Cyber asset discovery & inventory
Discover everything.
Miss nothing.
Lumen Edge turns the security and IT tools you already run into one correlated, explainable asset inventory, then shows what is unprotected, unowned, unused or already gone. Built for Security, GRC and IT teams.
- No endpoint agents
- SaaS or on-prem
- 25+ integrations
- Every module included
Built for security, GRC and IT teams in every sector
The problem
Every tool keeps a list. None of them agree.
Most organizations already own the data to answer “what do we have?”, but it is just scattered across a dozen consoles, each with its own blind spots.
Blind spots
Shadow IT, unmanaged network devices and machines no agent was ever installed on, invisible to the tools meant to protect them.
Conflicting lists
AD, EDR, MDM, cloud and scanners each count differently. Duplicates and renamed hosts make every number arguable.
Audit scramble
Asset registers rebuilt by hand before every audit, with owners filled in from memory and no proof of what was retired.
Silent waste
Idle laptops, ghost servers and SaaS seats assigned to people who left months ago, paid for every single month.
Best-in-class correlation
One record per real asset, and the reason why.
Lumen Edge runs one of the most precise correlation engines on the market. Ordered, explainable rules match every record across sources (agent ID, hostname and IP, FQDN, directory name), and the engine holds back when signals conflict instead of guessing. Duplicates disappear without risky merges. Toggle the view to see the difference.
| Asset | IP | Operating system | Seen by | EDR |
|---|---|---|---|---|
| ADC01 | 10.4.1.4 | Windows Server 2012 R2 |     | Protected |
| DMZ-01 | 10.2.9.12 | Ubuntu 20.04 | | Protected |
| ST01 | 10.3.3.12 | Windows Server 2012 R2 | | No EDR |
| ST02 | 10.3.3.13 | Windows Server 2012 R2 | | No EDR |
| LP2 | 10.9.1.2 | Windows 11 Enterprise | | Protected |
| HP LaserJet M507 | 10.3.3.40 | Embedded firmware | | Unmanaged |
- Active Directory
Created from AD computer object - Active scan
Matched on short hostname + DNS domain - Passive scan
Matched on IP, no name conflict
One platform
Discover. Manage. Govern. Secure.
Four outcomes from one inventory, so Security, GRC and IT finally work from the same facts.
Discover
Find every asset, managed or not.
- Active & passive network discovery
- 20+ integrations, no endpoint agents
- Device fingerprinting for IoT & OT
Manage
One accurate record per real thing.
- Explainable correlation
- Ownership & custom fields
- Approval workflow for changes
Govern
Evidence your auditors accept.
- Living asset register
- Decommissioning with proof
- Scheduled, templated reports
Secure
Close the gaps attackers look for.
- Security-tool coverage
- Agent health & policy drift
- Identity hygiene signals
Built for every team that depends on the inventory
One source of truth. Five teams. Zero spreadsheets.
For Security & SecOps
You cannot defend what your tools have never seen.
Lumen Edge correlates your EDR, NDR, SIEM, directory and network scans into one inventory, then shows exactly where each security control is missing, broken or out of policy.
- A verified coverage figure for every security control
- Unknown and unmanaged devices surfaced continuously
- Faster triage with owner and context on every asset
- Evidence of control coverage for leadership and auditors
Included in every plan
Modules that turn visibility into action.
No add-ons, no upsell. Every customer gets every module. Switch them on per tenant when you need them.
Coverage
Prove every asset has the controls it needs.
Measure EDR, SIEM and vulnerability-agent coverage against a neutral reference inventory, not against the tool's own list. Worst departments first.
- Missing, offline and out-of-scope agents
- Reduced-functionality and policy drift
- Breakdowns by department, type and criticality
Decommissioning
Retire assets on evidence, not a hunch.
An asset is marked decommissioned only when every source that ever saw it has run often enough and stopped seeing it. Everything else waits for evidence.
- Per-source verdicts for every asset
- Mark, restore or delete with a full audit log
- Exclusions and thresholds per integration
License Optimization
Visibility that pays for itself.
