# CAASM Finder > A finder for cyber asset attack surface management (CAASM) and asset inventory approaches: answer six questions to see which approach fits (CAASM aggregation, agent-based inventory, external attack surface management, CMDB-centred inventory, exposure management) and which vendors' published facts match. No scores or rankings. Vendor pages read 27 September and 11 October 2026. ## Start here - [Home](https://caasmfinder.com/): what the five asset inventory approaches are, what the finder asks, and the vendors it covers. - [CAASM finder](https://caasmfinder.com/caasm-finder): six questions that weigh the five approaches and list the vendors whose published facts match. - [How matching works](https://caasmfinder.com/how-matching-works): the published rules behind the finder and the evidence standard. - [Approaches](https://caasmfinder.com/approach): the five approaches to asset inventory and which vendors describe each. - [Asset census](https://caasmfinder.com/asset-census): vendor facts side by side: approaches, coverage, agents, CMDB support and pricing. ## Approaches - [CAASM aggregation](https://caasmfinder.com/approach/caasm-aggregation): Connects to the security and IT tools you already run through API connectors and merges what they report into one record per asset. - [Agent-based inventory](https://caasmfinder.com/approach/agent-based-inventory): Collects inventory itself, through an agent on each device or its own network scanning, instead of reading other tools. - [External attack surface management](https://caasmfinder.com/approach/external-attack-surface): Looks at your organisation from the internet to find exposed assets nobody listed. - [CMDB-centred inventory](https://caasmfinder.com/approach/cmdb-centred): Makes the configuration management database the system of record and feeds it from discovery and connectors. - [Exposure management](https://caasmfinder.com/approach/exposure-management): Puts asset, vulnerability and threat data together to decide which exposures to fix first and route the work. ## Platform notes - [Platform notes](https://caasmfinder.com/platform-notes): fact-only notes on every vendor the finder covers, alphabetical. - [Armis Centrix](https://caasmfinder.com/platform-notes/armis): published facts, strengths and limits of Armis Centrix for asset inventory and CAASM. - [Axonius](https://caasmfinder.com/platform-notes/axonius): published facts, strengths and limits of Axonius for asset inventory and CAASM. - [Censys ASM](https://caasmfinder.com/platform-notes/censys): published facts, strengths and limits of Censys ASM for asset inventory and CAASM. - [Device42](https://caasmfinder.com/platform-notes/device42): published facts, strengths and limits of Device42 for asset inventory and CAASM. - [Freshservice](https://caasmfinder.com/platform-notes/freshservice): published facts, strengths and limits of Freshservice for asset inventory and CAASM. - [JupiterOne](https://caasmfinder.com/platform-notes/jupiterone): published facts, strengths and limits of JupiterOne for asset inventory and CAASM. - [Lansweeper](https://caasmfinder.com/platform-notes/lansweeper): published facts, strengths and limits of Lansweeper for asset inventory and CAASM. - [Microsoft Defender EASM](https://caasmfinder.com/platform-notes/microsoft-easm): published facts, strengths and limits of Microsoft Defender EASM for asset inventory and CAASM. - [Qualys CSAM](https://caasmfinder.com/platform-notes/qualys): published facts, strengths and limits of Qualys CSAM for asset inventory and CAASM. - [Rapid7 Surface Command](https://caasmfinder.com/platform-notes/rapid7): published facts, strengths and limits of Rapid7 Surface Command for asset inventory and CAASM. - [runZero](https://caasmfinder.com/platform-notes/runzero): published facts, strengths and limits of runZero for asset inventory and CAASM. - [ServiceNow](https://caasmfinder.com/platform-notes/servicenow): published facts, strengths and limits