NS-DiscoveryEarly access. NS-Discovery is not on sale yet. We run free pilots for US IT teams and managed service providers, by invitation.
Know every device on your network. Send no packets.
NS-Discovery is a passive network sensor. It listens to the discovery traffic that devices already broadcast — ARP, DHCP, mDNS, LLDP and more — and builds an inventory where every conclusion shows its evidence. It never scans.
Built on three rules
Asset visibility usually means an active scanner that pokes every address, or an agent on every machine. Many devices — printers, cameras, medical and building equipment — get neither.
Passive by default
The Sensor only listens. Fragile devices are never touched, and nothing on the wire changes when it runs. The one active feature, local ARP discovery, is off until an operator turns it on with explicit limits.
Explainable
Every classification traces to the rules, matched signals and the evidence behind them. When the evidence is thin, the device stays unknown or is labelled possibly — never a confident wrong guess.
Runs where you are
The Sensor and the Manager run on your hardware or in your cloud account. No vendor cloud and no telemetry. A Sensor works on its own, with or without a Manager.
What you see
Inventory with evidence
Device type, vendor, model and announced operating system where the device reveals them; addresses, names and when it was first and last seen.
Changes as they happen
New devices, devices that disappeared, address changes and address conflicts, in a feed and as notifications to a webhook or your SIEM (Syslog, CEF).
Who had that address
Investigation across sites: which device held 10.0.3.14 at 03:14, and which addresses a MAC used over time.
Outdated systems
Findings for devices that announce an operating system past its end of support, such as Windows 7 or Server 2012 R2.
Evidence for audits
Inventory reports with period comparison and CSV, mapped to asset-inventory controls such as NIST SP 800-171 3.4.1. Evidence for your auditor, not a compliance certificate.
Many sites, one view
A Manager collects inventory from Sensors at every site over mutual TLS, with roles, single sign-on and per-site access for your staff.
Protocols it understands
All of them are received, never sent.
- ARP
- DHCPv4
- mDNS / DNS-SD
- LLMNR
- NBNS
- SMB Browser
- SSDP
- LLDP
- CDP
- MNDP
- PROFINET DCP
- EtherNet/IP
- BACnet
Measured, not promised
From replaying recorded office and home traffic through the full Sensor pipeline on an Apple M3.
Try it on one network segment for a week
One Linux host or VM on the segment, about an hour to set up. You keep the data and the report. No purchase, no contract.