Vulnerability management

Fewer false alarms, real fixes.

orta matches installed packages against each Linux distribution's own advisories, so a backported fix is not reported as a hole.

Linux distribution families

Daily

rescans, plus on every change

Images

in running clusters

Distribution-aware

Debian, Ubuntu, Alpine, RHEL, Rocky, Alma, SUSE, Amazon Linux, Oracle Linux, Fedora and more, with native version rules.

Findings the vendor marks as not affected or won't fix stop cluttering your list.

Rescans when packages change and every night against fresh advisories.

With image scanning on, the agent builds an SBOM on the node. Only the package list leaves the cluster; images are never pulled or uploaded.