Inventory
Every machine recorded once, with everything installed on it.
An asset spreadsheet goes stale soon after someone creates it, and the CMDB rarely lists the camera the facilities team installed. BeforeTHEM builds the inventory from what it finds on the network, with no duplicate records, and keeps it current with every scan.
Asset inventory
One asset per machine, even when its name changes.
The same machine shows up in the network scan, the authenticated scan, and the agent, sometimes under different names. The platform merges these views only when there is consistent evidence that they belong to the same machine, and a new scan never creates a duplicate asset.
Software and technologies
Know where every version of every product runs.
When a new vulnerability advisory comes out, the first question is usually "where do we have this?". The software inventory answers in seconds, with the product, version, number of machines, and count of vulnerabilities.
- Installed software. Read by the agent or the authenticated scan, with the exact version.
- Technologies and services. The services that respond on the network, with product and version, including web servers and the sites they host.
- End of support. Systems and products that no longer receive patches, with their end-of-support date.
Network map
The network in layers, with each asset's reach.
The network map shows assets and the relationships between them in overlapping layers. When you select an asset, the platform isolates it along with its neighbors and calculates the blast radius: which vulnerabilities and which critical assets are within reach from it.
- Layers. Physical, logical, service flows, and network segments, each of which can be turned on and off.
- Read at a glance. Each asset's color shows its risk, its shape shows its role on the network, and critical assets stand out.
- Filters. Critical assets only, exposed assets only, by protocol, or by asset type.
- Blast radius. Starting from the selected asset, the platform gathers the vulnerabilities and critical assets reachable within two hops.
IT, OT, and IoT
Every device with an IP address, in a single inventory.
Each device is classified by type, with vendor and model whenever the equipment reports them. That lets you separate cameras from servers and PLCs from printers in the filters.
Find out what is connected to your network.
In the demo, you see the inventory of a simulated network with servers, workstations, Active Directory, and OT.