Operate
Console route · /assets
Assets
Entity inventory for devices, identities, cloud resources, and related kinds known to the tenant control plane — with exposure context, linked incidents, and approval-gated containment requests.
What the inventory represents
Assets are entities the control plane knows about: endpoints, users, cloud resources, and other kinds from the shared Entity contract. They arrive through connectors, enrollment, imports, and correlation — not through a full CMDB sync product.
The list supports kind filters, critical-only views, search, and shell time range. Detail views show ownership, tags, vulnerability or exposure counts when present, linked incidents, and risk context. Treat missing fields as “not reported yet,” not as “safe.”
Actions from asset detail
From asset detail, operators with response permissions can request quarantine, egress block, and related actions. Those requests enter the same response_actions lifecycle used everywhere else: request → approve with scope → execute → audit. Evaluation mode may preview the flow without calling live executors.
Boundaries
Assets is not ServiceNow CMDB replacement and not a guarantee of complete coverage. A fresh live tenant may show thinner inventory than evaluation fixtures until connectors and enrollment populate entities. Linked-incident graphs in evaluation can look richer than production until correlation is populated.