Request a demo
HomeCyberEye
Detection & response ยท visibility

You cannot baseline what you cannot see.

CyberEye is the inventory and observation layer. It finds every device that speaks on your network, including the ones nobody documented, classifies it by behaviour, and keeps watching it in real time.

<24hFull asset discovery
28Behavioural classes
Real timeRefresh interval
What it surfaces

The devices your asset register forgot.

Most networks carry between ten and thirty per cent more live devices than the documentation claims. CyberEye finds them by listening, not by asking.

Passive discovery

Devices are identified from the traffic they generate, so nothing needs an agent or a credential.

Behavioural classing

A camera, a controller and a laptop behave differently. Each gets its own class and its own normal.

Segment-level view

Every VLAN and subnet rendered as it actually behaves, not as the diagram says it should.

Change history

When a device changes what it talks to, the change is dated and kept.

Why it matters

Visibility is the precondition, not the product.

Every other module on the platform is only as good as the picture CyberEye maintains. That is why it runs first and never stops.

  • Shadow IT surfaces itselfUnmanaged devices show up the moment they transmit, not at the next audit.
  • Segmentation gets verifiedYou see whether your VLAN boundaries are actually holding, in traffic rather than in policy.
  • Baselines stay honestWhen the estate changes, the model is told immediately instead of drifting quietly.
Devices discovered passively100%
Requiring an agent0%
Classification accuracy96%
Time to first inventory<24h
Rollout

From tap to full picture.

No agents, no downtime, no maintenance window needed.

Mirror the traffic

A SPAN port, tap or cloud mirror, whatever your environment already supports.

Listen

Devices announce themselves through DNS, DHCP, ARP and their own conversation patterns.

Classify

Each device is grouped by observed behaviour and given a profile of its own.

Hand off

The inventory feeds NDR, and every module downstream inherits it.

Coverage

What gets seen where.

Coverage by environment, stated plainly rather than in marketing shorthand.

EnvironmentDiscoveryBehavioural profile
On-prem LAN / VLANs
Data centre east-west
Cloud VPC / VNet
Remote endpoints
OT / industrial segments
Third-party managed circuitsPartialPartial
Questions

What teams ask before they switch.

Straight answers, including the ones that make a sale harder.

Will this slow the network down?
No. CyberEye reads mirrored traffic. It sits beside the path, never in it.
Do we need agents on endpoints?
Not for discovery or classification. Agents add depth on endpoints where you want it, but they are optional.
How does it handle IP churn?
Devices are tracked by behavioural fingerprint as well as address, so DHCP changes do not create phantom assets.
Can we export the inventory?
Yes, CSV or API, on a schedule, into whichever CMDB you already run.
See it on your network

Ask us what we would find in your estate.

We will run discovery against a mirrored segment and show you the device list, including the parts you did not expect.