scanopy/scanopy
Scanopy
Scanopy is a self-hosted infrastructure inventory and network discovery tool. It identifies hosts, services, and workloads across subnets to build a live model of network infrastructure, maintaining a searchable catalog of assets.
The system features an interactive network topology visualizer that generates physical, logical, and application dependency diagrams. It maps the nesting chain from physical hardware and hypervisors down to virtual machines and containers, utilizing SNMP for hardware metadata and container APIs for workload discovery.
The platform supports distributed network scanning via scanning agents deployed across isolated VLANs or remote sites. It includes comprehensive asset management for host deduplication, role-based access control for multi-tenant data isolation, and scheduled discovery orchestration.
Scanopy can be installed on private infrastructure using container orchestration or virtualization platforms.
Features
- Network Discovery Tools - Scans subnets to identify active hosts, open ports, and workloads to build a live infrastructure model.
- Asset Inventory Aggregators - Maintains a consolidated, searchable catalog of discovered network devices, services, and hardware metadata.
- Topology Visualizers - Provides an interactive graphical interface for mapping network assets and visualizing infrastructure dependencies.
- Asset Inventory Management - Maintains a searchable catalog of detected network services and their associated hardware devices.
- Network Service Discovery - Provides automatic discovery of active network services and their interfaces to build an asset inventory.
- Infrastructure Discovery Automators - Automates the scanning of hypervisors and network environments to inventory infrastructure resources.
- Container Runtime Discovery - Provides mechanisms for automatically detecting active containers across remote hosts using secure proxies.
- Distributed Scanner Deployment - Runs multiple scanning agents across different network segments to map multi-site environments.
- Distributed Scanning Agents - Deploys independent scanning agents across isolated VLANs or remote sites to aggregate data into a central map.
- Infrastructure Dependency Visualizations - Provides graphical mapping of the nesting chain from physical hardware down to application services.
- Infrastructure Topology Mapping - Generates visual and logical representations of infrastructure by tracking the nesting chain from physical hardware to containers.
- Scanning Agent Deployment - Enables the installation and management of scanning agents across a network to map infrastructure dependencies.
- Self-Hosted Deployments - Designed to be installed on private infrastructure using container orchestration or packages for full data sovereignty.
- Network Infrastructure Discovery - Queries network devices via standard protocols to collect hardware metadata and interface specifications.
- Multi-Layer Topology Modeling - Generates physical, logical, and application dependency views of the network from a single discovery scan.
- Network Connectivity Mapping - Generates visual representations of physical cabling and network connection paths using neighbor data.
- Subnet Inventories - Tracks hosts and subnets to maintain a comprehensive inventory of network segments.
- Network Device Discovery - Scans subnets to automatically identify active hosts, open ports, and running services across the network.
- Device Dependency Mapping - Identifies neighboring devices and physical connections by extracting neighbor data from hardware.
- Role-Based Access Controls - Implements role-based access control and organizational isolation for multi-tenant infrastructure data.
- Role-Based Access Control - Manages user permissions and resource visibility through a hierarchy of organizational roles and scopes.
- Compute Hierarchy Mapping - Visualizes the relationship chain from physical hosts and hypervisors down to virtual machines and containers.
- Self-Hosted Infrastructure Platforms - Provides a private management platform for hosting network assets, scanning schedules, and access controls.
- Service Dependency Mapping - Visualizes relationships and communication paths between application services to identify explicit dependencies.
- SNMP Management - Uses the Simple Network Management Protocol to retrieve hardware metadata and physical topology from network devices.
- SNMP Community String Management - Stores SNMP community strings used to retrieve device and neighbor data during network discovery.
- Virtualization Hierarchy Tracking - Track the relationships between physical hosts and the virtual workloads running on them.
- Infrastructure Asset Deduplication - Matches hosts across different scan sessions to prevent duplicate entity entries in the asset catalog.
- Scan Schedulers - Orchestrates the timing of network scans and monitors real-time session progress.
- Multi-Tenant Data Management - Isolates infrastructure data by organization and network container to ensure strict multi-tenant data separation.
- Daemon Communication Management - Configures connection paths between servers and nodes to bypass network restrictions.
- Scanning Agent Communication Configuration - Sets the connection direction between scanning agents and the central server.
- Hierarchical Topology Grouping - Groups network elements into hierarchical containers based on subnets or applications for better organization.
- Live Host Probes - Implements active probing to identify live hosts and open ports on routed networks without requiring agents.
- Environment Grouping - Allows grouping of hosts and services into separate environments to isolate production and development locations.
- Scan Schedule Management - Controls monitored network segments by managing subnets within discovery schedules.
- Subnet Analyzers - Analyzes and visualizes hosts within IP spaces to reveal routing and spanning patterns.
- Layer-Specific Probing Optimizations - Optimizes discovery speed by utilizing ARP scanning for local subnets and TCP probing for remote segments.
- VPN Asset Discovery - Scans virtual private network interfaces to discover and inventory remote hosts and services.
- API Key Generation - Generates unique API keys to secure the communication channel between scanning agents and the central server.
- Automatic Credential Assignment - Automatically links stored credentials to discovered IP addresses for seamless device authentication.
- API Request Authentication - Secures system interactions by verifying identity through bearer tokens and session cookies.
- Bearer Token Authentication - Secures communication between remote scanning daemons and the central server using bearer tokens and API keys.
- Device Credential Management - Stores and manages authentication secrets scoped to specific devices for automated infrastructure scanning.
- Multi-Tenant Hierarchy Organizers - Organizes users into isolated tenants with role-based permissions to control access to scanning features.
- Application Data Isolation - Implements software-level mechanisms to isolate tenant data and configurations within the shared application.
- Network Access Control - Restricts user visibility and management capabilities based on specific network containers and IP ranges.
- Network Segmentation - Categorizes and labels subnets by type to organize local network segments and remote assets.
- Agent Polling Mechanisms - Uses a polling mechanism to coordinate discovery tasks between a central server and distributed scanning agents.
- Agent-Server Polling Models - Implements flexible polling modes to link remote discovery agents with the central server.
- Asset Tagging & Filtering - Provides metadata labels for network assets to enable rapid isolation and filtering.
- Host Deduplication - Combine multiple discovery entries of the same device into a single logical host.
- Host Metadata Enrichments - Collects system identity and neighbor information to enrich host data for physical topology mapping.
- Isolated Network Scanning - Deploys multiple agent instances on one host to discover assets across isolated network interfaces.
- Multi-Interface Host Merging - Consolidate hosts detected across multiple VLANs into a single logical entity.
- Multi-Interface Scanning Agents - Deploys multiple agent instances on a single host to discover assets across isolated network interfaces and VLANs.
- Hardware Metadata Mapping - Uses SNMP to collect hardware metadata and neighbor data to map physical network connectivity.