Join Microsoft 365 and Atlassian license data with real activity to find never-used seats, inactive and external users, disabled-but-licensed accounts and dormant admin roles.
- Estimated spend, open and realized savings
- Done, ignore and snooze decisions with history
- Allow-lists and grace periods for exceptions
Integrations
Works with the stack you already own.
EDR, identity, cloud, MDM, NDR, SIEM, vulnerability and SaaS platforms, plus our own active and passive scanners for everything without an API.
CrowdStrike FalconEDR & XDR
Microsoft Defender for EndpointEDR & XDR
Microsoft Entra IDIdentity & directoryActive Directory (computers)Identity & directory
Microsoft IntuneCloud & MDM
Microsoft AzureCloud & MDM
Elastic AgentEDR & XDR
Tenable Nessus AgentsVulnerability management
IBM QRadarSIEM & log analytics
Vectra AINDR
LinkShadowNDR
Carbon Black DefenseEDR & XDR
Atlassian CloudSaaS & licensing
LDAPIdentity & directoryActive ScannerNetwork discoveryPassive ScannerNetwork discoveryDeployment
Your data, your rules.
Choose where Lumen Edge runs. The product and the per-asset price stay the same.
SaaS
A dedicated, isolated instance operated by us, in the region you choose. Updates and scaling handled for you.
- Dedicated instance per customer
- Choice of hosting region
- Live in hours
On-prem
Run the complete platform in your own data center or private cloud. No data ever leaves your perimeter.
- Your infrastructure, your keys
- Same features as SaaS
- Guided installation
Air-gapped
For classified, critical-infrastructure and OT networks. Offline updates and manual result upload.
- No internet connectivity required
- Manual scan-result upload
- Enterprise plan
Why Lumen Edge
Built to be trusted by people who have to defend the numbers.
Correlation you can explain
Every merge records the rule that made it. Ambiguous matches go to a person, never a guess, and you can pin or block any match.
Your network stays closed
Sensors connect outbound only. No inbound firewall rules, no endpoint agents, and integration credentials are never stored on the sensor.
Same product, SaaS or on-prem
A dedicated instance in your region, in your data center or fully air-gapped. Same features, same per-asset price.
Every module included
Coverage, Decommissioning, License Optimization and the hygiene wizard come with every plan. No add-on math.
Multi-tenant to the core
Hard isolation per tenant for subsidiaries, acquisitions and MSSP clients, with global and tenant-level roles.
API-first
The console is a client of the same public REST API. Anything you can click, you can automate.
In practice
From “we think” to “we know”.
The EDR console reports high coverage because it only counts the hosts it knows. Correlated with Active Directory and network scans, the servers it has never seen and the sensors that are installed but not protecting show up by name.
The asset register handed to auditors is the same list the SOC works from, and every retired machine keeps the evidence of why it was retired.
Printers, PLC gateways and UPS units that no tool listed appear in the inventory, and License Optimization points at the Microsoft 365 and Atlassian seats nobody uses.
From the blog
Field notes on asset visibility
Why your EDR coverage number is probably wrong
Vendor consoles measure coverage against their own list of agents. Here is how to measure it against everything that actually exists.
September 22, 2026 · 5 min read
Explainable correlation: how to decide two records are the same machine
Asset correlation is a chain of evidence, not a black box. Here is how ordered match rules, conflict guards and human overrides keep an inventory honest.
September 8, 2026 · 5 min read
NIS2, DORA and ISO 27001 all start with an asset inventory: what auditors actually ask for
A practical walk through what ISO 27001, NIS2, DORA, CIS Controls and NIST CSF require of an asset inventory, and the evidence that tends to satisfy an auditor.
August 25, 2026 · 5 min read
See your real asset inventory in 30 minutes.
Bring one question you cannot answer today: how many servers have no EDR, who owns a subnet, which licenses are idle. We will answer it on a live platform.
SaaS or on-prem · no endpoint agents · every module included