of ServiceNow for asset inventory and CAASM. - [Tenable One](https://caasmfinder.com/platform-notes/tenable): published facts, strengths and limits of Tenable One for asset inventory and CAASM. ## Side by side - [Armis vs Axonius](https://caasmfinder.com/armis-alongside-axonius): Armis Centrix and Axonius compared on facts only: approaches described, estate coverage, agents, CMDB support, platforms and pricing. No scores. - [Armis vs Censys](https://caasmfinder.com/armis-alongside-censys): Armis Centrix and Censys ASM compared on facts only: approaches described, estate coverage, agents, CMDB support, platforms and pricing. No scores. - [Armis vs JupiterOne](https://caasmfinder.com/armis-alongside-jupiterone): Armis Centrix and JupiterOne compared on facts only: approaches described, estate coverage, agents, CMDB support, platforms and pricing. No scores. - [Armis vs Lansweeper](https://caasmfinder.com/armis-alongside-lansweeper): Armis Centrix and Lansweeper compared on facts only: approaches described, estate coverage, agents, CMDB support, platforms and pricing. No scores. - [Armis vs Defender EASM](https://caasmfinder.com/armis-alongside-microsoft-easm): Armis Centrix and Microsoft Defender EASM compared on facts only: approaches described, estate coverage, agents, CMDB support, platforms and pricing. No scores. - [Armis vs Qualys](https://caasmfinder.com/armis-alongside-qualys): Armis Centrix and Qualys CSAM compared on facts only: approaches described, estate coverage, agents, CMDB support, platforms and pricing. No scores. - [Armis vs Rapid7](https://caasmfinder.com/armis-alongside-rapid7): Armis Centrix and Rapid7 Surface Command compared on facts only: approaches described, estate coverage, agents, CMDB support, platforms and pricing. No scores. - [Armis vs runZero](https://caasmfinder.com/armis-alongside-runzero): Armis Centrix and runZero compared on facts only: approaches described, estate coverage, agents, CMDB support, platforms and pricing. No scores. - [Armis vs Tenable](https://caasmfinder.com/armis-alongside-tenable): Armis Centrix and Tenable One compared on facts only: approaches described, estate coverage, agents, CMDB support, platforms and pricing. No scores. - [Axonius vs Censys](https://caasmfinder.com/axonius-alongside-censys): Axonius and Censys ASM compared on facts only: approaches described, estate coverage, agents, CMDB support, platforms and pricing. No scores. - [Axonius vs JupiterOne](https://caasmfinder.com/axonius-alongside-jupiterone): Axonius and JupiterOne compared on facts only: approaches described, estate coverage, agents, CMDB support, platforms and pricing. No scores. - [Axonius vs Lansweeper](https://caasmfinder.com/axonius-alongside-lansweeper): Axonius and Lansweeper compared on facts only: approaches described, estate coverage, agents, CMDB support, platforms and pricing. No scores. - [Axonius vs Defender EASM](https://caasmfinder.com/axonius-alongside-microsoft-easm): Axonius and Microsoft Defender EASM compared on facts only: approaches described, estate coverage, agents, CMDB support, platforms and pricing. No scores. - [Axonius vs Qualys](https://caasmfinder.com/axonius-alongside-qualys): Axonius and Qualys CSAM compared on facts only: approaches described, estate coverage, agents, CMDB support, platforms and pricing. No scores. - [Axonius vs Rapid7](https://caasmfinder.com/axonius-alongside-rapid7): Axonius and Rapid7 Surface Command compared on facts only: approaches described, estate coverage, agents, CMDB support, platforms and pricing. No scores. - [Axonius vs runZero](https://caasmfinder.com/axonius-alongside-runzero): Axonius and runZero compared on facts only: approaches described, estate coverage, agents, CMDB support, platforms and pricing. No scores. - [Axonius vs Tenable](https://caasmfinder.com/axonius-alongside-tenable): Axonius and Tenable One compared on facts only: approaches described, estate coverage, agents, CMDB support, platforms and pricing. No