Features and editions
One software, four tiers
The Community Edition is complete and stays free. Pro and Enterprise save effort in IT-Grundschutz and audits; the ISMS add-on turns the inventory into an information security management system.
The complete inventory, free
Everything an administrator needs for a clean inventory. Source-available under the Elastic License 2.0, with no asset limit.
Inventory
- Assets with lifecycle, owners and relationships
- Category tree with custom fields per category
- Location tree from site to room, with links between sites
- Inventory numbers with number ranges and QR labels
- Software inventory per device, consumables
- Import from GLPI, export as CSV
Discovery and health
- Agent for Windows and Linux, read-only and outbound-only
- Collector for network scans with SNMPv3 and LLDP
- Matching with Active Directory over LDAPS
- Health with CPU, memory, disks, network and GPU
- Status push from existing monitoring through the API
- Agent self-update with vendor signature
IT-Grundschutz
- Grundschutz++ and the 2023 edition with a guided path
- Information domain, target objects and protection needs from the inventory
- Assign modules with suggestions
- IT-Grundschutz check with an explanation per requirement
- Evidence as documents at the requirement
Licences, contracts, documents
- Software licences with assignment
- Contracts with deadlines and reminders
- Cost report per month and year
- Documents with versions, encryption and retention periods
- Certificates with deadlines, hardware security keys with issue and return
Infrastructure
- Racks with a true-to-scale editor
- Ports and cables, also across racks
- Suggestions from LLDP neighbours and SNMP interfaces
- Labels on A4 sheets or tape
Security and operation
- Local accounts with mandatory TOTP and a setup link
- Optionally OIDC with any identity provider, groups map to roles
- Five fixed roles
- Audit log with hash chain, verification and export
- Notifications via webhook and Gotify
- Encrypted backup and migration of the installation
- AI help assistant, optional with your own provider
Less effort for IT-Grundschutz and audits
For teams that want to handle IT-Grundschutz and audits with less manual work. In three sizes up to 500, 1,500 and 5,000 assets.
IT-Grundschutz
- Automatic modelling with your own rules per category
- Protection needs passed along the dependencies
- Dependency graph with inheritance
- Four-eyes approvals in the IT-Grundschutz check
Connectors
- Proxmox and VMware through their read-only API
- Hyper-V through the agent on the host
- Entra ID and Intune, devices and users read-only
- Owners from groups
Licences and costs
- Target/actual comparison from the software inventory
- Cost analysis with history
- Budgets and forecast
- Renewal workflow
Automation
- Check rules over asset attributes
- Workflows with event, condition, action and approval
- Tickets in Jira, GitLab, YouTrack and Zammad
- SIEM export of audit and security events
Access
- Write permissions per location
- SCIM for users and groups
- Data assistant with read-only access to your data
For large and distributed environments
For organisations from 5,000 assets that want availability and support backed by contract. Price on request.
Scope
- All Pro features
- From 5,000 assets, tiered by size
Operation
- Support contract with agreed response times
- Operation with several instances for high availability
The inventory becomes an ISMS
Adds the information security management system to Pro or Enterprise, with a guided path, templates and recommendations in every step. Flat rate, regardless of the number of assets.
Leadership and responsibility
- Policy from a template, approved by management
- Name the roles, ISO with deputy
- Policies with versions, review and acknowledgement
Risk and implementation
- Risk analysis per BSI Standard 200-3 with risk matrix
- Implementation plan from every gap, with priority and costs
- Evidence with expiry, resubmission and versions
Suppliers and incidents
- Supplier register with criticality and questionnaire
- Processor register under Art. 28 GDPR
- Security incidents with reporting deadlines under NIS2 and GDPR
Review and report
- Internal audits with checklists and corrective actions
- Key figures and management review
- Reference documents A.0 to A.6 as PDF and Markdown
Try it yourself
The Community Edition is free with no asset limit. Try every feature of Pro, Enterprise and the ISMS add-on for 30 days right in your installation.