Every device on the network, one accurate record each, and who can log in
SWOT Radar finds the devices on a network and keeps one authoritative record for each. Thirteen discovery queues run in parallel over ICMP, TCP, UDP, ARP, SNMP, SSH, WinRM, LDAP and cloud APIs, with no endpoint agent. Records are matched on MAC address before IP, reachability is rechecked every ten seconds, and directory and local account data attaches to each record.
The problem
An asset register fed by manual entry and periodic imports starts drifting the day it is populated. Hosts that appear between imports stay invisible, retired ones linger as active, and nothing in the entry says which accounts can reach the machine it describes.
13Discovery queues scanning in parallel
6Role levels with inherited permissions
0Endpoint agents required
Core capabilities
Continuous network discovery
ICMP sweep with TCP and UDP port probing across CIDR ranges
ARP table extraction, MAC vendor lookup, reverse DNS
Agentless deep enumeration
Linux over SSH: users, sudo members, packages, services, cron
Windows over WinRM: local admins, services, software, hotfixes
Asset record reconciliation
Matched on MAC before IP, so a host survives a lease change
Lifecycle held as Active, Inactive or Removed from live reachability
Directory and cloud inventory
AD computers, users, groups, GPOs and trusts over LDAP
AWS EC2, RDS, IAM, EKS and S3, plus Azure, GCP and VMware
Access mapping per asset
Local admins, sudo and wheel members, SSH users per host
Directory, local and cloud identities resolved into one model
SWOT Radar 2.0 datasheetPage 1 of 2
Enterprise capabilities
Risk scoring and attack paths
Six weighted factors on a 0 to 100 scale
Nested group chains and shortest paths to a domain controller
Distributed scan fabric
Thirteen queues with retry and exponential backoff
Cron schedules, worker heartbeat, live queue depth
Access control and audit trail
Six role levels with inherited permissions
Structured audit logging on asset, session and identity events
Inventory reporting and export
Filter on OS, device type, environment, EDR state and source
CSV export, board report and evidence views
Platform modules
Asset Inventory
Filterable register by hostname, IP, OS, device type, EDR state and source.
Infrastructure
Discovered hosts with ports, MAC and vendor, plus scan triggers.
Dashboard
Asset, directory, risk and alert counts.
Discovery Dashboard
Queue depth, running and failed jobs, assets found today.
Scan Scheduler
Schedules bound to a scan type, target list and stored credential.
Connectors
Stored AD, SSH, WinRM, AWS, Azure and VMware targets for deep scans.
Active Directory
Domains, group policies, password policy and domain controllers.
Identity
Users, groups and computers by source, each with the hosts it can reach.
Attack Paths
The access graph, with critical paths and escalation chains.