Network Topology Explorer (BETA)

Overview

The Network Topology Explorer gives you a live, visual map of how devices in a customer environment connect to each other: subnets, gateways, switch ports, VLANs, and routed paths. Instead of manually cross-referencing device records to work out which device sits behind which gateway, you can trace connectivity on one interactive map.

The map is built entirely from data your inspectors already collect, so there is no new integration, agent, or license to deploy. It sits at the top of the Asset Inventory Devices view and links directly back into the Devices table.

---

Feature Highlights

• Subnet-First Overview
  You can view every subnet as a bubble sized by device count. Devices are not fetched until you open a subnet, so the overview loads quickly.

• Path Finder
  You can pick any two devices and see the shortest connection path between them highlighted on the map, with a hop count.

• Analysis Lenses
  You can highlight Layer 2 adjacency, Layer 3 reachability, internet-exposed devices, or devices that haven't been observed recently.

• Unmanaged Device Detection
  You can surface devices that are active on the network but were never added to inventory.

• Node Detail Panel
  You can review the full profile of any device, subnet, or gateway without leaving the page, and filter the Devices table by any value.

• Auto-Discovered Relationships
  You benefit from device-to-device relationships discovered automatically from network signals, with your manually curated relationships layered on top.

---

Prerequisites

• Supported Inspector Data
  At least one inspector that reports device network information, with a completed inspection after the October 2026 release. Topology data is not backfilled, so the map fills in as each launchpoint's next inspection runs, on schedule or run manually.

• Environment Access
  Standard View access to the environment. No separate topology permission is required.

• Subnet or Gateway Data
  A device appears on the map only if it has a subnet or default gateway. Devices without either are counted under Excluded Device(s) in the summary bar.

---

Supported Data Sources

Every device inspector that reports a subnet or default gateway contributes basic placement on the map, including Network Discovery results.

Device-to-device connection data (switch ports, VLANs, wireless clients, and routed paths) currently comes from the following network inspectors:

Connection signals are matched back to specific devices by exact MAC address, IP address, or hostname. Signals that can't be matched yet are re-checked several times a day and linked automatically once the device is inventoried.

---

How to Use

1. Click on an environment's name from anywhere within the platform.
2. Open the Asset Inventory feature and select Devices.
3. Locate the Network Topology Explorer card above the device list. The card is collapsed by default and displays a BETA badge.
4. Click the card header to expand it. Nothing loads until the card is expanded, so there is no performance impact on the Devices view.
5. Use the Subnet selector to choose your view:
   1. Subnet overview (default): Each subnet appears as a bubble sized by its device count. Click a bubble to drill in.
   2. All devices (full graph): Shows every device across the environment, up to the configured Max count.
   3. A specific subnet: Shows only the devices in that subnet.
6. Click any node to center it and open its detail panel.

To work in fullscreen during a live troubleshooting session, click the fullscreen toggle. Press Esc to exit.

Tip: A plain scroll over the map scrolls the page. Hold Ctrl (Windows) or ⌘ (macOS) and scroll to zoom the map.

---

Filters

Open Filters to refine what appears on the map.

Layouts

• Tiered (default)
  Arranges the map top-down by network role. Gateways, routers, firewalls, and wireless controllers sit at the top, followed by subnets and VLANs, switches, access points, hypervisors, storage, and UPS devices, then endpoints, with unmanaged nodes at the bottom. Rows with more than 10 siblings wrap.

• Grouped, Force, Radial, and Grid
  Alternate arrangements for exploring the same data.

---

Find Node

Type a device name in Find node to search the map. Selecting a result centers the map on the device, highlights it, and opens its detail panel.

---

Analysis Lenses

Lenses highlight one category of connection or device state and dim everything else on the map.

Lenses are disabled while a Path Finder result or a Node types highlight is active.

---

Node Types

Use Node types to highlight every node of one or more network roles at once, such as all firewalls in an environment.

Available roles include Router, Switch, Firewall, Access point, Wireless controller, Hypervisor, Virtual machine, Workstation, Printer, IoT device, Storage, UPS / power, VLAN, Unmanaged, and Unknown network role.

---

Path Finder

Path Finder traces the shortest connection between two devices and highlights it on the map.

1. Select a Source device.
2. Select a Target device.
3. Click Find path.

The result displays one of the following:

• Physical path · N hops
  The route uses only subnet, gateway, and VLAN placement.

• Logical path · N hops
  At least one hop uses a discovered or curated device-to-device relationship.

• No path found
  No connection could be traced between the two devices.

---

Focus View

Double-click any device to load only that device and its direct neighbors. Click Exit focus in the card header to return to the full map.

---

Node Detail Panel

Click any node to center it and open its detail panel.

• Devices
  Overview, Sources, Network, Interfaces, Hardware, Virtualization, Ports (for switches), Relationships, Activity, Security (Internet exposure, AV, and EDR), Lifecycle, and Tags. Empty sections are hidden.

• Subnets
  CIDR and device count.

• Gateways
  IP address and Also device, when the gateway is also an inventoried device.

Most fields include a filter icon. Click it to filter the Devices table below the map by that value.

---

Unmanaged Devices

Turn on Include: Unmanaged devices in Filters to surface devices that a supported network inspector has seen in an ARP table, client list, or routing table but that don't match anything in your inventory. These appear as dashed "ghost" nodes.

---

Map Controls and Summary Bar

• Legend
  A collapsible key to node shapes, outlines, and badges.

• Zoom and Fit to View
  Zoom in, zoom out, or fit the entire map to the card.

• Mini-Map
  Shows your position on large maps.

• Hover Card
  Hover over a node to see key details and badges: Exposed, Stale, Unmanaged, and Also device.

• Summary Bar
  Displays counts for the current view: Device(s), Subnet(s), Gateway(s), Unmanaged, Max count, and Excluded Device(s). Notices appear here when results are truncated or connections are hidden.

---

Refresh the Map

Use the Refresh menu to update the map:

• Refresh with current data
  Reloads the map with the latest ingested data.

• Rebuild topology from scratch
  Recomputes the topology from data that has already been ingested.

New devices and connections are added only when new inspection data is ingested. Unresolved network observations are re-matched automatically several times a day, and observations older than 30 days are retired nightly.

---

Devices Table Columns

Two optional columns are now available in the Devices table, hidden by default: Default Gateway and Primary Subnet CIDR.

---

Use Cases

• Find a Misconfigured Adapter
  A workstation can't reach a file server. Drill into the subnet and see that the workstation sits on a different subnet than expected, identified in seconds instead of by logging into a switch.

• Trace a Path to the Internet
  Use Path Finder between a laptop and the firewall to highlight the exact chain of connections through the customer's switches, turning a manual switch-config trace into a two-click answer.

• Catch Untracked Hardware
  Turn on Include: Unmanaged devices while reviewing a guest Wi-Fi network to surface devices that have been active on the network but were never added to inventory.

---

Current Limitations

• Network Topology Explorer complements the Devices table; it does not replace it.
• Physical switch-port-to-switch-port link discovery (LLDP/CDP) is not yet supported. Only ARP-table, client-list, and routing-table relationships are shown.
• Node layout is generated automatically and can't be manually arranged.
• The card can't be turned off per account or per user. Because it is collapsed by default, it has no load cost until expanded.
• Export is not yet available.
• Live online/offline device status is not yet shown on nodes.
• When more than 2,000 devices are in view, device-to-device connections and unmanaged nodes are hidden and a notice is displayed. Select a single subnet to see them.