1.0 Assets
Know what you are protecting
One register of everything your organization runs. Connect AWS, GitHub or your identity provider and it fills itself; add whatever they cannot see by hand.
All assets
Everything this organization owns and has to harden, whether an integration found it or somebody entered it. Systems, processes and data repositories keep their own tabs.
1.1
Found, not remembered
Integrations report what exists and keep reporting it, so the register stays current between audits instead of being rebuilt before each one.
1.2
Owners, not orphans
Every asset carries a named owner, a classification and a status, so a question about it has somewhere to land.
1.3
Your kinds, your fields
Five kinds ship with the product. Define your own when they are not enough. New kinds bring their own fields, filters and imports with them.
Provable today, not at audit time.
Run it yourself or have Bindsec run it for you. Either way, the evidence is current and the posture is one place.