Risk derivation
Connection risk calculated from linked interfaces. Criticality, data class, PII auto-derived.
IT landscape
Document your entire information system.
Applications, technologies, interfaces and infrastructure in one place. Follow end of support and vulnerabilities down to the business application, and visualise your architecture on interactive maps.
Application portfolio
Maintain a comprehensive inventory of your applications with per-environment instances. Track ownership, criticality, compliance status and lifecycle stage. Manage version lineage as applications evolve.
- Logical applications with per-environment instances (prod, pre-prod, QA, dev)
- Version lineage tracking for evolution
- Lifecycle: Proposed, Active, Deprecated, Retired
- Ownership: IT owners, business owners, support contacts
- Compliance fields: data class, PII flag, residency
Interface documentation
Document integrations between applications with business and technical definitions. Support for direct connections and 3-leg middleware patterns (Extract / Transform / Load). Configure per-environment bindings with endpoints and authentication.
- Business purpose, data category, process linking
- Direct or via-middleware route types
- 3-leg support: Extract, Transform, Load
- Per-environment, per-leg binding configuration
- Functional definition: business objects, use cases, identifiers
Infrastructure registry
Track servers, locations and connections across your infrastructure. Support for on-premise and cloud deployments. Document network connectivity with multi-server topologies and layered routing.
- Server registry: VMs, databases, queues, containers, functions
- Locations: datacenters, cloud regions, availability zones
- Server-to-server and multi-server mesh connections
- Cluster support with member grouping
- If this server goes down: affected applications, clusters and processes
Technologies and end of support
Technologies link your applications to your servers: databases, middleware, operating systems, directories, cloud services. Each one carries its versions and their end of support dates, kept up to date by the catalog.
- A catalog of 192 products, a technology created in one click
- Support dates followed on endoflife.date and at the vendors, with their source
- Each server's operating system, with its version
- End of support report: what is reaching its date and what it affects
- Links to servers and applications, importable as CSV
Vulnerabilities
KANAP matches published vulnerabilities to your technologies, version by version, and shows the servers and business applications they affect. Exploited vulnerabilities come first.
- Two sources every 6 hours: the NVD and the vendors' records on CVE.org
- Exploitation signals: the CISA and European Union catalogs, EPSS score
- On server and application lists and records, and on the dashboard
- To review, addressed, not affected: with a note and the audit log
- Email to IT owners for severe or exploited vulnerabilities
Interactive architecture maps
Two D3-powered visualisations help you understand your architecture at a glance. Filter by environment, lifecycle or specific root nodes. Export to SVG or PNG for documentation. This landscape is also the map your agents read, to know which application a problem touches, who owns it, and how critical it is.
- Interface map: apps as nodes, interfaces as edges
- Connection map: servers and network connectivity
- Business view (hides middleware) and technical view
- Depth filtering: limit graph to N hops from selected nodes
- SVG and PNG export at 2x resolution
More in IT landscape
Administration zones
Who administers what, following the tiered model. Gaps in the separation between zones are flagged.
Cost linking
Link applications, servers and technologies to budget lines and contracts. See the true cost of your portfolio.
CSV import / export
Bulk import applications and assets. Export your inventory for analysis.
Ready to document your information system?
Self-host for free, or try hosted cloud. All features on every plan.