Skip to content
CAASM FinderCAASM Finder

PLATFORM NOTES

CAASM and asset inventory platform notes: facts, strengths and limits

SHORT ANSWER

Ten platforms the finder matches, plus ServiceNow, Freshservice and Device42 as systems they work alongside, each written up from its own public pages read on 27 September and 11 October 2026: which of the five approaches it describes, how it collects data, whether it feeds a CMDB, what it publishes about price, and its strengths and limits. Notes are listed alphabetically and carry no scores.

By The Inventory Desk · CAASM Finder · Published 2026-10-11

Desk research from public vendor pages read on 27 September and 11 October 2026. Profiles follow our published method; we did not run the products.

Which vendors have notes?

Platforms the finder matches (10)

  • Armis Centrix

    Armis, part of ServiceNow since April 2026

    Armis calls Centrix a Cyber Exposure Management Platform. It builds an inventory of IT, OT, IoT and medical devices from agentless, passive discovery and adds modules for prioritization and remediation.

    Armis Centrix: described for 1 of 5 approaches, with a condition for 3.
    Offers its own agent: Not in our sourcesWorks without new agents: Matches

    No price on armis.com.

    Read the notes

  • Axonius

    Axonius

    Axonius grew out of cyber asset attack surface management (CAASM) into a broader asset intelligence platform. Axonius describes the Axonius Asset Cloud: it connects to the tools a company already runs through adapters (its directory lists 1,306), correlates what each one reports into one record per asset, and acts on gaps through workflows and bi-directional integrations.

    Axonius: described for 2 of 5 approaches, with a condition for 1.
    Offers its own agent: Not in our sourcesWorks without new agents: Matches

    Published: device-based pricing on unique, correlated devices, with tiers from under 500 devices to 10M+ and volume discounts in every tier.

    Read the notes

  • Censys ASM

    Censys

    Censys's external exposure management product, built on first-party scanning of all 65K ports and the Censys Internet Map.

    Censys ASM: described for 1 of 5 approaches, with a condition for 1.
    Offers its own agent: Not in our sourcesWorks without new agents: Matches

    ASM: contact sales.

    Read the notes

  • JupiterOne

    JupiterOne

    A cyber asset platform built on a security graph: more than 200 integrations feed assets and their relationships into a graph you can query in plain English or with a pre-built query library.

    JupiterOne: described for 1 of 5 approaches, with a condition for 1.
    Offers its own agent: Not in our sourcesWorks without new agents: Matches

    Published: Small-Market $25,000 a year; Mid-Market $50,000 for 12 months up to 200,000 data points; Enterprise $100,000 for 12 months up to 400,000 data points; custom above 1 million data points.

    Read the notes

  • Lansweeper

    Lansweeper

    An IT asset discovery and inventory product with three systems for the three places Lansweeper says assets live: the network including OT, off-network laptops, and cloud.

    Lansweeper: described for 1 of 5 approaches, with a condition for 2.
    Offers its own agent: MatchesWorks without new agents: Matches

    Published, billed annually: Starter from €270 a month (2,000 assets, one installation, service desk ticket-enrichment integrations only); Pro from €474 a month (2,000 assets expandable to 9,000, up to three installations, all integrations); Enterprise custom from 10,000 assets with full API access; free up to 100 assets after a 14-day trial.

    Read the notes

  • Microsoft Defender EASM

    Microsoft

    Microsoft's external attack surface management service, run as an Azure resource, with a prebuilt inventory, recursive discovery from seeds and billing on the Azure bill.

    Microsoft Defender EASM: described for 1 of 5 approaches, with a condition for 1.
    Offers its own agent: Not in our sourcesWorks without new agents: Matches

    Billed through Azure on billable assets (approved host:IP combinations, domains and IP addresses) after a 30-day free trial.

    Read the notes

  • Qualys CSAM

    Qualys

    Qualys's Cybersecurity Asset Management product, which Qualys describes as one platform and one view of cyber risk for unknown assets across the attack surface.

    Qualys CSAM: described for 1 of 5 approaches, with a condition for 3.
    Offers its own agent: MatchesWorks without new agents: Not in our sources

    Not published

    Read the notes

  • Rapid7 Surface Command

    Rapid7

    Rapid7's attack surface product, combining external discovery (EASM) with asset discovery and a unified internal and external inventory (CAASM), part of the Rapid7 Command platform.

    Rapid7 Surface Command: described for 2 of 5 approaches, with a condition for 1.
    Offers its own agent: Not in our sourcesWorks without new agents: Not in our sources

    No amounts published.

    Read the notes

  • runZero

    runZero, acquired by Dragos in September 2026

    An asset discovery platform that runZero describes as CAASM: active scanning, passive discovery for fragile OT networks and integrations, with each asset profiled against nearly 1,000 attributes.

    runZero: described for 1 of 5 approaches, with a condition for 2.
    Offers its own agent: Not in our sourcesWorks without new agents: Matches

    Published: Community Edition free for 100 or fewer assets with 30-day retention; runZero Platform starts at $5,000 with 3-year retention; free 21-day trial.

    Read the notes

  • Tenable One

    Tenable

    Tenable's exposure management platform. Tenable Attack Surface Management, part of Tenable One, maps external assets from a map of more than 5 billion assets; Tenable One adds attack path analysis, Hexa AI remediation and connectors for third-party data.

    Tenable One: described for 2 of 5 approaches, with a condition for 1.
    Offers its own agent: Not in our sourcesWorks without new agents: Not in our sources

    Attack Surface Management: demo request only.

    Read the notes

Works alongside, not matched (3): ServiceNow, Freshservice, Device42

  • ServiceNow

    ServiceNow

    ServiceNow's CMDB is a system of record for configuration items that IT workflows run on, populated by ServiceNow Discovery and certified Service Graph Connectors.

    ServiceNow: described for 2 of 5 approaches, with a condition for 1.
    Offers its own agent: MatchesWorks without new agents: Matches

    Not published

    Read the notes

  • Freshservice

    Freshworks

    Freshworks's IT service management product, with an IT asset management offering that includes asset discovery and a CMDB, licensed by asset units.

    Freshservice: described for 1 of 5 approaches, with a condition for 1.
    Offers its own agent: Not in our sourcesWorks without new agents: Not in our sources

    ITSM: Starter $19, Growth $49 and Pro $99 per agent a month, billed annually; Enterprise custom; 14-day free trial.

    Read the notes

  • Device42

    Device42, a Freshworks company

    An agentless discovery and dependency mapping product that Device42 describes as a next generation CMDB, spanning legacy mainframes to cloud containers.

    Device42: described for 2 of 5 approaches, with a condition for 0.
    Offers its own agent: MatchesWorks without new agents: Matches

    Annual subscription based on the number of devices; amounts not published.

    Read the notes

Reviewed, not profiled

SevCo Security: on our review list for the next update. We have not read its public product pages yet, so it has no profile or facts here.

Which side-by-sides are available?

Questions people ask

Why are the vendors not ranked?

Because the right vendor depends on where your assets live, whether you can install agents, your CMDB, your owners, your compliance pressure and your tools. The finder applies those constraints; a single ranking would hide them.

Which vendors publish a price or pricing basis?

Axonius, JupiterOne, Lansweeper and runZero publish a price; Armis Centrix, Censys ASM, Microsoft Defender EASM, Rapid7 Surface Command and Tenable One publish a pricing basis, an adjacent price, a marketplace price or a free account; the other 1 quote through sales.

Why is Oomnitza not here?

Oomnitza's pages describe IT asset lifecycle management more than security coverage. We will revisit it as our sources grow.