Passive asset inventory without touching devices
An inventory that stays current on its own, built without installing anything on, or sending anything to, the devices being inventoried.
- 01
Challenge
The inventory is a spreadsheet that was last right during the previous audit. Agents cannot go on controllers, clinical devices or cameras, and nobody will approve a scan of the production network.
- 02
What WireTrace sees
Mirrored traffic from SPAN, TAP or ERSPAN: device identity records, DHCP, names announced on the network, certificates and protocol behaviour.
- 03
What WireTrace understands
One durable identity per physical device, classified by domain, type, role and Purdue level, with the evidence and confidence behind each value.
- 04
What WireTrace decides
Which devices are known, which are new, and where evidence is missing or stale. An empty result is never presented as a clean one.
- 05
Integration / action
Inventory and changes are available through the read-only REST API and exports, and new-device alerts can be forwarded to the SIEM.
- 06
Outcome
An inventory that stays current on its own, built without installing anything on, or sending anything to, the devices being inventoried.
See it on your network.
A WireTrace evaluation runs on a mirror port, on your infrastructure, and shows your own devices, communications and risks.