Find out what is actually connected to your infrastructure. ORION performs a passive, continuous inventory of the assets on your network, providing up-to-date visibility into vulnerabilities without requiring agents on the devices.
Understanding the assets within the infrastructure is a fundamental prerequisite for managing cyber risk.
You can’t protect what you don’t know.
Increasingly distributed and interconnected infrastructures make it difficult to maintain a truly up-to-date inventory. Legacy devices, industrial equipment, IoT and IoMT systems, or unaccounted-for assets can create areas of poor visibility.
ORION continuously monitors network activity and builds a dynamic asset inventory, reducing blind spots and providing IT and security teams with the context they need to understand what is present, how it is configured, and how it communicates.
ORION does more than just create a static list of devices.
It builds a continuously updated view of the infrastructure to help IT and security teams understand what assets exist, what characteristics they have, and how they relate to each other within the network.
Zones, Conduits, and Communication Flows
Assets can be contextualized within the network architecture using Zones and Conduits, making segmentation and communication flows easier to understand and providing useful information for security and governance processes.
IT, OT, IoT, and Medical Survey
A single view of the assets across different technology environments, even when traditional infrastructure, industrial systems, smart devices, and medical equipment coexist.
New and Unknown Assets
Continuous monitoring makes it possible to identify new devices and previously unidentified assets as they appear.
Software, firmware, and legacy systems
The available information is used to improve understanding of the asset and identify software and firmware versions, as well as legacy or end-of-life systems.
Services and Protocols
ORION allows you to understand which services and protocols are observed in the infrastructure and to gain more context about asset communications.
CVE and Known Vulnerabilities
The characteristics identified in the assets can be correlated with known vulnerabilities, providing an additional layer of information for vulnerability and risk management activities.
Continuous visibility, without installing agents on assets.
ORION passively analyzes the information available in network communications without requiring any software to be installed on the monitored devices.
The identified assets are inventoried and progressively supplemented with the technical information that can be obtained: type, characteristics, software, firmware, services, protocols, and known vulnerabilities.
The information is organized in a centralized Asset Inventory that allows users to analyze assets, critical issues, and communication relationships, and to structure visibility through Zones and Conduits.
Frequently Asked Questions About ORION Asset Inventory and Asset Discovery
No. ORION uses a passive, agentless approach to detect and inventory assets on the network, a feature that is particularly useful even when OT, IoT, and IoMT devices and legacy systems are present.
ORION is designed to provide visibility into assets in IT, OT, IoT, and IoMT environments, creating a centralized inventory of the infrastructure.
Yes. Discovery occurs continuously, allowing the inventory to evolve alongside the network and to highlight the presence of new assets.
The information collected on assets makes it possible to identify legacy or end-of-life systems when such characteristics can be identified based on the observed data.
ORION can correlate available asset information with known vulnerabilities and CVEs, adding this context to the Asset Inventory.
ORION was primarily developed as a technology for asset discovery and passive asset inventory. Information on vulnerabilities enriches asset knowledge and can support vulnerability management processes, without turning ORION into a traditional active scanner.
ORION provides visibility into assets, vulnerability information, communication reports, and organization into Zones and Conduits. This data can support the asset management, risk management, and segmentation activities required by corporate cybersecurity processes.
