Open source asset management and discovery

Know the equipment behind your OT network.

Discover industrial devices with OTserver Otter and keep their hardware identity, software versions, network connections, and source evidence in one inventory hosted on your infrastructure. Schedule scans by site and review the vulnerability advisories that match your equipment.

Deploy OTserver See inventory features

Need an enterprise version or managed hosting?

Demo PLC showing firmware, endpoints, open vulnerability findings, and tabs for network, hardware, security, discovery, and history

Read only asset discovery Windows & Linux Managed scan schedules Access scoped by site Immutable audit trail

One trustworthy inventory

Keep the device history as the network changes.

Import Otter discovery results into the right site. OTserver separates physical hardware from network endpoints, links qualified hardware identities across interfaces, and preserves human edits when new evidence arrives.

Hardware, interfaces, and modules

Track physical devices, their network endpoints, and installed components. Review identity conflicts and retain replacement history.

Vulnerability management

Match recorded versions against NVD and CSAF advisories. Confirm or dismiss potential matches, then track confirmed findings through resolution.

Scoped roles and history

Grant read or write access by site and retain an immutable audit log that redacts secrets.

Vulnerability management

See which advisories match the equipment you run.

OTserver compares recorded vendor, product, operating system, and version data with locally stored NVD and CSAF advisories. CISA KEV highlights known exploitation, and the ICS Advisory Project adds industrial advisory context.

Filter findings by severity, inspect the evidence for affected versions, and record your review. Confirmed findings stay open until you resolve them, even if a later import changes the matching evidence.

Matching uses inventory evidence without sending vulnerability probes to devices. For disconnected installations, transfer publisher feed files and import them into the local catalog.

Read the vulnerability management guide

Asset Security view with severity filters, an unconfirmed CVE, matching version evidence, and Confirm and Dismiss actions

Inside OTserver

Manage the inventory without losing the evidence.

These product screenshots use demonstration data to show site structure, scan scheduling, imports, and recorded network connections.

Production line topology with a router, switch, PLC, HMI, and separate recorded and inferred links — Recorded connections and inferred network membership

Site hierarchy with countries, plants, production lines, site types, and import restrictions — Geographic and production sites in one hierarchy

Otter schedule selecting a saved scanner configuration, cron expression, and time zone — Scheduled discovery from a saved Otter configuration

Completed Otter import with its destination site, source, and counts of created and updated assets — Import status and results tied to the selected site

OTserver Otter: read only discovery

Find more than a list of IP addresses.

Otter collects industrial identity and topology through ARP, PROFINET DCP and PNIO, S7, EtherNet/IP, BACnet, Omron FINS, Beckhoff ADS, Niagara Fox, DNP3, IEC 61850, OPC UA, SNMP, and LLDP. NetBIOS and SMB/RPC add computer names and reported OS evidence; HTTP/HTTPS records web service responses.

Use the Windows or Linux GUI for local exports, the CLI for direct uploads, or install a managed controller to run scheduled scans in the background. Discovery requires explicit authorization.

Manage Otter scanners
Compare supported protocols
Read the Otter guide
OTserver Otter on GitHub

Otter v0.13 GUI with Beckhoff ADS and HTTP/HTTPS toggles, local export settings, protocol credentials, and scan log

Run it yourself or let us manage it

Start with the open source release.

Deploy OTserver on your own infrastructure. Both repositories are developed in the open: the OTserver application and the OTserver Otter scanner. For the enterprise version or managed hosting, talk to us.

Deployment guide Contact us