Asset Analysis

Last updated: March 20, 2026

Asset analysis gives you crystal-clear visibility into all of your environments, so you can instantly pinpoint security gaps. This means you can quickly identify and protect high-risk assets like endpoints missing essential threat detection (EDR) or inboxes without crucial email security before they become a major breach.

Types of Analysis

  • White Space: What is missing from my stack?

    • Examples

      1. Endpoint gap: Assets found in RMM but missing in EDR or BCDR

      2. Identity gap: Assets found in Email but missing from MFA or Security Awareness

      3. Inbox gap: Active mailboxes found in Email but missing from Email Security or SaaS Backup

  • Zombied Assets: Where am I spending on licenses that should no longer exist?

    • Examples

      1. Orphaned licenses: Users found in MFA or SAT that do not exist in Email

      2. Decommissioned endpoints: Assets still checking into EDR or BCDR but have been removed from RMM

  • Stale Assets: What tools do I have installed that are no longer checking in or unresponsive?

    • Examples

      1. Broken agents: Assets active in RMM but hasn’t checked into connected EDR or BCDR in some period of time

FAQ

Can I run an analysis on a single client?

Yes. You can run analyses across all clients at once or scope them to a specific client.

Can I save a query to run again later?

Yes. Queries can be saved and accessed any time from Assets > Saved Queries. Your full query history, including unsaved runs, is available at Assets > Query History.

Can I export results?

Yes. Any analysis result can be exported to CSV.

Can I set up alerts based on query results?

Not currently, this functionality is planned for a future iteration of the feature.

Can I set up alerts based on certain thresholds?

Not currently. Threshold-based alerts are planned for a future release.

Can I modify saved queries?

Not currently. Editing saved queries is planned for a future release.