Skip to main content
Configuration Management

A configuration database that tells you what's connected to what.

Track your estate across physical, virtual, cloud, and logical assets, with typed relationships, full history, and the lifecycle data that risk and compliance work depends on.

Request a demo
What you can do

Capabilities

Built-in classes, extendable to your estate

9 base classes — Server, Application, Database, Business Service, IT Service, Supplier, Contract, Data Asset, Network Device — plus subclasses. Add your own attributes per class without code.

Relationships that mean something

12 typed relationship kinds connect your CIs, so "depends on," "runs on," and "hosted by" are distinct and queryable. Approving a change, you can see what it touches before you say yes.

History you can query at a point in time

Versioning records every change to a CI, so you can ask what your estate looked like on any past date — useful for an incident review or an audit.

Lifecycle and vulnerability data

End-of-life and end-of-support dates surface to a daily risk register. Record CVE references against affected CIs, tag them in bulk, and fire a detection event when a critical CVE lands.

One source, many feeds

Reconcile CIs from multiple source systems, with a manual queue for the cases that need a human. Backup state and last-restore-test dates sit on the assets they belong to.

Compliance relevance

How this connects to regulation

DORA
Art. 28(3)Register of Information sourced from CMDB third-party provider records.
DORA
Art. 10CVE detection evidence for critical ICT assets.
BAIT
BAIT 8Information classification and IDV flag on configuration items.
Common questions

FAQ

Yes. CSV/JSON import with reconciliation rules that merge duplicates, flag conflicts, and preserve history.
Every attribute change creates a new version with an effective date (SCD Type-2). Query with an as-of date to see the CI state at any historical point.

See ITSMx against your own compliance checklist.

30 minutes. We’ll map it to your DORA / NIS-2 / BAIT obligations.