Continuous, not occasional
Scans run on a schedule per customer site. Diffs reported as alerts — you find out the day something changes, not the day before the audit.
Network Discovery
The unmanaged switch surfaces. Every time.
Continuous network scans with SNMP, port discovery, and CVE matching. Surface unmanaged switches, rogue endpoints, and open ports — without waiting for the audit.
Three principles that make this work.
SNMP-aware
Pull facts from routers, switches, printers, UPSes, and anything else with an OID. Build a topology map without manual entry.
CVE-aware
Match discovered services against known CVEs. Surface what is exploitable, prioritized by exposure.
Limitless capabilities, one product.
Subnet sweeps
CIDR-based or auto-detected. Ping, ARP, SNMP, mDNS, NetBIOS — whatever the device responds to.
CVE detection
Banner-grab plus version-match against the NVD. Severity-ranked, exposure-aware.
Topology map
Visual map of discovered devices, links, and VLANs. Snapshot diffs over time.
Alerts on change
New device joined, IP changed, service appeared — fires an alert, opens a ticket if you want.
Per-site scheduling
Different cadence per customer site. Quiet hours respected automatically.
Asset enrichment
Discovered devices auto-enrich the asset record. No double-entry between RMM and discovery.
In numbers
Continuous
Scanning cadence
SNMP
Aware out of the box
CVE
Matched against NVD
Per-site
Scheduling + quiet hours
What pairs well.
Endpoint monitoring across every OS.
One Go-native agent for Windows, macOS, and Linux. Zero dependencies, signed, runs as SYSTEM.
See RMMPatches that actually install. At SYSTEM.
MSI-first delivery with Chocolatey bootstrap. winget supported but not preferred — for reasons.
See Patch ManagementOne trigger. Every device. Zero spreadsheets.
Smart groups, scheduled jobs, event-triggered automations, and run-on-many script execution.
See AutomationQuestions about Network Discovery.
Does this require an agent on every device?
No. Discovery runs from any device with the agent installed; it sweeps the local network and reports back.
How are CVEs matched?
We banner-grab discovered services and match service+version against the NVD. False positives are flagged when version detection is ambiguous.
Can I export the topology map?
Yes — PNG or PDF, per site or per customer.
Ready to try Network Discovery?
See Network Discovery in your environment.
Deploy your first agent in minutes. See the platform in action — book a walkthrough or kick the tires on a free trial.
Book a demo30-minute walkthrough. No sales pressure.