ON-PREM SECURITY GRAPH

ITOPSY

Attack surface management on your infrastructure

Topology, AD attack paths and risky dependencies (SBOM) — all in your environment.

Inspect and chat with your IT environment the way an attacker would scan it. Explore topology, Active Directory attack paths and risky dependencies (SBOM), or ask in plain language. Everything runs in your environment.

AI runs on your hardware or private cloud.

On-premise & air-gapped
Graph-based analysis
Graph-RAG AI assistant
SBOM & supply chain visibility

CAPABILITIES

From discovery to action — in one graph.

Hosts, identity and software in a single view. Built-in queries and Graph-RAG — no query language required.

Scroll to explore capabilities

01 · SBOM

SBOM explorer & scanner

CycloneDX and SPDX SBOMs are generated automatically; risky dependencies are highlighted.

SBOM and weaknesses are in one graph
Critical and high-risk packages flagged
CycloneDX / SPDX · Compliance layer

02 · Active Directory

Active Directory graph

Visualize users, groups and computers and the relationships between them. Built-in queries surface issues.

Import from well-known tools
User · group · computer relationships
Built-in queries surface drift

03 · Attack path

Attack path identifier

List Domain Admins, find the shortest path, and see each step drawn on the graph.

Shortest path to Domain Admin
Every step shown on the graph
Privileged account inventory

04 · Infrastructure

Infrastructure topology

Imported scan results feed open ports, services and applications into one interactive topology.

Network scan layers
Host · port · service · application
Real product UI in the live demo

05 · Graph-RAG

AI with Graph-RAG

No query language required — the Itopsy assistant answers questions in graph context.

Natural language — no Cypher required
Answers grounded in graph context
On-prem / air-gapped AI

06 · GPU

GPU-accelerated rendering

Tens of thousands of nodes and edges render together using GPU acceleration.

Tens of thousands of nodes at once
Built for enterprise-scale graphs
Smooth pan and zoom

PLATFORM

Self-hosted, graph-based security visibility.

Cloud inventories run as SaaS. Itopsy runs on your servers and works in air-gapped networks. Your asset and identity data stays in your environment — not with a vendor.

Itopsy focuses on hosts, identity and software. It does not replace compliance or cloud posture tooling.

Itopsy Infrastructure view — infrastructure topology graph

Process

A continuous loop from discovery to action.

Collect from agents and tools you already run, enrich on the graph, prioritize, and write findings back into your processes.

1
Discover
Collect hosts, identity and software via agents and scanners.
2
Enrich
Merge SBOM, AD relationships and open ports into one graph.
3
Visualize
Explore paths and topology with GPU-accelerated rendering.
4
Prioritize
Surface critical paths with built-in queries and Graph-RAG.
5
Act
Insert findings into CI/CD, ticketing and notification tools.

TRUST & GETTING STARTED

How enterprise teams start an evaluation.

Concrete deployment options, a clear trial path, and the tools you already run.

Deployment options

On-prem servers
Private cloud / VPC
Air-gapped networks

Trial process

1
Short discovery
We align on your environment and priority use case.
2
Install
We deploy into your infrastructure, preferably in an isolated setup.
3
Validate together
We measure value with your team on real data.

Your existing tools

Works with well-known open-source tools and your CI/CD · SIEM · ticketing chain — without forcing a new stack.

Let’s validate it on your infrastructure.

Start with the live demo, then request a private trial in your environment.

PRIVATE TRIAL

Explore Itopsy in your own environment

Try the platform on your infrastructure with custom setup and on-prem / air-gapped options.

Evaluation in your environment
Hands-on setup with our technical team
Your data stays under your control