Registry

Assets

Any system or resource that handles the information your program protects — imported or discovered, classified in your own vocabulary, and connected to the platforms and vendors it depends on.

Import what you already have

Start with the inventory you already have instead of rebuilding it by hand. Bring assets in from the inventory tools you already run, cloud exports, or a spreadsheet, and Openlane tracks what you curated versus what discovery found — so your register is trustworthy the first time an auditor asks.

No blank-slate data entry to stand up a working register
Curated and discovered records stay labeled, so auditors see what you verified

assets-export.csv147 ROWSCOLUMN MAPPINGhostnameNameenvEnvironmentteamTechnical ownercost_centerSkip

OR PULL FROMCloud providerIdentity providerDevice management

IMPORTING147

Classified in your own vocabulary

Classify assets in your own words, not a fixed taxonomy you have to translate into. Every record carries its classification and PII status the moment it lands, so nothing waits unclassified for someone to notice it mid-audit.

Classification labels are yours to define, not a vendor's fixed list
PII flag and region on every record, so regulated data is simple to scope

Connected to the work that matters

See the blast radius of a change before you make it, not after something breaks. Each asset connects to the security work around it and the other assets that depend on it, so the full reach of a change is visible before you touch it.

Trace an asset to the platforms, vendors, and evidence tied to it
Dependency links surface what a change puts at risk, up front

CloudSQL productionASSET · DATABASE · PIINORTHWIND CLOUD

3CONTROLSEncryption at rest

2RISKSCustomer data exposure

3EVIDENCEQ3 restore test log

Asset Registry

Every asset, one accurate record

Bring assets in from wherever your inventory already lives, then classify them on arrival, so your records reflect what's in scope.

Import & discovery

Stand up your register from inventory you already have, and keep what you curated clearly apart from what discovery found — so you always know which entries you stand behind.

Classification that means something

Classify every asset in your own terms, so scope and access decisions rest on labels your team uses — with a PII flag on anything that touches regulated data.

Linked to security work

Every asset ties back to the work and systems around it, so a record is a starting point, not a dead end.

Trusted By