scores. - [Censys vs JupiterOne](https://caasmfinder.com/censys-alongside-jupiterone): Censys ASM and JupiterOne compared on facts only: approaches described, estate coverage, agents, CMDB support, platforms and pricing. No scores. - [Censys vs Lansweeper](https://caasmfinder.com/censys-alongside-lansweeper): Censys ASM and Lansweeper compared on facts only: approaches described, estate coverage, agents, CMDB support, platforms and pricing. No scores. - [Censys vs Defender EASM](https://caasmfinder.com/censys-alongside-microsoft-easm): Censys ASM and Microsoft Defender EASM compared on facts only: approaches described, estate coverage, agents, CMDB support, platforms and pricing. No scores. - [Censys vs Qualys](https://caasmfinder.com/censys-alongside-qualys): Censys ASM and Qualys CSAM compared on facts only: approaches described, estate coverage, agents, CMDB support, platforms and pricing. No scores. - [Censys vs Rapid7](https://caasmfinder.com/censys-alongside-rapid7): Censys ASM and Rapid7 Surface Command compared on facts only: approaches described, estate coverage, agents, CMDB support, platforms and pricing. No scores. - [Censys vs runZero](https://caasmfinder.com/censys-alongside-runzero): Censys ASM and runZero compared on facts only: approaches described, estate coverage, agents, CMDB support, platforms and pricing. No scores. - [Censys vs Tenable](https://caasmfinder.com/censys-alongside-tenable): Censys ASM and Tenable One compared on facts only: approaches described, estate coverage, agents, CMDB support, platforms and pricing. No scores. - [JupiterOne vs Lansweeper](https://caasmfinder.com/jupiterone-alongside-lansweeper): JupiterOne and Lansweeper compared on facts only: approaches described, estate coverage, agents, CMDB support, platforms and pricing. No scores. - [JupiterOne vs Defender EASM](https://caasmfinder.com/jupiterone-alongside-microsoft-easm): JupiterOne and Microsoft Defender EASM compared on facts only: approaches described, estate coverage, agents, CMDB support, platforms and pricing. No scores. - [JupiterOne vs Qualys](https://caasmfinder.com/jupiterone-alongside-qualys): JupiterOne and Qualys CSAM compared on facts only: approaches described, estate coverage, agents, CMDB support, platforms and pricing. No scores. - [JupiterOne vs Rapid7](https://caasmfinder.com/jupiterone-alongside-rapid7): JupiterOne and Rapid7 Surface Command compared on facts only: approaches described, estate coverage, agents, CMDB support, platforms and pricing. No scores. - [JupiterOne vs runZero](https://caasmfinder.com/jupiterone-alongside-runzero): JupiterOne and runZero compared on facts only: approaches described, estate coverage, agents, CMDB support, platforms and pricing. No scores. - [JupiterOne vs Tenable](https://caasmfinder.com/jupiterone-alongside-tenable): JupiterOne and Tenable One compared on facts only: approaches described, estate coverage, agents, CMDB support, platforms and pricing. No scores. - [Lansweeper vs Defender EASM](https://caasmfinder.com/lansweeper-alongside-microsoft-easm): Lansweeper and Microsoft Defender EASM compared on facts only: approaches described, estate coverage, agents, CMDB support, platforms and pricing. No scores. - [Lansweeper vs Qualys](https://caasmfinder.com/lansweeper-alongside-qualys): Lansweeper and Qualys CSAM compared on facts only: approaches described, estate coverage, agents, CMDB support, platforms and pricing. No scores. - [Lansweeper vs Rapid7](https://caasmfinder.com/lansweeper-alongside-rapid7): Lansweeper and Rapid7 Surface Command compared on facts only: approaches described, estate coverage, agents, CMDB support, platforms and pricing. No scores. - [Lansweeper vs runZero](https://caasmfinder.com/lansweeper-alongside-runzero): Lansweeper and runZero compared on facts only: approaches described, estate coverage, agents, CMDB support, platforms and pricing. No scores. - [Lansweeper vs Tenable](https://caasmfinder.com/lansweeper-alongside-tenable): Lansweeper