What Open-AudIT can do
Open-AudIT tells you exactly what is on your network, how it is configured and when it changes, without agents. The Community edition is free and open source. Features marked Professional or Enterprise need a commercial edition.
Agentless Discovery.
Automatically detect every device on your network (servers, switches, printers, VMs) without installing agents.
Discovery uses Nmap, SNMP, SSH and WMI to find and interrogate devices across your subnets. Point it at a network range and it maps servers, workstations, switches, routers, printers, phones and virtual machines.
Configuration Tracking.
Capture hardware and software configurations and alert when anything changes unexpectedly.
Every audit is stored, so you get a full timeline for each device. When a disk is swapped, software is installed or a setting changes, Open-AudIT records what changed and when.
Continuous Monitoring. (Professional) (commercial edition)
Schedule discoveries to run automatically so your asset inventory is always current.
Schedule discoveries hourly, daily or weekly. Your inventory stays current without anyone remembering to run a scan, and reports always reflect the network as it is today.
Vulnerability Detection. (Professional) (commercial edition)
Cross-reference discovered software and firmware against the NVD to surface CVEs relevant to your environment.
Open-AudIT cross-references your discovered software and firmware versions against the NIST National Vulnerability Database, so you only see CVEs that actually apply to your environment.
Compliance Reporting. (Enterprise) (commercial edition)
Map your estate against NIST, ISO 27001, Essential Eight and CIS Benchmarks with automated audit reports.
Ship-with reports cover software licensing, changes and security posture. Map your estate against NIST, ISO 27001, Essential Eight and CIS Benchmark controls with automated audit evidence.
Multi-site & MSP Ready. (Enterprise) (commercial edition)
Deploy collectors across distributed networks and consolidate results into a single inventory.
Collectors run discovery in remote networks and report back to a central server, consolidating distributed sites (or entire client fleets, for MSPs) into one inventory.
What Open-AudIT collects
Each audited device contributes hundreds of attributes to your inventory. A sample of what is captured:
Hardware
- Motherboard, CPU and memory
- Hard disks and partitions
- Network cards and MAC addresses
- Monitors and attached peripherals
- Serial numbers and asset tags
- Virtual machine host and guest details
Software
- Installed applications and versions
- Running services and daemons
- Users and groups
- Network shares
- Databases and web sites on servers
OS & settings
- Operating system name and version
- Installed patches and updates
- IP configuration and routes
- Scheduled tasks
- Security and firewall settings
- Warranty and purchase data via custom fields