privacy

Export your personal data, delete your account with a 30-day grace period, and cancel a scheduled deletion. Sole-member organizations and their subscriptions are handled automatically.

Read the full Account Management guide →