Distributed asset inventory · every tier

The asset inventories itself. Packetman saysPacketman here. The usual way to inventory a fleet is to stand up a server and have it interrogate every device over the network, again and again. We turn it around. Each machine already knows exactly what it is: the CPU and its security features, every memory module, every drive, the graphics adapter and its driver, the network cards, the firmware, the installed software. It reports that once a day, and only if something changed. The center just rolls it up.

Large organizations run inventory servers that reach out and interrogate every device on the network, over and over. DataStun does the reverse. Each enrolled machine already knows exactly what it is and inventories itself — hardware, firmware, drivers, software, security posture — then reports up once a day, and only when something changed. The center rolls it up so a question about a component becomes a query, not a project.

Get started Host diagnostics on the features page

What each device reports about itself

The same agent that watches the network reads the machine it lives on. No inventory agent, no scanning server, no credentials for a central box to hold.

Identity

Manufacturer, model, SKU, serial number, system UUID, chassis type, and the firmware vendor, version, and date — the keys asset systems actually match on.

Processor

Model and core count, current and rated frequency, power governor, side-channel mitigation status, and the instruction-set features that matter for security and performance — hardware encryption, virtualization, vector extensions.

Memory, module by module

Each slot: size, type, manufacturer, part number, and the speed it is actually running at against the speed it is rated for.

Storage

Every drive: class (NVMe, SATA SSD, hard disk, virtual, removable), capacity, model, serial, firmware revision, and the link speed and width it trained at.

Graphics and network

Each graphics adapter with vendor, model, driver version and date, and memory; each network card with addresses and its link state — so a 10 Gb card trained at a fraction of its lanes shows up as a finding, not a mystery.

Software and posture

Installed software, attached USB devices, and the security posture: disk encryption, host firewall, TPM, Secure Boot, antivirus real-time state, local administrators, pending updates, reboot pending.

host eng-ws-17 · Dell Precision 3660 · S/N 4JQ2P53 · BIOS 2.14.0 (2026-03)
cpu Intel Core i9-13900 · 24 cores · governor performance · AES-NI AVX2 AVX-512 VT-x · mitigations on
mem DIMM_A1 32 GB DDR5 Micron MTC20C2085S1EC56 · rated 5600 · running 4800
mem DIMM_B1 32 GB DDR5 Micron MTC20C2085S1EC56 · rated 5600 · running 4800
nvme Samsung PM9A1 2 TB · fw 36304A1Q · PCIe Gen4 x4
gpu NVIDIA RTX A2000 12 GB · driver 552.44 (2026-04-10)
nic Intel X710 10 GbE · PCIe Gen3 x1 (slot capped)
posture BitLocker on · firewall on · TPM 2.0 · Secure Boot on · 2 updates pending

Illustrative excerpt. The real snapshot lives on each device’s Host tab and in the fleet rollup.

Why the direction matters

The inventory server

A central box interrogates the fleet

  • Needs credentials and network reach into every device, which is exactly what an attacker wants too.
  • Misses whatever is off the network when it runs — laptops at home, workloads in the cloud.
  • Re-asks the same questions on every sweep, whether or not anything changed.
  • Another server, another agent, another team to run it.
DataStun — self-inventory

Each device answers for itself

  • No inbound access, no stored credentials: the device reads itself and reports out, the same way it reports everything else.
  • Follows the device. A laptop on hotel Wi-Fi reports the same as one at a desk.
  • Once a day, and only if the content changed — a steady machine costs essentially nothing on the wire.
  • Same agent, same dashboard, every tier.

Fleet-wide: the rollup, and the question you actually have

The center does what only the center can: put every self-inventory side by side.

Fleet inventory report

Agents reporting, operating-system split, the security-posture rollup (encryption, firewall, Secure Boot, TPM), machines needing a reboot or updates, the most common processor models and memory sizes, and a per-machine table with snapshot age — stale snapshots flag themselves.

“Which machines have that part?”

The whole rollup is also available as a JSON export, so a bad memory part number, a graphics driver version with a known problem, or a network card trained at the wrong width becomes a query across the fleet instead of a week of desk visits.

Software, version by version

The fleet software bill of materials lists every distinct program observed, with version, signer, and what share of the fleet runs it; the patch-lag view shows which machines are still on an old version of a common product. Business tier and above.

Distributed collection, central reporting: the same shape as everything else DataStun does. How it works →

See your first self-inventory within a day

Sign up free, enroll one agent, and its Host tab fills in on the first heartbeat; the full inventory snapshot follows within 24 hours. Every tier.