Architecture & Build asset inventoryCMDBNetBoxosquery

Build Series Vol. 02 — Asset Inventory & Discovery

Discovery tells you what is out there. The source of truth holds what you have decided about it. The control lives in the reconciliation between them, not in either list.

The decision this volume is really about: merge keys, and the reconciliation loop that makes the inventory a control rather than a spreadsheet.

Control mapping first. The exact SOC 2, ISO 27001:2022, NIST CSF 2.0, CIS v8.1, CMMC, PCI DSS v4.0.1 and HIPAA clauses this build satisfies are printed before any installation step, so the work becomes audit evidence rather than a side effect of it.

A validation harness, not just a build. How to prove the control works and — the part nothing free covers — how to catch it failing quietly: the expired scan credential, the canary that stopped, the encryption key nobody can recover, the segmentation your diagram claims and your firewall does not.

Three sized architectures with honest hour counts. Tier 1 is 15–30 hrs to build · 3–6 hrs a month.

Stack: NetBox · Nmap · runZero CE · osquery/Fleet · cloud and identity APIs.

Current as of August 2026. runZero Community Edition is free to 100 assets and is not open source; the fully open path is Nmap with Netdisco. For a fully remote company, network scanning finds a router and a printer — the identity provider, MDM and EDR are the authoritative sources, and the volume is built that way.

Every volume runs the same nine sections: prerequisites, control mapping, the decisions that matter, three sized architectures, a build runbook, a validation harness, an evidence pack, an operating cadence with honest hour counts, failure modes and the buy line, and an AI prompt pack.

Reading order: read 1st of ten. Each volume stands alone, and each is cheaper to build if the one before it exists.

Ships without support. This is a document, not a service contract — and Section 8 tells you plainly where the buy line is.

Also available in 7 bundles

This product is sold on its own and as part of a set. If you need more than this one, the set is cheaper than buying the parts.

3 products saves $48.00

Build Series Foundation Bundle

Volumes 02, 01 and 06 — inventory, detection and identity. The three everything else depends on.

$199.20

4 products saves $97.00

Open SOC Architecture + Build Foundation

The Open SOC Reference Architecture plus Build Series Volumes 02, 01 and 06 — the system-level design, then the three planes everything else depends on.

$279.20

4 products saves $207.00

SOC 2 + Build Foundation

SOC 2 Readiness Accelerator plus Build Series Volumes 02, 01 and 06 — the workbook that identifies the requirements, and the three volumes that make them real.

$391.20

4 products saves $227.00

ISO 27001 + Build Foundation

ISO 27001:2022 Readiness Accelerator plus Build Series Volumes 02, 01 and 06 — the workbook that identifies the requirements, and the three volumes that make them real.

$415.20

4 products saves $247.00

HIPAA + Build Foundation

HIPAA Readiness Accelerator plus Build Series Volumes 02, 01 and 06 — the workbook that identifies the requirements, and the three volumes that make them real.

$439.20

10 products saves $291.00

Complete Build Series

All ten volumes in reading order — a security department built out of open source, with control mappings, validation harnesses and honest buy lines throughout. 29% off buying separately.

$559.20

11 products saves $340.00

Open SOC Architecture + Complete Build Series

The reference architecture and all ten build volumes — the whole system-level design plus every plane built end to end, in the recommended build order. 30% off buying separately.

$639.20