Scanners can be the embedded local agent (always present) or remote agents you've registered. Each scanner has its own subnets and scan settings. Click "Add Scanner" to register a new remote agent — you'll get a one-time token and a config bundle to download.

Subnets listed here are scanned each cycle in addition to the scanner's local /24. Cross-subnet hosts are detected via TCP/ICMP plus a NetBIOS query (UDP/137) for MAC/vendor — ARP itself doesn't cross routed boundaries. Enable SNMP below for richer data on routers, switches, hypervisors, and SNMP-capable servers.

Active members

Pending invitations

Live scan profile applied to every periodic sweep and every Rescan click. Changes persist to the database and survive daemon restarts; the next scan uses the new values.

Flip enriched/errored raw_batches rows back to pending so the enricher re-runs classification on them. Useful after a classifier rule change. Archived rows (NULL payload) are skipped automatically.

Raw batches that failed enrichment after --max-attempts. Retry to re-queue, Download to inspect the payload, Delete to archive (NULLs the payload; metadata kept for audit).

No errored batches.

Every authenticated request. General admins see all tenants; tenant admins see their own tenant. Retention: 365 days default.

Global defaults inherited by every tenant that has not set its own override. Tenant admins can override these from their tenant's Scan Settings panel; their override fully replaces the values below for that tenant. Changes apply on the next scan cycle.