APPROACH · CMDB

What is a CMDB-centred inventory? Making the CMDB the system of record

SHORT ANSWER

A CMDB-centred inventory makes the configuration management database the system of record for assets and the services they support, and feeds it from discovery tools and connectors. Its strength is that IT workflows, such as incidents, changes and requests, already run on it. Its weakness is accuracy: a CMDB is only as good as what feeds it, which is why many teams check it against security tools rather than trust it alone.

By The Inventory Desk · CAASM Finder · Published 2026-10-11

Desk research from public vendor pages read on 27 September and 11 October 2026. Profiles follow our published method; we did not run the products.

A CMDB-centred approach keeps the CMDB as the system of record. Asset inventory platforms such as Axonius feed and correct the CMDB rather than replace it.

Systems of record (works alongside)

ServiceNow
A single, trusted system of record for configuration item data, with CMDB Workspace; incidents, changes, problems and requests consolidate on one CMDB.
Source: ServiceNow CMDB · Read 27 Sep 2026
Freshservice
The ITAM Growth plan includes asset discovery and a CMDB; Enterprise adds service discovery, application dependency mapping and business service mapping.
Source: Freshservice IT asset management pricing · Read 11 Oct 2026
Device42
Describes itself as a next generation CMDB, with dependency mapping and IP address management.
Source: Device42 features · Read 27 Sep 2026

How does CMDB-centred inventory work?

A CMDB stores configuration items (servers, applications, network devices, services) and the relationships between them, so that a change to one item shows what else it affects. IT service management processes read from it and write to it.

Discovery tools populate the CMDB by scanning infrastructure, and connectors bring in data from other systems. The CMDB then decides which source to trust for each field and keeps one record per configuration item.

Because workflows run on it, a CMDB is the natural place to act: open an incident for a device without an owner, raise a change for a server that needs an agent, retire a record for a device that no longer exists.

When does it fit?

IT workflows already run on a CMDB and depend on it.
You need to know which business services a device supports, not just that the device exists.
Audits ask for a single system of record.
You can invest in data modelling and someone to own the CMDB.

Where does it stop?

A CMDB records what its feeds tell it. Security questions, such as which laptops lack an EDR agent or which SaaS apps nobody approved, need data from security tools that a CMDB is not built around. And when feeds break or stop, the CMDB keeps old records without saying so. That is why the finder rarely picks a CMDB-centred approach alone: most teams pair it with CAASM aggregation or their own discovery to check and correct it. Axonius, for example, documents creating, updating and removing ServiceNow assets from its correlated data.

Which finder answers point to CMDB?

+1 if servers and network gear in offices or data centres (Where do your assets live?)
+2 if we do not have one (What state is your CMDB in?)
+1 if we have one, but people do not trust it (What state is your CMDB in?)
+4 if it works, and IT workflows depend on it (What state is your CMDB in?)
+2 if periodic audits that ask for asset evidence (How much compliance pressure do you face?)
+3 if serviceNow (What do you already run?)

Try the finder

Which vendors describe CMDB?

0 of 10 vendors describe CMDB-centred inventory on the pages we read, 5 with a condition, and 5 are not in our sources.

Vendors in alphabetical order, from their own pages.
Vendor	Status	What their pages say	Source
Armis Centrix	With a condition	Pushes enriched asset data back to your CMDB rather than replacing it.	Source: Armis Centrix for Asset Management and Security · Read 11 Oct 2026
Axonius	With a condition	Works alongside a CMDB rather than replacing it: the ServiceNow adapter fetches CMDB tables for reconciliation, and enforcement actions create, update or remove ServiceNow assets.	Source: Axonius docs: ServiceNow adapter · Read 11 Oct 2026
Censys ASM	Not in our sources	Not described on the pages we read.	None
JupiterOne	Not in our sources	Not described on the pages we read.	None
Lansweeper	With a condition	Feeds ITSM and CMDB tools such as ServiceNow, Jira Service Management, HaloITSM, Freshservice and TOPdesk.	Source: Lansweeper homepage · Read 27 Sep 2026
Microsoft Defender EASM	Not in our sources	Not described on the pages we read.	None
Qualys CSAM	With a condition	Syncs with ServiceNow and BMC ITSM tools rather than acting as a CMDB.	Source: Qualys Cybersecurity Asset Management · Read 11 Oct 2026
Rapid7 Surface Command	Not in our sources	Not described on the pages we read.	None
runZero	With a condition	Enriches a ServiceNow CMDB rather than acting as one.	Source: runZero integrations · Read 27 Sep 2026
Tenable One	Not in our sources	Not described on the pages we read.	None

Not in our sources is not a no. Ask the vendor, and send us a public source if one exists.

What should you ask a vendor?

Which discovery and connector sources populate the CMDB, and how often?
How does the CMDB decide which source wins when two disagree?
How do we find records that are stale, duplicated or missing?
Which security tools can check the CMDB and send corrections back?

Questions people ask

Why does nobody trust our CMDB?

Usually because its feeds are incomplete or out of date: discovery covers some networks but not others, and devices that left never get retired. Comparing the CMDB against EDR, identity and cloud data shows where it is wrong.

Is ServiceNow a CAASM tool?

ServiceNow describes a CMDB, Discovery and Service Graph Connectors that curate data from many sources. Its centre is configuration items and IT workflows rather than security coverage, so many teams pair it with a CAASM platform that feeds it.

What happened to Armis and ServiceNow?

ServiceNow completed its acquisition of Armis in April 2026. Armis Centrix remains available as a standalone product and as part of the ServiceNow AI Platform.