AssurIQ
Infrastructure Intelligence

Know what you run, how it is connected, and what changed.

The optional AssurIQ Site Probe turns scoped observations into asset and topology context. The platform distinguishes verified, inferred and unobserved relationships and labels advanced collection by maturity.

Explore AssurIQRequest a pilot
Live Map · Summit Ridge Ford · L2 switchingVerified (LLDP/CDP)Inferred (FDB)
Internet
fw-edge-01
sw-core-01
sw-access-01
sw-access-02
srv-dc-01
ws-svc-14
ap-showroom
cam-lot-03
ws-fin-02KEV · CVE on WAN interfaceAffects 3 controls · exposure: internetRisk 94 · Fix first
Principle

Store raw observations. Derive the graph. Never invent a link.

Every edge on the map is labelled by how AssurIQ knows it exists. Links confirmed by LLDP or CDP neighbor exchange are VERIFIED. Links inferred from forwarding tables, ARP or routing are INFERRED and drawn differently. If there is no observation, there is no line.

Verified
LLDP / CDP neighbor adjacency on both ends
Inferred
MAC forwarding tables, ARP, route next-hops
Unobserved
No evidence — the map shows a gap, not a guess
Capabilities

Discovery, topology, ports, health and history.

Scoped discovery · available

TCP-connect observations across authorized ranges identify hosts and services and reconcile assets by MAC, hostname and IP.

Live Map · L1 / L2 / L3

Physical, switching and routing layers of the same site. Overlays for health, security, compliance, utilization, lifecycle, segmentation and recent changes — the same overlays the product uses.

SNMP & LLDP/CDP · planned

Interfaces, VLANs, routes, neighbors and forwarding observations are modeled for verified topology; broad collection is not claimed as released.

VLAN, subnet & switch-port matrix

Which VLAN carries which subnet, which port carries which device, PoE draw, last-seen and neighbor per port — exportable for documentation and audits.

Device health & monitoring · planned

Availability, interface status, utilization and alert evaluation for infrastructure devices remain in staged development.

Configuration & change history

Raw observations, topology snapshots and change records support a traceable narrative. Automated configuration backup remains staged.

Path trace & blast radius

Trace the L2/L3 path between two assets, or ask what depends on a given switch or uplink before you touch it.

Living site documentation

Network documentation composed automatically from observations — and refreshed as the collector re-discovers, with history preserved instead of overwritten.

Unknown & rogue device handling

Newly discovered devices are surfaced for classification, tied to the port and VLAN they appeared on, and linked to the segmentation controls they may affect.
Switch-port intelligence

Every port, every VLAN, every PoE budget — one matrix.

The port matrix is the view technicians actually use when someone asks “where is this device plugged in?” AssurIQ keeps it current from the collector instead of a spreadsheet.

  • Port state, speed, VLAN membership, PoE class and power draw
  • Neighbor and last-seen device per port
  • Export to CSV or include in a site documentation book
Switch Port Matrix · sw-access-02 · 24 portsExportable · VLAN, PoE, neighbor, last-seen
1
2
3
4PoE
5
6
7
8PoE
9
10
11
12
13
14
15
16PoE
17
18
19
20
21
22
23
24PoE
Up · neighbor knownDown · previously usedFreeVLAN 10 corp · 20 voice · 30 IoT
Change history

A camera moved onto the corporate VLAN. AssurIQ noticed.

Topology changes are security events. When a device crosses a segmentation boundary, the affected control goes from PASS to FAIL with the evidence attached — and the remediation item already knows which port to fix.

  • Snapshot comparison between any two points in time
  • Narrative of what appeared, moved or disappeared
  • Changes that affect a segmentation or exposure control raise that control automatically
Live Map · Summit Ridge Ford · L2 switchingVerified (LLDP/CDP)Inferred (FDB)
Internet
fw-edge-01
sw-core-01
sw-access-01
sw-access-02
srv-dc-01
ws-svc-14
ap-showroom
cam-lot-03
ws-fin-02KEV · CVE on WAN interfaceAffects 3 controls · exposure: internetRisk 94 · Fix first
AssurIQ Site Probe

Outbound-only, locally scoped, honest about maturity.

The optional Site Probe is designed to extend visibility beyond managed endpoints. Secure enrollment, heartbeat intake and scoped observations are available; a signed production installer is not advertised until published and validated.

  • TCP-connect discovery across authorized scopes — available
  • Heartbeat, inventory and observation intake — available
  • Topology derivation from stored observations — available
  • SNMP and LLDP/CDP collection — planned
  • Syslog, flow analytics and configuration backup — planned
  • Linux, Docker and virtual-appliance packages — planned
Questions

Common questions about Network Intelligence

Does AssurIQ need credentials on every switch?+
Current TCP-connect discovery does not. Planned read-only SNMP support will add richer interface, VLAN, neighbor and forwarding observations when explicitly configured.
How is this different from a monitoring tool?+
Monitoring answers “is it up?” AssurIQ answers that and also “what does this device affect, which control does it prove or break, and what changed since the last snapshot?” — because topology, findings, controls and evidence share one model.
What happens when a link cannot be confirmed?+
It is drawn as inferred, or not drawn at all. AssurIQ never fabricates a topology to make the diagram look complete.
Keep exploring

Vulnerability & Risk

Exposure from the map feeds the risk score
Learn more

Compliance

Segmentation and inventory controls
Learn more

Evidence Vault

Snapshots become evidence
Learn more

Demo environment

Click through a fictional site
Learn more
Next step

Manage the endpoint. Understand the infrastructure. Prove the controls.

Explore the connected platform, or talk with the AssurIQ team about a controlled Windows RMM pilot. No production data is required to explore the fictional sandbox.

See the PlatformRequest an RMM Pilot