IT Asset: Asset Inventory
One authoritative view of everything you own
Discovery becomes the single source of truth: every asset with owner, criticality and AV/EDR posture, hardened against CIS, with licences and imports reconciled against reality.
- 2,481 assets in 7 families: cloud, servers, network, Kubernetes, databases, IoT/OT and code repositories.
- 72% run EDR (endpoint detection and response), which leaves about 695 assets to cover.
- 82% of CIS Benchmark hardening controls pass; every failure is listed against its asset.
Managed inventory
Everything you own, in one place
Assets stream in with OS, owner, business criticality and endpoint-protection posture, and the estate composition rolls up live. Managed and agentless, kept current.
IT Asset Inventory
Authoritative ownership, valuation & assurance coverage
The asset record
Every field, on every asset
One host, in full: identity (IP, MAC, vendor, DNS), platform (OS, build, installed software, CIS score), ownership and CIA ratings, exposure and posture, with provenance and last-seen.
Asset record · fin-db-02
The full inventory record, every field tracked
- host_name
- fin-db-02
- ip_address
- 10.4.2.21
- known_ips
- 10.4.2.21, 10.4.9.5
- mac
- 00:50:56:9a:2b:14
- vendor
- VMware
- dns_aliases
- fin-db, treasury-db
- os_family
- Linux
- os_normalized
- RHEL 9.3
- os_build
- 5.14.0-362
- installed_software
- 214 packages
- licences
- RHEL, MSSQL
- cis_benchmark
- 74% (L2)
- owner_name
- A. Rahman
- owning_team
- Treasury Ops
- business_function
- Core banking ledger
- data_classification
- Restricted
- compliance_scope
- PCI-DSS, SOX
- lifecycle_state
- In production
- criticality
- Critical
- C / I / A rating
- High / High / High
- internet_facing
- No
- network_segment
- VLAN 40 · finance
- edr_status
- Protected · CrowdStrike
- criticality_score
- 94 / 100
Discovered credential-free (agentless); last seen via ARP and SNMP, and reconciled against the CMDB on every sync.
Asset families
Every asset type on its own terms
From firewalls to Kubernetes, each device family is read the way it should be — not forced into one generic shape.
Every asset type, one lens
What CAIVA reads per device family
CIS Benchmark
Hardened to the benchmark, and measured
Each host is scored against its CIS profile, section by section. Every failed control links to its fix and re-measures on the next sync.
CIS Benchmark
Configuration hardening · per host
Windows Server 2022
Each failed control links to its remediation; fixes re-measure on the next inventory sync.
Licences
Entitlement versus reality
Software licences tracked off the real inventory: entitled seats against deployed, renewals ahead, and over-deployment flagged before an auditor finds it.
Software licences
Entitlement vs deployment · from inventory
Marker = entitled seats. Bars past it are over-deployed.
Asset import
Bring in what you already have
A CMDB export or spreadsheet merges into the agentless estate, reconciled rather than duplicated.
CSV & SBP import
Load an existing register and map its columns to CAIVA fields.
Reconciled, not duplicated
Imported rows match discovered hosts by IP and MAC, so nothing double-counts.
Owner & criticality
Business context carries in and sticks to the asset.
See Asset Inventory on your estate
Tell us a little about your environment and we’ll put together a walkthrough tailored to it.
- Agentless discovery
- Real-world prioritisation
- Human-gated proof