Connect what you already own.

Active Scanner

Lumen Edge

Configurable network scanning of the subnets you choose: host discovery, open ports and services, OS detection, HTTP fingerprinting of network devices and optional authenticated SSH probing.

Passive Scanner

Lumen Edge

Listens on a mirror or SPAN interface and extracts assets and their details from live traffic. NDR-style analysis aimed at inventory, not alerts. Nothing is sent to the devices it finds.

CrowdStrike Falcon

CrowdStrike

Every Falcon sensor with its host details, prevention and sensor-update policies, containment and reduced-functionality state, and the hosts that do not have one.

CrowdStrike Identity Protection

CrowdStrike

Identities, risk context and account attributes from Falcon Identity Protection.

CrowdStrike Asset Owner

CrowdStrike

Works out who actually uses each machine from Falcon activity and writes it back as the asset owner.

CrowdStrike Process Events

CrowdStrike

Turns process telemetry from the Falcon event store into asset attributes you can filter and report on.

Carbon Black Defense

Broadcom

Endpoints, sensor versions and policy state from VMware / Broadcom Carbon Black Cloud.

Microsoft Defender for Endpoint

Microsoft

Onboarded devices with exposure level, risk score and health state from Microsoft Defender.

Elastic Agent

Elastic

Every agent enrolled in Fleet, with policy, version and status: the basis for SIEM and endpoint coverage.

Active Directory (computers)

Microsoft

Computer objects with OU, distinguished name, OS and last logon: the "should exist" list most audits start from.

Active Directory (users)

Microsoft

User accounts with department, manager, status and password attributes.

LDAP

Any LDAP v3 directory

Users from OpenLDAP, FreeIPA and other standards-based directories.

Microsoft Entra ID

Microsoft

Users with MFA registration and methods, passwordless status, privileged roles, last sign-in and license assignments.

Microsoft Intune

Microsoft

Managed laptops and mobile devices with compliance state, primary user and ownership type.

Microsoft Azure

Microsoft

Virtual machines, network interfaces and virtual networks across your subscriptions.

Vectra AI

Vectra

Hosts observed on the network by Vectra NDR, including the ones no agent knows about.

LinkShadow

LinkShadow

Assets, users and DHCP leases seen by LinkShadow NDR, a strong signal for unmanaged and transient devices.

IBM QRadar

IBM

Log sources grouped per host, so you can see which assets your SIEM actually hears from.

Elastic aggregation query

Elastic

Run any Elasticsearch aggregation and map the result onto asset fields. Bring your own enrichment.

Elastic Asset Owner

Elastic

Derives the real user of each machine from logon events stored in Elastic.

Tenable Nessus Agents

Tenable

Linked Nessus agents and their status. Find the hosts your vulnerability scanner never sees.

Atlassian Cloud

Atlassian

Users, product access, last activity, API tokens and AI usage across Jira, Confluence and Rovo: the input for license optimization.

Assigned and consumed licenses, add-ons and admin roles, joined with real sign-in activity.

Import spreadsheets with a ready-made template, or upload scan results by hand from air-gapped sites. Same correlation pipeline as any other source.

The console is a client of the same public API. Read, write and automate everything you see in the UI.