VersionGopher™ software by AstroSec LLC

Know what software is really running, even where your tools cannot see.

VersionGopher finds software version evidence across binaries, scripts, firmware, archives, endpoints, embedded systems, and non-standard architectures, from enterprise IT to industrial, autonomous, and mission platforms.

VersionGopher™ is developed and provided by AstroSec LLC, a Virginia limited liability company.

What are we inheriting? What is vulnerable? What changed? What is hiding?
Scroll to explore
Why VersionGopher exists

The most dangerous software is often the software nobody can see.

Security teams have dashboards for managed endpoints, cloud workloads, and standard enterprise applications. Critical software also lives in firmware, embedded Linux, industrial controllers, network appliances, vehicles, UAVs, lab hardware, and inherited environments that cannot run normal agents. VersionGopher exists to close that visibility gap.

CISO and security leadership

Close the gap between inventory and reality.

See vulnerable components, suspicious binaries, exposed evidence, and drift across managed and unmanaged assets before they become breach, audit, or board problems.

Incident response and technicians

Scan the boxes normal tools cannot touch.

Bring back hashes, versions, file evidence, archive clues, and CVE context from endpoints, mounted images, old appliances, PowerPC, MIPS, ARM, and offline filesystems.

M&A, government, mission, investors

Reduce expensive unknowns before they surprise you.

Use out-of-band software evidence for diligence, inherited environments, mission reviews, integration planning, cyber insurance, and hard-target risk briefs.

Beyond the enterprise

Enterprise-grade software visibility for embedded, industrial, autonomous, and mission systems.

VersionGopher was built for the dark corners: embedded Linux devices, firmware-derived filesystems, routers, switches, storage appliances, industrial systems, autonomous platforms, vehicles, UAVs, lab hardware, and space-support environments.

PowerPC MIPS ARM32 ARM64 OpenWrt Firmware images NAS / SAN Industrial control Autonomous systems Mission hardware
What you get from a scan

A practical evidence layer for messy software estates.

Detected versions

Binaries, scripts, packages, manifests, archives, firmware-like containers, and filesystem evidence.

CVE and package risk

Matching with context, rationale, false-positive controls, and exact package-advisory lanes.

Hashes and suspicious files

SHA-256 correlation, trusted malware-hash hits, signature clues, and binary-forensic indicators.

Drift and comparison

Compare scan groups, spot unexpected changes, and brief what moved between baselines.

Forensic provenance

Collector version, scan source, target context, import history, and repeatable evidence packages.

Buyer-ready reports

Turn raw JSONL into a decision brief for leadership, mission owners, diligence, or response teams.

Where it works

From enterprise endpoints to the weird boxes that quietly run the mission.

WindowsmacOSLinuxServers LaptopsCI runnersNAS / SANRouters Embedded LinuxFirmware capturesIndustrial systems AutomotiveUAVsRoboticsLab hardwareMission systems
Proof, not hand waving

Collectors, dashboard, CVE matching, drift, and evidence in one workflow.

VersionGopher combines portable collectors with a hosted analysis dashboard so teams can scan hard targets locally, bring back structured JSONL, and review software evidence without installing a permanent agent.

Portable collectorsWindows, macOS, Linux, ARM, MIPS, and PowerPC targets where available.
Hosted dashboardSearch, filter, compare, and investigate imported scan output.
Assessment reportsPackage the evidence into a clear brief for the people funding the decision.

Know what the hell is going on with your assets.

Start with one target set: an inherited environment, firmware image, storage estate, endpoint group, or embedded system.