Infrastructure & identity
Organize discovered and imported assets in a consistent class hierarchy, with owners, sites, environments, and the evidence behind each identity.
Vista Platform / Automated asset inventory
Know your assets.
Understand their cryptography.
Bring your infrastructure, software, services, and cryptographic assets into one evidence-backed inventory. See what you have, how it connects, and where to act.
The self-hosted cryptographic system of record. Free, source-available Core is ready now to start discovering cryptographic assets.
Free CoreAvailable nowNo asset cap
Signals become a system of record01 / VISTA
01 / Discover → inventory → evaluate → act → prove
From scattered observations
to an inventory you can govern.
Connect authorized discovery channels. Vista brings their evidence together, preserves its origin, and keeps identity and assessment coverage visible.
- 01
Discover
Collect network, host, cloud, and imported evidence.
- 02
Inventory
Resolve identity and review ambiguous records.
- 03
Evaluate
Assess software, lifecycle, and cryptographic posture.
- 04
Act
Connect findings to owners and remediation work.
- 05
Prove
Generate scoped evidence and track what changed.
Coverage depends on the channels you connect and enable. An unobserved asset or missing finding is never proof of safety.
02 / One asset. Its full context.
A living record of the things
your team actually manages.
A server with five services is one asset with five endpoints. Its ownership, software, cryptography, relationships, findings, and history stay together.
Software & lifecycle
Explore installed software across hosts. Use supported catalog matches to identify vulnerabilities and end-of-life versions, with removal history retained.
Services & cryptography
Connect listening services, endpoints, certificates, keys, and cryptographic configurations to the assets that use them.
Your inventory, in view.
See your estate in context. Vista’s inventory map groups devices by site and network, connecting infrastructure, cloud resources, and the cryptography they use.
03 / Evidence before assumptions
Know what is established.
See what needs a closer look.
Vista retains observations and separates identity, approval, classification, and assessment. Ambiguous records can remain provisional while your team investigates.
Where did this fact come from?
Source, timestamp, identifiers, and collection context stay attached.
Does this represent the same asset?
Review conflicting identities and merge proposals with evidence and a recorded reason.
Do we have enough evidence to judge?
Missing coverage stays visible. It never becomes a passing result.
04 / Relationships & impact
Put every asset
in context.
Explore relationships between assets, services, and cloud resources. Follow recorded dependencies to understand downstream impact and reach the asset behind a finding.
Measured, imported, declared, and inferred relationships remain distinct. An observed connection alone is not a business dependency.
Business servicePayments
depends on
Application serverpayments-app-01
depends on ↓
Databasepayments-db-01
runs on ↓
InfrastructureCompute host
05 / Ask better questions of your estate
One inventory. More ways to understand it.
Combine class, owner, environment, software, findings, and relationship filters. Save a team view or reuse the same query as a reproducible evidence Scope.
QUESTIONS YOUR INVENTORY CAN ANSWER
Which production servers have end-of-life software?
What depends on this asset?
Which cryptographic configurations need migration?
Where are we still missing assessment coverage?
Queries, saved views, dashboards, Scopes, and read-only MCP access are Core. Enterprise adds natural-language query assistance.
06 / Cryptography, connected to the estate
The context is broader.
The cryptographic depth stays.
07 / Start with the complete foundation
Start finding assets with free Core today.
Core
Free and source-available. Use discovery, the internal CMDB, relationships, maps, software inventory, queries, dashboards, cryptographic evaluation, and CBOM generation now. No asset, sensor, seat, or time caps.
Enterprise
Add CMDB/ITSM synchronization, NetBox integration, federated identity, regulated framework content, custom policies, and CBOM signing, attestation, and comparison.
MSP
Build on Enterprise with a cross-tenant management plane for service providers operating their own customer environments.
All three editions are self-hosted. Existing commercial CMDB and service-desk workflows can remain in place.
A few practical answers
Built for the way your estate works.
Go deeper: Why inventory needs a system of record · Product documentation.
What is automated asset inventory?
Automated asset inventory collects observations from connected sources and organizes them into records of the systems your team manages. Vista connects assets to software, services, ownership, relationships, and cryptography while retaining evidence provenance and freshness.
How does Vista reconcile duplicate observations?
Vista correlates identity evidence into canonical asset records, preserving the sources behind each conclusion. Ambiguous identities can remain provisional for review; multiple observations do not automatically mean multiple assets.
What do we need to deploy Vista?
Run Vista Core in infrastructure you control, then connect authorized discovery sources for your first inventory scope. Collection depends on network visibility, supported integrations, and the permissions you provide. Start with the Docker and Kubernetes evaluation paths and installation documentation.
Is Vista a replacement for our commercial CMDB?
Vista provides a discovery-driven internal CMDB and evidence-backed inventory. Procurement, contracts, cost centers, and full service-desk workflows remain in your existing systems. Enterprise adds supported CMDB/ITSM connectors; synchronization runs on demand.
Does Vista automatically discover every asset?
Coverage depends on authorized collectors, connected sources, enabled collection, and reachable environments. Host inventory is opt-in. Vista preserves unresolved observations, provisional identities, and assessment gaps so you can see what still needs attention.
Does Vista assess software vulnerabilities?
Vista matches supported software inventory against vulnerability and lifecycle catalogs. Coverage depends on collected software identifiers and available catalog data. It is not a vulnerability scanner or penetration-testing product; unmatched software remains unassessed.
How does this help our cryptographic program?
Assets, owners, software, and relationships give cryptographic findings operational context. Teams can investigate affected systems, assign work, evaluate PQC readiness, and generate evidence from the same underlying inventory.
Self-hosted. Free and source-available.
Start finding assets with free Core.
Run Vista Core in infrastructure you control. Connect supported discovery sources, start finding cryptographic assets, and build an inventory your team can investigate, act on, and explain.
Stay in the loop
Keep up with Vista.
Get release notes, product updates, and opportunities to share feedback. Joining the mailing list is optional—Core is available without a subscription.