What is Asset Intelligence?
The living knowledge of your products.
Asset Intelligence is the ability to know, structure and maintain the technical information of your products over time: what they contain, their versions, dependencies and relationships. It is the foundation that then makes vulnerabilities, threats, risk and evidence actionable.
Asset Intelligence in one sentence
Asset Intelligence: the structured, maintained knowledge of your products — their components, versions, dependencies and relationships — used as the basis for their cybersecurity throughout the lifecycle.
A product name and a version number are not enough to understand its cyber surface. You need to know what it contains, where the software runs, which components deliver its functions and how they depend on each other. This knowledge is not a static document: it changes with every version. Asset Intelligence is the discipline of building it and keeping it up to date.
From product knowledge to decision
Asset Intelligence is not an end in itself: it is the starting point of a reasoning. Everything starts from product knowledge, then that knowledge makes every following step relevant and reliable.
What an Asset contains
In VAST, the Asset Inventory is this technical knowledge base. It brings together and connects the important elements of a product — not just its software, but everything that makes up its real cyber surface.
Product knowledge first
The goal is not to document for the sake of it. This knowledge then lets teams find a shared dependency, understand a communication path, locate a vulnerable component, or place a version back in its history — without launching a multi-day investigation every time.
This is why Risk Assessment and the CRA process are not VAST's starting point: they become reliable because this product knowledge already exists and stays current. Asset Intelligence is what connects products, their components, their vulnerabilities, threats, risk and evidence.
Asset Intelligence or classic inventory management?
A classic IT inventory lists machines and installed software. Asset Intelligence, applied to product cybersecurity, goes further: it describes the product as it is placed on the market, over time.
Classic inventory
- A list of assets at a point in time
- Focused on the internal IT estate
- Becomes stale as soon as the product changes
- Few links between elements
Asset Intelligence
- Knowledge maintained, version after version
- Focused on the product placed on the market
- Connected to vulnerabilities, threats and risk
- Explicit relationships and dependencies
Frequently asked questions
The Asset Inventory is the structured inventory of a product's components. Asset Intelligence is the broader practice of building, connecting and maintaining that knowledge over time, then using it for product cybersecurity.
No. ITAM and CMDB manage the organization's internal estate. Asset Intelligence applied to product cybersecurity describes the products placed on the market, their versions and dependencies, from a security and lifecycle perspective.
An Asset connects the hardware, the software and its SBOM, dependencies, accounts and access, data, business apps, interfaces, and the product's versions and history.
Because Risk Assessment and the CRA process only become reliable if product knowledge already exists. Without knowing what a product really contains and how it evolves, a risk analysis or a proof of compliance rests on uncertain ground.
Start by knowing your products.
Show us one of your products: VAST builds the Asset and the context that then make search, vulnerabilities, risk and evidence actionable.