Posture, active defence and governance
What the inventory already knows, turned into defence. For readers who arrived on the word “security” rather than on the name of a regulation.
Security health
The posture of every host in one picture, each finding carrying its evidence. Vulnerability catalogues refresh on their own, every day.
Supported operating system
version, support window, end-of-support date
Cleartext services
listening ports carrying credentials in the clear
Patch level
pending updates and their age
Software past end of life
packages no longer receiving fixes
Encryption
services and volumes, where it can be observed
Endpoint protection
presence and state of the agent in place
THE WATCHDOG
Dobermann
You declare the subnets that matter. A periodic sweep cross-checks traffic against the CMDB and reports what is generating traffic without being in the inventory.
Each sighting can be inspected: the map of what the unknown address is talking to, built from data already collected.
An unknown device on a declared subnet is either an oversight in the inventory or something that should not be there. Both are worth a look.
THE DECOYS
Honeypot
Fake services on dedicated agents. No legitimate user has any reason to connect to them, so every connection is a signal rather than a probability.
No false positives, by construction — not by tuning.
Dobermann and Honeypot are not a SIEM. They are the inventory turned into defence, and they live on what the inventory already knows.
Audit and logs
Who signed in, and who changed what. The first line an auditor asks for, and the one most products cannot produce without an export.
Access
Sign-ins, by user and by tenant.
Changes
What was modified, by whom, and when.
Scans
What ran, where, and what it could not reach.
Exports
What left the platform, and who took it.
Compliance runs on the same data
NIS2 and DORA controls are measured on the inventory you already have, with every control that could not be assessed declared as such.
NIS2 · srv-erp-01
06/09 · 04:12
Supported operating system
Ubuntu 22.04 LTS · end of support 04/2027
compliant
Cleartext services
telnet listening — port 23, observed 06/09
critical
Service encryption
no check performed — run “Assess and check services”
not assessable
Software within lifecycle
2 packages past end of support
partial
No known vulnerabilities across 4 recognised packages of 380.
See your own posture
Run the trial on one site and read the findings against your real estate — including what could not be assessed.