Covan CMDB & discovery

One CMDB the whole
company shares.

The platform has its own CMDB and its own discovery. Apps consume the CMDB and never own a private copy of it: 88 CI types, 32 relationship types and impact analysis up to 10 hops.

88CI types
32relationship types
10hops of impact
15+discovery sources
01 · CMDB

Modelled once, used everywhere.

The CI type library covers servers, databases, network, cloud and business applications. Tenants add their own types and fields, or relabel and hide library fields.

88 CI types, 32 relationship types

A ready library for servers, databases, network, cloud and business applications. Tenants add their own types and fields, or relabel and hide library fields.

Impact analysis up to 10 hops

What fails if this CI fails, what does it depend on, and which business services sit behind it? Answered from a CI, an alert, an incident or a change.

Service mapping

Discovered software, processes, ports and connections turn into Business Services grouped by tier. A person reviews before anything is published.

Assets and CIs in two-way sync

They stay in step through one shared status set. Work items link to CIs, and choosing one fills in the other.

02 · Impact analysis

What fails if this CI fails?

Impact analysis up to 10 hops shows what fails, what it depends on and which business services sit behind it — from a CI, an alert, an incident or a change.

SERVERSRV-EBLD-WEB01
1 DATABASE EBLD-DB01
2 SERVICE BS-CORP-PORTAL
2 APPLICATION APP-PAYMENT
3 NETWORK NET-CORE-SW02
3 LOAD BALANCER LB-EDGE-01
3 PLATFORM K8S-PROD-01
4 MONITORING MON-ZABBIX
SERVER SRV-EBLD-WEB01 DATABASE EBLD-DB01 SERVICE BS-CORP-PORTAL APPLICATION APP-PAYMENT NETWORK NET-CORE-SW02 LOAD BALANCER LB-EDGE-01 PLATFORM K8S-PROD-01 MONITORING MON-ZABBIX IMPACT DIRECTION → 1 HOP 2 HOP 3 HOP
Impact analysis
3affected CIs
Depth3 hop
110

  • Only relationships marked as impact-carrying are followed.
  • A CI is counted once, at the fewest hops.
  • Retired CIs are skipped unless included.
03 · Relationships

Relationship diagram, hops and layers.

A relationship diagram with filters, hop counts and saved views. Every CI keeps a full field-level history.

  • Impact-carrying and informational relationships are distinct.
  • Service mapping turns discovered software, processes, ports and connections into tiered Business Services.
  • A person reviews before anything is published.

BS-CORP-PORTAL

2 nodes · 2 edges
BUSINESS SERVICE BS-CORP-PORTAL DATABASE EBLD-DB01 SERVER SRV-EBLD-WEB01 Tier 1 Prod Uses database Runs on impact-carrying relationship informational relationship
04 · Beyond the configuration record

Assets, licenses and vulnerabilities in one place.

The CMDB is not just a CI list. Software assets, vulnerabilities and change risk connect to the same data model.

Software assets

Software catalog, inventory, allow/deny policies, license entitlements and compliance, end-of-life dates.

Vulnerabilities

Deterministic CVE matching against installed software and patches, with evidence, exclusions, remediation work items and risk acceptance through approvals.

Change risk

A traceable risk score from affected services, open alerts, recent incidents, concurrent changes and maintenance windows.

05 · Discovery

Its own discovery agents, in the same platform.

A discovery agent installed in the customer network scans and uploads raw results to the platform: WMI, SSH, SNMP topology, vCenter, Hyper-V, OLVM, F5, FortiGate, Cato, Kubernetes, AWS, Azure, databases, NetFlow and certificates.

WMI
SSH
SNMP
vCenter
Hyper-V
OLVM
F5
FortiGate
Cato
Kubernetes
AWS
Azure
Databases
NetFlow
Certificates
Agent security

It takes commands, never scripts.

  • Agents connect with a company token.
  • They must be approved before they can be commanded.
  • They verify signed commands.
  • They can only scan authorised ranges.
  • They can never be told to run a script.
Identity engine

The matching order is fixed.

01
Serial
serial
Strongest identity
02
System UUID
system UUID
Hardware identity
03
MAC
MAC
Network interface
04
Hostname
hostname
Guarded match
05
IP
IP
Weaker source

A re-scan updates the same CI, certain duplicates are merged automatically, and doubtful ones go to a review queue. Weaker sources cannot overwrite stronger ones, and unchanged re-scans write no history.

3→46CIs

In a test run, five real scan payloads grew the CMDB from 3 to 46 CIs and created the linked assets automatically.

06 · Business outcomes

What the CMDB changes in practice.

A CMDB is not an inventory list; it is a decision tool. A well-fed CMDB makes impact analysis, change risk and asset cost manageable from one place.

A single source of truth

A company-wide CMDB stays current through the platform’s own discovery, and apps keep no private copies.

Evidence-based impact analysis

Dependencies up to 10 hops are answered from a CI, an alert, an incident or a change.

Visible change risk

Affected services, open alerts, recent incidents and maintenance windows become one traceable risk score.

Next step

Scan your own network into the CMDB.

In the demo we run impact analysis against your own CI model: which business service is affected if this server fails?

Request a demo Explore the platform hello@covan.io · covan.io