and Tenable One compared on facts only: approaches described, estate coverage, agents, CMDB support, platforms and pricing. No scores. - [Defender EASM vs Qualys](https://caasmfinder.com/microsoft-easm-alongside-qualys): Microsoft Defender EASM and Qualys CSAM compared on facts only: approaches described, estate coverage, agents, CMDB support, platforms and pricing. No scores. - [Defender EASM vs Rapid7](https://caasmfinder.com/microsoft-easm-alongside-rapid7): Microsoft Defender EASM and Rapid7 Surface Command compared on facts only: approaches described, estate coverage, agents, CMDB support, platforms and pricing. No scores. - [Defender EASM vs runZero](https://caasmfinder.com/microsoft-easm-alongside-runzero): Microsoft Defender EASM and runZero compared on facts only: approaches described, estate coverage, agents, CMDB support, platforms and pricing. No scores. - [Defender EASM vs Tenable](https://caasmfinder.com/microsoft-easm-alongside-tenable): Microsoft Defender EASM and Tenable One compared on facts only: approaches described, estate coverage, agents, CMDB support, platforms and pricing. No scores. - [Qualys vs Rapid7](https://caasmfinder.com/qualys-alongside-rapid7): Qualys CSAM and Rapid7 Surface Command compared on facts only: approaches described, estate coverage, agents, CMDB support, platforms and pricing. No scores. - [Qualys vs runZero](https://caasmfinder.com/qualys-alongside-runzero): Qualys CSAM and runZero compared on facts only: approaches described, estate coverage, agents, CMDB support, platforms and pricing. No scores. - [Qualys vs Tenable](https://caasmfinder.com/qualys-alongside-tenable): Qualys CSAM and Tenable One compared on facts only: approaches described, estate coverage, agents, CMDB support, platforms and pricing. No scores. - [Rapid7 vs runZero](https://caasmfinder.com/rapid7-alongside-runzero): Rapid7 Surface Command and runZero compared on facts only: approaches described, estate coverage, agents, CMDB support, platforms and pricing. No scores. - [Rapid7 vs Tenable](https://caasmfinder.com/rapid7-alongside-tenable): Rapid7 Surface Command and Tenable One compared on facts only: approaches described, estate coverage, agents, CMDB support, platforms and pricing. No scores. - [runZero vs Tenable](https://caasmfinder.com/runzero-alongside-tenable): runZero and Tenable One compared on facts only: approaches described, estate coverage, agents, CMDB support, platforms and pricing. No scores. ## Learn - [CAASM lessons](https://caasmfinder.com/caasm-lessons): short lessons on building an asset inventory you can trust. - [Lesson 01: Why Every Tool Counts a Different Number of Assets](https://caasmfinder.com/caasm-lessons/why-every-tool-counts-a-different-number): The EDR console, the identity provider, the cloud console and the CMDB each count what they can see. Why the numbers never match, and what that tells you. - [Lesson 02: Connectors or Agents: Two Ways to Collect Asset Data](https://caasmfinder.com/caasm-lessons/connectors-or-agents): API connectors read what your tools already know; agents and scans collect it again first-hand. What each sees, what each costs you, and why most estates use both. - [Lesson 03: When the CMDB and the Security Tools Disagree](https://caasmfinder.com/caasm-lessons/when-the-cmdb-and-security-tools-disagree): Why a CMDB drifts from what security tools report, how to find the differences, who should decide which record wins, and how to feed corrections back. - [Lesson 04: Coverage Gaps: Asking Which Devices Lack a Control](https://caasmfinder.com/caasm-lessons/asking-which-devices-lack-a-control): The most useful inventory question is not how many assets you have but which of them are missing something. How to write coverage questions and turn answers into work. - [Lesson 05: SaaS Apps and Identities as Assets](https://caasmfinder.com/caasm-lessons/saas-apps-and-identities-as-assets): Why an unapproved SaaS app or an orphaned service account