Duplicates merged, carefully
Records are matched by cloud ID, serial, MAC, hostname and IP in that order. An IP-only match is never merged automatically; a person decides.
Correlation engine
Purplecop GRC · Asset discovery
Know exactly what your controls apply to
Every control applies to something: a laptop, a cloud account, a user. Kept in a quarterly export, that list is wrong the day it is finished. Purplecop builds the inventory from the systems that already know it, merges duplicates, and flags the devices nobody has claimed.
The difference
From a quarterly export to a living inventory
How an asset becomes part of your compliance scope.
Why Purplecop
What sets Purplecop asset discovery apart
An inventory you can trust, because it shows its own gaps.
Rogue devices, triaged
Unknown devices are flagged with severity by zone and a 24-hour SLA, then authorised, ignored until a date, escalated or quarantined.
Rogue detection
Gaps you can see
Coverage views show assets missing EDR or MDM, with no owner, seen by one source only, stale, or running end-of-life software.
Coverage
Network sensor with a safeguard
A sensor finds devices on the local network; an active sweep needs a written authorisation reference first.
Network discovery
Ask the inventory
A read-only assistant answers questions about your inventory and builds an evidence pack.
Asset Copilot
One click to a risk and a fix
Escalating a rogue device opens a risk entry and a corrective action, with the device fingerprint attached as evidence.
Escalation
What you get
Built on one platform, with people who use it
Platform
Purplecop GRC
The whole GRC estate in one product: frameworks, controls, policies, evidence, risk and audit on one control library.
Asset discoveryCorrelation engineRogue detectionCoverageAsset Copilot
Services
Practitioners beside the platform
The team that runs your engagement works inside the same system, so the work they do stays with you.
Also on the platform
TPRM
Onboard, assess, score and continuously monitor every vendor in one workflow.
Third-party risk
Asset Intelligence
Asset discovery, network monitoring and the audit log in one module, so every asset’s data lives in one place.
Asset Intelligence
Phishing Simulation
Live phishing campaigns with per-user risk scores, run entirely in-house.
Human layer
LMS
Role-based security awareness training for every employee, tracked to completion.
Human layer
People
A directory of the people in scope for training, policy sign-off and access reviews.
People
RBAC
Role-based access control with granular permissions, on a least-privilege model.
Access control
Questions
What teams ask us about asset discovery
Which systems does it connect to?
AWS (EC2, RDS and S3), Microsoft Intune and Microsoft Entra ID, all read-only. Ask us about the rest of your estate.
Does it change anything in our tenant?
No. The connectors only read.
What happens to a rogue device?
It is flagged with a 24-hour SLA and can be authorised, ignored until a date, escalated or quarantined. An ignore that expires is flagged again.
How much faster is it?
It scales with how much you integrate: the more connectors you turn on, the more evidence is collected automatically, saving up to 70% of the time you used to spend preparing for each audit.
See it against your own scope
We will walk the product against your scope and show you what runs on day one and what needs configuring.