Asset classes

Accelerating remediation: Automated fix suggestions and manual remediation guidance enable developers to resolve code weaknesses directly in the source repository without context-switching to external

The asset inventory organizes your organization's resources into a hierarchy:

1. Class: The highest-level grouping based on general purpose or domain, such as compute, network, or data.
2. Category: A detailed grouping within a class based on normalized function, such as virtual machine, container, or bucket).
3. Type: The most specific, provider-level implementation, such as AWS EC2 instance or GCP Compute Engine instance.

The following asset classes are available in the inventory:

Asset class	Description	License
AI	Provides a detailed view of AI-related assets, their attributes, and associated risks.
API	Provides a comprehensive view of Application Programming Interfaces (APIs) across your cloud platforms.
Application	Provides a high-level summary and detailed insights into the business applications within your environment.
Code	Provides an overview of code assets, including all code repositories, Infrastructure as Code (IaC) resources, CI/CD pipelines, and software packages.	Notice This feature is included with the AppSec add-on.
Compute	Provides a detailed overview of compute resources, including CaaS resources, virtual machines, containers, serverless functions, Kubernetes clusters, and general devices.
Data	Provides an overview of data assets and their associated risks, highlighting sensitive assets and assets marked as open to the world.
Device	Overview of physical or virtual devices with a Cortex XDR agent installed.
External Surface	Provides an overview of external-facing assets, including services versus websites, domains versus certificates, and their distribution across providers.	Notice This feature is included with the Attack Surface Management (ASM) add-on.
Identity	Provides an overview of identity-related assets, giving visibility into both user and service-based identities and their associated permissions.
Network	Provides an overview of network-related assets, including Load Balancers, Network Interfaces, Security Groups, and Subnets.
Security Services	A complete overview of the security services being actively managed within your environment.
All Other Assets	All assets that are uncategorized.