belongs in the inventory, where the data comes from, and which approaches can see it. - [Lesson 06: OT and IoT: Inventory Without Touching Fragile Devices](https://caasmfinder.com/caasm-lessons/inventory-for-ot-and-iot-without-touching-devices): Why OT and IoT devices need passive discovery, what vendors describe for them, where NIST's draft OT guidance points, and how to work with the OT team. - [Lesson 07: Outside-In and Inside-Out: Where EASM Meets CAASM](https://caasmfinder.com/caasm-lessons/outside-in-and-inside-out): EASM looks at your organisation from the internet; CAASM looks from the inside through your tools. What each misses, how they connect, and when you need both. - [Lesson 08: Running a 30-Day CAASM Proof of Concept](https://caasmfinder.com/caasm-lessons/running-a-30-day-caasm-proof-of-concept): How to scope, run and judge a 30-day proof of concept for an asset inventory or CAASM platform, with questions that separate real coverage from a good demo. - [Asset terms](https://caasmfinder.com/asset-terms): glossary of 39 asset inventory and CAASM terms. - [CAASM FAQ](https://caasmfinder.com/caasm-faq): 22 short answers on CAASM, the CMDB, agents, EASM, pricing and this site. ## The Inventory Log - [The Inventory Log](https://caasmfinder.com/inventory-log): dated notes on CAASM and asset inventory. - [Asset Inventory News, February to September 2026: What Changed](https://caasmfinder.com/inventory-log/asset-inventory-news-february-to-september-2026): Two acquisitions, a CMDB reconciliation workspace, an MCP server, new graph features and two NIST publications: the asset inventory news from February to September 2026, grouped by theme. - [ServiceNow Now Owns Armis: Questions for Teams That Run Either](https://caasmfinder.com/inventory-log/servicenow-now-owns-armis): ServiceNow completed its acquisition of Armis in April 2026. What is confirmed, what is not, and the questions to ask if you run ServiceNow, Armis or both. - [Dragos Buys runZero: Questions for Current and Prospective Users](https://caasmfinder.com/inventory-log/dragos-buys-runzero): Dragos announced on 21 September 2026 that it had acquired runZero and NetRise. What is confirmed, what runZero offers today, and what to ask before renewing or buying. - [Published Prices in Asset Inventory: Who Shows a Number and Who Does Not](https://caasmfinder.com/inventory-log/published-prices-in-asset-inventory): Which of 11 asset inventory and CAASM platforms, and the 2 systems they work alongside, publish a price, a pricing basis, a marketplace price or nothing at all, as read on 27 September and 11 October 2026, and what to ask the rest. - [Eight Estates, Eight Results: What the CAASM Finder Recommends and Why](https://caasmfinder.com/inventory-log/eight-estates-eight-results): We ran the CAASM finder on eight example estates, from a small IT team to a SaaS-heavy company with many owners. The results, computed live, and what they show about the rules. - [Agentless Is Not Effortless: The Setup Work Behind Each Approach](https://caasmfinder.com/inventory-log/agentless-is-not-effortless): No agents does not mean no work. The setup each asset inventory approach needs, from API credentials and scan windows to seeds and CMDB data models, as the vendors describe it. - [NIST's Draft OT Security Guide and CSF 2.0 References: What They Mean for Asset Inventory](https://caasmfinder.com/inventory-log/nist-ot-draft-and-csf-references): NIST released a draft of SP 800-82 Revision 4 in September 2026 and finalized a CSF 2.0 informative references quick-start guide in August. What each covers and why asset inventory owners should read them. - [Endpoint Protection Coverage: Reading Lansweeper's 30,000-Organization Data](https://caasmfinder.com/inventory-log/endpoint-protection-coverage-data): Lansweeper reported in September 2026 that 96% of endpoints had some protection but 68.1% ran full EDR or next-generation antivirus. What the gap means and how to measure your own.