uControl Insights · Discovery

See every asset. Map your whole estate.

Continuous, agentless discovery across IT, OT and cloud. Plus a roaming-device agent and an in-platform AI layer, turned into one searchable inventory with live topology and dependency mapping.

Book a demo

Agentless, read-only discovery across IT, OT & cloud
One unified inventory, aged and lifecycle-tracked
Ask uControl — plain-English answers over live data

Discovery, end to end

Find everything, actively and passively.

From credentialed deep scans to fully passive flow analysis, Insights discovers every asset across IT, OT and cloud, then maps how they connect.

Estate-wide discovery

Agentless, read-only discovery of Windows, Linux, macOS, SNMP devices, VMware, Nutanix and Proxmox. Smart Scan auto-detects the right connector per host.

Cloud discovery

Inventories AWS, Azure and Google Cloud across every region, VMs, databases, storage and load balancers, with full project hierarchy.

OT device discovery

Recognises PLC, RTU, HMI, SCADA and building-control systems. Passive-first and do-no-harm; active identity reads are read-only and opt-in.

Credential-free recognition

Identifies devices with no credentials at all via mDNS, SSDP/UPnP, NetBIOS and public SNMP, so unmanaged kit still shows up.

Ask uControl

An AI layer built into the platform, not bolted on.

Insights ships a genuine in-platform AI assistant that reasons over your live inventory, topology and network-flow data, something few discovery and asset tools have. It’s off by default: nothing calls out until an admin enables it with their own provider key.

Ask in plain English“Show me Windows servers in London not seen in a month?” the answer is delivered from live data, no query language, no exports.

Scan self-diagnosisWhen a discovery scan fails, AI explains the likely root cause, ranks fixes and gives a confidence score, in the UI and on Teams.

Risk scoring & anomaliesRanks every asset 0–100 from exposure and criticality, and flags network conversations a device has never had before.

Daily estate digestAn AI-written morning summary including headline, highlights and recommended actions, all posted straight to Microsoft Teams.

Private & controlled by design

A tool-calling assistant over read-only methods, it never writes or sees SQL, and never receives your database schema
Bring your own provider, OpenAI, Anthropic, or self-hosted Ollama for air-gapped estates
Off by default; nothing runs until an admin enables it with a key
Results are row-capped and credentials are excluded from anything sent to the model

The endpoint agent

Inventory the devices that never touch your network.

A small Windows & macOS agent, deployable through Intune, SCCM, Jamf or any RMM, auto-creates an asset for every roaming or home-working laptop, no scannable network required.

Hardware, logged-in user and installed software
Per-app usage, the signal behind licence reclaim
Peripherals over USB & Bluetooth, plus USB storage
Reports outbound; a fleet view flags agents gone quiet

Discovery that finds its own blind spots

See what active scanning can’t.

By reading NetFlow/IPFIX, Insights materialises assets and their real communication paths without touching them. Then exposes the dark space that’s live in traffic but invisible to scanners.

Fully passive; no credentials, no active scan
Flags shadow-IP hosts outside known target ranges
Proposes the missed subnets as new scan targets
Ideal for sensitive OT and segmented networks

Built for the enterprise

Secure by design.

Agentless core

Read-only discovery

AES-256-GCM

Encrypted credential vault

SSO

SAML · OIDC · LDAP

RBAC

Six roles + audit log

Deploy anywhere

On-prem · cloud · hybrid

Questions

Frequently asked.

Can uControl inventory laptops that are never on our network?

Yes. The Windows/macOS endpoint agent reports hardware, user, installed software, usage and peripherals over an outbound check-in, and auto-creates an asset. Homeworker and roaming devices appear in inventory without ever being on a scannable network. Deploy it via Intune, SCCM, Jamf or any RMM.

Does the AI send our data to a third party or need SQL access?

AI is off until an administrator enables it and supplies a provider key, and you can run it fully self-hosted with Ollama for air-gapped estates. It’s a tool-calling assistant over read-only methods. It never writes or sees SQL, never receives your schema, and secrets are excluded from anything sent to the model.

Can it find devices we don’t even know about?

Yes. By mining NetFlow/IPFIX, uControl surfaces shadow-IP hosts that are live in traffic but were never scanned and sit outside your known target ranges, and proposes the active subnets as new scan targets.

What does uControl notify us about in Microsoft Teams?

Severity-coded cards for discovery scans that complete with errors or fail entirely, each with the AI diagnosis and recommended actions when AI is enabled. Plus an optional daily AI estate digest. The integration is one-way (uControl → Teams).

Is my data secure, and can I run it on-premise?

Credentials are encrypted at rest (AES-256-GCM), access is RBAC-controlled with a full audit log, and SSO is supported via SAML, OIDC and LDAP. Deploy on-prem, cloud or hybrid. Remote workers reach the control plane outbound through NAT, with no inbound firewall rules.

Why we built it

Every IT decision, cost, risk, or change, is only as good as the data underneath it. We built Insights to see everything, everywhere: agentless across IT, OT and cloud, right down to the devices that never touch the network. Teams can act on one version of the truth instead of arguing over a spreadsheet.

S Steve Hicks CTO, TekWurx