Navigator ยท CAASM Platform

See what's actually in your environment.

No single tool has the complete picture. Navigator connects to the security and IT tools you already run (scanners, EDR, MDM, identity, CMDBs) and reconciles what they each report into one consolidated, deduplicated view of your devices, users, vulnerabilities, and software.


The problem

"How many devices do we have, and how well are they covered?"

Your MDM knows about managed laptops but not what's vulnerable on them. Your scanner sees open ports but not who's logged in. Ask that one question and you get five different partial answers. Navigator's job is to reconcile all of it into one clear, correct answer.

Devices

Laptops, servers, and endpoints, with hardware, OS, encryption status, EDR coverage, and IP addresses.

Users

Directory accounts with MFA enrollment, admin status, and the devices each account is associated with.

Vulnerabilities

Findings from your scanners and EDR, enriched with CVSS, EPSS, and CISA/VulnCheck Known Exploited data.

Software

Installed-software inventory per device, reported by connectors capable of software inventory.


How it works

Three ideas do all the work.

01

Connectors

Each connector fetches a tool's own data (devices, users, vulnerabilities, or software) and hands it to Navigator in a common shape. Navigator does the polling; the tool side needs nothing but credentials.

02

Consensus assets

When multiple tools report the same laptop or person, Navigator matches them into a single record using strong identity signals, and keeps every source's value, so you see disagreements instead of a silently merged answer.

03

Findings

With everything reconciled into one record, the gaps stand out: a device with no EDR agent, an account without MFA, an endpoint that's gone stale. Navigator surfaces them so you can close the gap before it turns into an incident.

Connectors available today
TenableDevice42Microsoft Entra IDMicrosoft IntuneMicrosoft DefenderOktaCrowdStrike
See setup guides for each connector →

"Couldn't I just build this myself?"

The first version is easy. What isn't: every connector is a permanent maintenance commitment, cross-tool reconciliation is genuinely hard, and you now own the security of a system that holds credentials to every other security tool you run.

Read the honest answer →

Thirty days of full access. $0 to start.

Connect one tool and see real, consolidated asset data in a few minutes. Keep whatever tier makes sense once you know what's in your environment.