How many assets do you have? One answer. Not eight.

Your EDR says 24,000. Your CMDB says 19,000. Your cloud console says something else. Koopic pulls from every tool, merges duplicates into one trusted inventory, then tells you which vulnerabilities on those assets to fix first.

CrowdStrike
Intune
AWS
ServiceNow
Azure
GCP
AD
Defender
UNIFIED · LIVE
24,847
assets merged from 8 tools
3,291 duplicates resolved
30-day free trial · No credit card
Starts at $379/mo
Vulnerability Management · Risk-based prioritization

Stop patching by CVSS. Fix what actually moves risk.

A CVSS 9.8 on a segmented lab box is not the same as 7.4 on your internet-facing web server. Koopic recalculates every CVE against the signals already in your asset inventory and surfaces the work that actually reduces risk.

11+

environment signals factored per CVE

87%

fewer “critical” findings on first pass

<5m

from CVE publish to scored verdict

Effective risk · live recalc
3 assets
CVE-2026-20182
Apache HTTPD · unauthenticated remote code execution
9.8 CVSS base
Effective priority after recalc live
srv-web-0117.prod.koopic.io Prod web · internet-facing
98 P0
CISA KEV Internet-facing+12 Crown-jewel+15 EPSS 0.94+18
laptop-3471 · J. Smith User device · EDR + VPN
64 P2
CISA KEV Behind VPN−8 EDR active−10 User device+4
srv-lab-0042.dev.koopic.io Lab · segmented VLAN
26 P3
CISA KEV Segmented−16 Non-prod−12 Auto-rebuild−4
P3Backlog
P230-day
P17-day
P0Pager

Same CVE · 3 assets · 3 verdicts

THE TRIAGE QUEUE

Six questions every security team asks,
and never has a clean answer to.

Pulled from the standups, the audits, and the 4pm Slacks that ruin Fridays. These are the walls every program hits. Koopic was built to take each one off the board.

Triage queue / recurring across 4,219 teams
6 open patterns 6 solved by koopic
03:42 PT PAIN-001 IT DIR
P0 · Foundational

How many devices do we actually have?

EDR says 3,847 · MDM says 2,961 · CMDB says 4,212. Nobody trusts any of them.

Koopic resolves auto · 12s

One number you can defend: 4,128 unique devices. Merged across every source, deduped on hardware ID, with full lineage per record.

09:17 PT PAIN-002 SECOPS
P0 · Exposure

Is our EDR actually covering everything?

Vendor dashboard says 98.4%. CMDB has +217 devices the EDR has never reported. Real coverage is unknown until audit week.

Koopic resolves continuous

Cross-source coverage view shows every gap the moment it opens. 217 untrusted devices flagged with owner, last-seen, and route to enrollment.

11:08 PT PAIN-003 GRC
P1 · Governance

We have compliance exceptions nobody tracks.

Granted in a Slack thread last August. Re-granted in an email. Expired in a spreadsheet. The auditor will find them; you won’t.

Koopic resolves tracked

Exceptions become first-class records, with owner, justification, expiry, and evidence. Auto-pings owners 14 days before lapse. Nothing rots.

14:31 PT PAIN-004 VULN MGMT
P0 · Exploitable

Which of these thousands of CVEs do we actually fix first?

14,302 findings in the scanner. 3,847 tagged "Critical" by CVSS. The team can patch ~80 / week. The math doesn’t work.

Koopic resolves re-rank · live

Every CVE rescored against exploit activity, exposure, and asset criticality. The real critical list collapses to 47 items, the ones that actually move risk this week.

16:54 PT PAIN-005 CISO
P1 · Reporting

Leadership wants a report by Friday.

Four tools to log into. Three spreadsheets to reconcile. One analyst burning a weekend so a deck can exist by 9am Monday.

Koopic resolves one export

Coverage, exposure, exceptions, and trend. Board-ready in one view. PDF, slides, or live link. No spreadsheet wrangling.

10:20 PT PAIN-006 VP ENG
Info · TCO

We can't afford what enterprise CAASM costs.

Quotes start around $100k / yr. The pilot alone takes a quarter. Your team is six people and ships next month.

Koopic resolves from day 1

Enterprise-grade asset visibility and risk-based vuln prioritization, starting at $379 / month. Live in an afternoon, not a quarter.

Pain points
6/ 6 recurring
Time to live
< 1afternoon
Manual effort removed
87% of weekly triage
Starts at
$379/ month · all six
RUNTIME · HOW IT WORKS

From fragmented tools to
one source of truth, in three passes.

Connect what you already have. Koopic does the merging, scoring, and housekeeping continuously, so the data you act on is always current.

Pipeline active / running across 4,219 tenants
3 stages  automated
01
STAGE_01 · INGEST polling · 30s

Connect your sources.

