Vorpcel / Products / Endpoints
Know every vulnerable package and program on your Windows, Linux and Mac machines, fix the ones attackers actually use first, and patch from the same console, inside the maintenance windows you choose.
At a glance
Most teams run a scanner, export the results to a spreadsheet and chase owners for weeks. Vorpcel keeps the whole cycle in one console, from the inventory to the confirmed fix.
The agent lists the operating system, every package and program, open ports and container images on each machine, and sends a fresh inventory on the schedule you set.
Each vulnerability is checked against the vendor's own fixes and ranked by real-world risk, so the first page of the list is the work that matters this week.
Install the fix from the console, inside your maintenance window. The finding closes on its own when the next scan confirms the new version.
You cannot fix what you do not know is installed. The agent collects a full software inventory without a network scan and without credentials stored on a scanner.
A Debian server is judged by Debian's advisories, a Windows machine by Microsoft's and a Mac by Apple's. Packages that a distribution patched without changing the version number are not reported as vulnerable, which removes most of the noise generic scanners produce.
Severity scores alone put thousands of findings at the top. Vorpcel orders the list by four questions, so a medium flaw that is actively exploited on an exposed server comes before a critical one nobody can reach.
Choose the findings and the machines, and Vorpcel installs the update through the system's own package manager or the vendor's installer. Nothing runs outside the maintenance window you set for that group of machines.
Many breaches start with a weak setting, not a missing patch. Each machine is checked against CIS benchmark recommendations for its operating system.
On machines that run containers, the agent reads the images stored locally and reports their vulnerable packages, so a server and the containers it runs are reviewed together.
Finding vulnerabilities is the easy part. These are the features that keep a remediation program moving month after month.
Accept a finding with a reason and an end date. When the date passes, it comes back on its own.
Set how many days each severity may stay open; findings past the deadline are flagged and notified.
New critical vulnerabilities, newly exploited ones and failed patches, sent to e-mail, Slack, Teams, a webhook or your SIEM.
Every list exports to CSV with the same filters you see on screen, for audits and management reporting.
Maintenance window, extra log files and watched folders, set once for each group of machines.
About 6 MB on disk and 25 MB or less of memory, running at low priority.
| System | Versions | Source of truth |
|---|---|---|
| Windows | Windows 10, 11 and Server 2016 or later, x64 and ARM64 | Microsoft security updates |
| macOS | macOS 12 or later, Intel and Apple silicon | Apple security releases |
| Ubuntu, Linux Mint, Debian | Supported releases, x86_64 and arm64 | The distribution's security advisories |
| Red Hat, Rocky, AlmaLinux, Amazon Linux, SUSE | Supported releases, x86_64 and arm64 | The distribution's security advisories |
| Alpine | Supported releases | The distribution's security database |
No. The agent reads the machine from the inside and sends the inventory over HTTPS. There is no scanner to place in each network and no administrator password stored anywhere.
A severity score describes a flaw in general. The order in Vorpcel also considers whether the flaw is being exploited, how likely that is, whether the program is reachable on the network and how important the machine is to you.
Updates run only inside the maintenance window of each group of machines, and only for the findings you chose. The result of each update is recorded, and a failure is reported with its reason.
Administrator rights to install, and outbound HTTPS to the Vorpcel service. It runs as one service, at low priority.
Yes. The same agent serves vulnerability management, SIEM and EDR. Each product is turned on per machine.
Per installed agent that reported in the month, with a lower unit price as the fleet grows. Talk to our team for a quote.
Install the agent on a few machines with one command and the first ranked list appears within minutes.