The Lumen Edge platform
One inventory. Every asset. Every team.
Lumen Edge discovers assets on the network and through the tools you already run, correlates them into one explainable record, and keeps that record accurate, so Security, GRC and IT can act on the same facts.
Architecture
Lightweight where it runs, rigorous where it thinks.
Sensors do the collecting inside your network. The platform does the reconciling. You keep control over what enters the inventory.
EDR & XDR
Identity & directory
Cloud & MDM
SIEM, NDR & scannersDiscover
Four ways in. No endpoint agents.
Combine network discovery with the data your security and IT tools already hold. Each method covers the others’ blind spots.
Active scanning
Configurable scans of the subnets you choose: host discovery, ports, services and OS detection. HTTP fingerprinting identifies network gear, printers, cameras, UPS and PDUs; optional SSH probing adds host detail.
Passive discovery
The sensor listens on a mirror or SPAN port and learns assets from live traffic: the NDR principle applied to inventory. Nothing is sent to fragile OT or IoT devices.
Integrations
Read-only connectors to EDR, directory, identity, cloud, MDM, NDR, SIEM, vulnerability and SaaS platforms enrich every asset and reveal which controls are in place.
Upload & API
CSV imports with a ready-made template, manual result upload for air-gapped sites, and a REST API for everything else, all through the same correlation pipeline.
The sensor
A lightweight collector deployed per site, segment, DMZ or OT zone, on Windows, Linux, macOS or as a container. One sensor covers thousands of assets. It pulls tasks from the console over outbound HTTPS, runs scans and integrations in parallel, and returns results. Integration credentials are delivered per task and never stored on the sensor.
- Outbound onlyNo inbound firewall rules
- Proxy-awareWorks through corporate proxies
- Self-healingInterrupted tasks are re-queued
- Health-monitoredHealthy, maintenance, fault
Manage · Correlation engine
The best correlation is the one you can explain.
Every connector has an ordered list of match rules, from strongest to weakest. The first rule that matches wins; conflict guards stop a merge when a strong identifier disagrees; ambiguous matches go to a human.
| Asset | IP | Operating system | Seen by | EDR |
|---|---|---|---|---|
| ADC01 | 10.4.1.4 | Windows Server 2012 R2 |   | Protected |
| DMZ-01 | 10.2.9.12 | Ubuntu 20.04 | | Protected |
| ST01 | 10.3.3.12 | Windows Server 2012 R2 | | No EDR |
| ST02 | 10.3.3.13 | Windows Server 2012 R2 | | No EDR |
| LP2 | 10.9.1.2 | Windows 11 Enterprise | | Protected |
| HP LaserJet M507 | 10.3.3.40 | Embedded firmware | | Unmanaged |
- Active Directory
Created from AD computer object - Active scan
Matched on short hostname + DNS domain - Passive scan
Matched on IP, no name conflict
Ordered match rules
- 1Agent IDStrongest identifier: the security agent’s own unique ID.
- 2Predecessor agent on the same hardwareRe-imaged machines keep their history.
- 3IP address + hostnameBoth must agree.
- 4Fully qualified domain nameNormalized across sources.
- 5Short name + DNS domainHandles “ST01” vs “st01.corp.local”.
- 6Directory distinguished nameCross-source match against AD.
- 7IP, only if no name conflictWeakest, guarded by conflict checks.
You stay in control
- Every merge records which rule made it
- Pin a record to an asset, or block a match permanently
- Approval policies per source: create, update or flag missing assets automatically, or queue them for review
- Field-level merge modes: replace, merge or never overwrite
- Source-prefixed fields keep “who said what” for every attribute
- Hygiene wizard finds duplicates and names that disagree between sources
Govern
An inventory with change control.
Decide per source what happens when an asset appears, changes or disappears. Enrich every record with owners, teams, criticality and your own custom fields, then report on it the same way every time.
- Typed custom fields, layouts and saved column sets
- Ownership derived from real usage
- Excel reports from your own templates, scheduled by email
- Full per-asset history across every source
Secure
Find the gaps before someone else does.
Unknown devices, missing or broken security agents, identities without MFA, stale privileged accounts: surfaced as filterable fields and dashboards, not buried in five vendor consoles.
- Coverage per security control, worst gaps first
- Unmanaged and new devices flagged for review
- Agent health and policy drift
- Identity hygiene from Entra ID and Active Directory
Included modules
Switch on what you need, per tenant.
Coverage
EDR, SIEM and vulnerability-agent coverage against a neutral reference inventory.
Learn moreDecommissioning
Evidence-based retirement with per-source verdicts and an audit log.
Learn moreLicense Optimization
Idle and misassigned Microsoft 365 and Atlassian licenses, with savings tracking.
Learn moreHygiene wizard
Analyzers for duplicates, conflicting names and invalid hostnames, with suggested fixes.
Platform foundations
Enterprise-ready from day one.
Multi-tenancy
Hard isolation per tenant, each with its own data store, sensors, roles and reports.
Access control
Global and tenant-level roles, custom roles, enforced MFA and login rate-limiting.
REST API
The console uses the same public API. OpenAPI documented.
Dashboards
Server-defined dashboards with drill-down from any chart to its assets.
Search
Free-text and structured queries across every field from every source.
Multi-region
SaaS instances in the region you choose, or on-prem anywhere.
Getting started
From zero to a trusted inventory.
- 01
Kick-off
We scope sources, sites and success criteria with your team in a 60-minute session.
- 02
Deploy & connect
Install a sensor per site and connect integrations. Most teams see first results the same day.
- 03
Tune & adopt
Approval policies, custom fields, dashboards and reports, tailored with our engineers.
See your real asset inventory in 30 minutes.
Bring one question you cannot answer today: how many servers have no EDR, who owns a subnet, which licenses are idle. We will answer it on a live platform.
SaaS or on-prem · no endpoint agents · every module included