Plug in EDR, MDM, CMDB, cloud platforms, file imports, or on-prem infra via a lightweight agent. Pull on a schedule or on-demand.

  • Native connectors for Defender, Intune, Azure, GCP
  • CSV and file-based import, no schema gymnastics
  • On-prem agent for local network collection
connectors.toml 5 / 5 active
Microsoft Defender EDR connected
Microsoft Intune MDM connected
Azure VMs Cloud syncing…
On-Prem Agent Agent connected
CSV Import File ready
02
STAGE_02 · MERGE auto · 12s

Merge into golden records.

Deduplicate and reconcile overlapping records into a single golden record per device. Transparent field-level priority shows which source wins, every time.

  • Automatic dedup, hardware-ID first, fuzzy fallback
  • Configurable source priority per field
  • Full merge lineage for every record
merge-preview winner ✓
Defender · P1 field Intune · P2
WS-PC-0142 hostname ws-pc-0142
10.0.4.88 ip_addr 10.0.4.88
Win 11 23H2 os_ver Windows 11
-- enrolled 2024-12-01
1 golden record full lineage retained
03
STAGE_03 · GOVERN continuous

Automate compliance and aging.

Run compliance rules, enrichment, and aging policies after every merge. Score each asset, derive new fields, and flag stale records without anyone lifting a finger.

  • Per-asset compliance scoring with your rules
  • Enrichment for derived fields and normalization
  • Aging policies for the full asset lifecycle
compliance.dash live
94%
Compliance
7
Enrichments
3
Aging Rules
Antivirus installed
98%
OS patched (≤ 30 d)
87%
Encryption enabled
92%
EDR active
76%
Stages
3/ fully automated
Time to first merge
< 12seconds
Cadence
24/7continuous
Setup
1afternoon · live
WHY TEAMS CHOOSE KOOPIC

Five things you get on day one. No procurement gauntlet, no sales call.

5 proof points
P_01 · INVENTORY 1 record per device
Unified
Asset inventory across every source

Defender, Intune, Azure, CMDB, CSVs, and on-prem agents, all collapsed into one golden record per device with full lineage retained.

defender intune azure on-prem 1 golden record
P_02 · POLICY your rules · your fields
Custom
Compliance rules written your way

Don't bend your policy to fit ours. Define rules on any field, run them continuously, score every asset against the rules you actually own.

$ rule os_patched ≤ 30drequired
$ rule edr.active = truerequired
$ rule dept ∈ {fin, eng}scoped
P_03 · LINEAGE
Full
Merge transparency

See which source won every field, why, and when.

Ahostnamedefender ✓
Bos_verdefender ✓
Cenrolledintune ✓
P_04 · ACCESS
Self‑serve
No sales calls. No demos to sit through.

Sign up, connect, go.

step 1
"book demo"
step 2
discovery
step 1
sign up · go
P_05 · TRIAL live
30 days
Free trial, no card required

Use everything. Decide later.

DAY 00 10 20 DAY 30

Frequently Asked Questions

What is CAASM and why do security teams need it?
Cyber Asset Attack Surface Management (CAASM) aggregates data from every security and IT tool into a unified inventory. Security teams need it because siloed tools create blind spots - devices that exist in one system but not another, or with conflicting data across sources. Koopic eliminates these gaps by creating a single golden record per device.
Does Koopic do vulnerability management?
Yes. Koopic includes Unified Vulnerability Management on every plan. It merges vulnerability findings onto your golden-record assets and ranks each one by real risk using a prioritization engine - exploit activity (EPSS, CISA KEV), CVSS, asset exposure and criticality, custom priority rules, and compensating controls - so your team fixes what actually matters first instead of triaging by raw CVSS.
How is Koopic different from a CMDB?
CMDBs require manual data entry and quickly become outdated. Koopic automatically pulls from your existing tools, merges overlapping records using transparent priority logic, and keeps everything current. You can see exactly which source contributed each field value - no black box.
How quickly can we deploy Koopic?
Most teams connect their first integration within minutes of signing up. Koopic handles field mapping, deduplication, and compliance scoring automatically. No professional services or multi-month implementation required.
Does Koopic support on-premises environments?
Yes. The Koopic Agent is a lightweight Docker container deployed on your network. It collects data from internal tools (Active Directory, OCS Inventory, Zabbix, or any REST API) and pushes encrypted data to Koopic Cloud using end-to-end encryption.
Is there a free trial?
Yes. Koopic offers a 30-day free trial with full platform access - unlimited assets, all integrations, all rules. No credit card required. Connect your tools, merge your data, and see compliance scores before making any commitment.

Ready to unify your asset inventory?

Start your free trial in under 2 minutes. No credit card required. No sales call needed.