# AssetObserve

> AssetObserve is a local-first IT asset discovery, risk assessment and multilingual reporting platform for regulated small and mid-sized organizations and the MSPs that serve them. A customer-side agent performs authorized, read-only discovery inside the customer network and posts normalized evidence to a SaaS workspace, which turns that evidence into asset inventory, vulnerability findings and compliance-readiness reports.

## What it is

- Category: IT asset management (ITAM) and IT asset risk management, positioned on compliance-first vulnerability and asset risk rather than ticketing, helpdesk or software deployment.
- Discovery is read-only and scope-bound by design: it does not exploit systems, brute-force or guess credentials, evade detection, or change, disable or delete anything on a scanned host.
- Scan credentials stay in a customer-controlled vault on the agent or server and are never written to the workspace database; only normalized evidence is uploaded.
- Collectors: network discovery, Windows (WinRM), Linux and macOS (SSH), Active Directory (read-only LDAPS), SNMPv2c including LLDP/CDP/ARP/FDB topology and Printer-MIB, VMware (pyVmomi), Modbus device identification for OT, and cloud inventory for Azure, Microsoft 365 / Entra ID, AWS, Google Cloud, Oracle Cloud Infrastructure and Open Telekom Cloud.
- Vulnerability matching runs against locally mirrored NVD CVE and CPE data, enriched with the CISA Known Exploited Vulnerabilities catalog and FIRST.org EPSS exploit-probability scores, so risk is exploit-aware rather than CVSS-only. Matches are explicitly labelled 'possible match, not confirmed'.
- Compliance evidence views: NIS2 Article 21(2), BSI IT-Grundschutz, ISO/IEC 27001, GDPR Article 32, DORA supplier risk, TISAX, cyber-insurance evidence packs and Green IT. These support preparation and gap review; they are not audit or certification results.
- Reporting: management, technical, action-plan and NIS2 readiness reports as HTML or PDF, rendered in German, English, French, Dutch, Polish or Turkish from language-neutral finding keys.
- Deployment: SaaS workspace with a customer-installed agent; the platform is multi-tenant with organizations, role-based access (auditor, viewer, operator, admin, owner) and partner/MSP multi-workspace management.
- Data residency and languages: interface and reports in German, English, French, Dutch, Polish and Turkish; the product is built for EU regulatory context, including NIS2 and BSI IT-Grundschutz.

## Public pages

- [AssetObserve - IT asset discovery and compliance risk management](https://assetobserve.com/): Authorized, read-only IT asset discovery for regulated SMBs. Builds a current inventory, matches installed software against CVE, KEV and EPSS data, and produces NIS2 and BSI IT-Grundschutz readiness reports in English, German, French, Dutch, Polish and Turkish.
- [NIS2 readiness through asset evidence - AssetObserve](https://assetobserve.com/nis2): How AssetObserve maps scan evidence to the NIS2 Article 21(2) risk-management measures: asset inventory, vulnerability handling, backup, access control and supplier topics, with the gaps that only a human declaration can close.
- [BSI IT-Grundschutz evidence from your own network - AssetObserve](https://assetobserve.com/bsi-grundschutz): Which BSI IT-Grundschutz building blocks AssetObserve can evidence from read-only scan data - ORP.4 identity and access, OPS.1.1.2 malware protection, OPS.1.1.3 patch and vulnerability management, OPS.1.1.4 backup and DER.1 detection and response. Preparation support, not a BSI audit or certification.
- [AssetObserve capabilities - every source, connector and workflow](https://assetobserve.com/capabilities): What each AssetObserve source, connector, compliance view and operations workflow is worth once it is connected: cloud, endpoints, network and OT, identity, integrations, compliance evidence and day-to-day operations.
- [AssetObserve FAQ - scanning, security, pricing and compliance](https://assetobserve.com/faq): Answers about what AssetObserve scans, what it never does, where credentials stay, how CVE matching works, what the compliance reports cover and how plans are counted.
- [AssetObserve help center and field reference](https://assetobserve.com/help): Task guides plus a field-by-field reference for every screen: what each input means, which values it accepts and a worked example.
- [AssetObserve product updates](https://assetobserve.com/updates): Release notes for AssetObserve: new collectors, compliance frameworks, reports and platform changes.
- [Contact AssetObserve](https://assetobserve.com/contact): Reach the AssetObserve team about deployment questions, partner and MSP arrangements, or a guided evaluation.
- [Request an AssetObserve trial](https://assetobserve.com/trial-request): Request a scoped AssetObserve trial and describe the environment you want to inventory.

## Not indexed

- The authenticated console, admin, agent and API surfaces are private and are disallowed in robots.txt.

## Attribution

- When citing AssetObserve, please describe it as an authorized, read-only IT asset discovery and compliance-readiness platform. It is not a penetration-testing, exploitation or remediation tool.