Endpoints
Workstations, servers, and laptops with installed software and patch level.
Agent-basedAqua Asset Management discovers every device, cloud resource, and identity in your estate, keeps the inventory current automatically, and shows you where the risk sits.
Agent, network, cloud, and identity discovery merge into a single inventory that updates itself as your estate changes.
Workstations, servers, and laptops with installed software and patch level.
Agent-basedSwitches, routers, firewalls, printers, and anything else answering on the wire.
Scan & SNMPInstances, storage, databases, and functions discovered through provider APIs.
AWS, Azure, GCPUsers, service accounts, and privileged roles with their access footprint.
IdP & ADInstalled packages and versions, matched against known vulnerabilities.
SBOM & versionsSanctioned and shadow SaaS, including third-party app permissions.
OAuth grantsDomains, certificates, and exposed services attributed back to your organisation.
Internet-facingOperational and unmanaged devices identified without active probing.
Passive discoveryAgent, network, cloud, and identity discovery run continuously so new assets appear in the inventory within minutes.
Assets are typed, grouped, and tagged automatically by function, environment, and business criticality.
Every asset carries an owner, team, and location, so remediation goes to the person who can actually action it.
Assets are scored on exposure, missing patches, and criticality, giving you a defensible patching order.
The inventory feeds GRC directly, satisfying asset management controls in ISO 27001, PCI-DSS, and beyond.
Full history per asset — first seen, changes, ownership moves, and decommission — with alerts on unexpected change.
Discovery runs continuously. New assets are found, classified, and scored without anyone filing a ticket.
Agents, network scans, cloud APIs, and identity connectors find everything in your estate, including assets nobody documented.
Each asset is typed, tagged, and grouped by environment and business criticality, then de-duplicated across discovery sources.
Exposure, missing patches, and criticality combine into a risk score that ranks what to fix first.
The inventory updates itself as assets change, and unexpected changes or newly unmanaged devices raise an alert.
Aqua Asset Management is built for teams who need a defensible inventory — for audits, for patching decisions, and for knowing what an alert is actually touching.
Continuous discovery, automatic classification, ownership tracking, and risk scoring across your whole estate.