Capture & Ingest
Records land in CEDX Inventory IT already linked to the canonical customer, employee, or vendor ID.
CEDX Inventory IT is the hardware and software ledger: every device tagged, aged and assigned, every license title counted purchased-versus-used, and the waste priced in dollars, not percentages.
"Consolidating onto CEDX eliminated four middleware connectors and cut our weekly forecast and close reconciliation fro..."
| Security Control / Asset ID | Principal / Endpoint Scope | SOC Owner & Policy | Telemetry / Grant Age | Enforcement Action | Posture Score |
|---|---|---|---|---|---|
| PAM Just-in-Time Grant #481CEDX Inventory IT · Record #1040 | Prod DB Read · Exp in 45m | SecOps Auto-Reaper | 64 Stale Grants Revoked | ● Zero Standing Privilege | 99.4 / 100 |
| SIEM Correlation Rule #109CEDX Inventory IT · Record #1041 | 2.4M Events -> 12 Actionable | CISO Incident Pod | 0.3s Detection Latency | ● Session Quarantined | 100% Audited |
| Fleet Endpoint Posture · 344 Mac/WinCEDX Inventory IT · Record #1042 | FileVault + Crowd/EDR + Patch v26 | IT Security Ops | 342 Compliant · 2 Quarantined | ● Auto-Patch Scheduled | 99.1 / 100 |
| Vault Secret Rotation EngineCEDX Inventory IT · Record #1043 | 184 Production Keys & Certs | Platform Crypto Bus | Max Secret Age: 14 Days | ● Zero Plaintext Env Vars | FIPS Verified |
The oldest assignment in the demo has been out 1,077 days. The register does not round that to “long-term loan”; it prints the date, the days, and the recovery status.
Every capability below runs against the shared CEDX Postgres database with zero external sync queues or reconciliation lag.
The device table carries asset tag, model, quality, status, site, assignee, age and risk: a lost server at HQ, 62 months old, risk 93. Data quality is a column; 90 devices need enrichment, and they are marked rather than averaged away.
280 assignment rows: who has what, from which date, for how many days, active or overdue. 48 are overdue and need recovery. A network switch out 903 days is a row with a name, a site and a status, not a mystery.
90 titles, $5.42M of annual seat spend, 78% compliant. Each title shows purchased, used, idle, compliance and waste in dollars: one workspace tier has 30 idle seats worth $25K; another is over-assigned at 246 used against 239 purchased and marked Over.
Every figure below is directly inspectable in the running CEDX Inventory IT application workspace with zero synthetic projections.
Click any screen below to inspect how CEDX Inventory IT moves from initial intake to verified cross-estate completion.
$705K book value across 344 devices, $135K of it sitting on high-risk assets, audit coverage at 39%. The root-caused alerts are a to-do list: a laptop past warranty at risk 92, 42 idle design-suite seats worth $18.9K ahead of a renewal, the HQ physical audit 62% done with 8 findings.
When an employee changes roles or leaves in CEDX People, their SSO session, standing database grants, hardware asset, and Vault keys update in one second.
Records land in CEDX Inventory IT already linked to the canonical customer, employee, or vendor ID.
Deterministic rules and auditable Copilot signals rank every item by financial and SLA impact.
Operators resolve work in one click with role-based guardrails and instant cross-app writeback.
Every completed action updates live executive dashboards and the immutable audit log automatically.
Role-based views and permissions are enforced at the database row level so executives, managers, and frontline operators share one source of truth.
Owns the physical truth: scans, audits, the 39% audit coverage and the 31 unknown devices the network sees but the register does not.
Works the refresh board: 90 assets at risk ≥60, warranty expiries, and the repair queue of 37.
Reads the license ledger before renewals: 42 idle seats on a design suite, an over-assigned collaboration title, $1.23M of waste to true down.
CEDX Inventory IT is not an isolated point tool. It reads and writes the exact same customer, ledger, and identity records as the rest of the CEDX software estate.
The device's exposure score and patch lag sit on the same record as its asset tag and warranty: a 62-month laptop is old and exposed, once.
The 344-asset register is what the backup gaps board reconciles against: uncovered assets are a join, not a discovery project.
The 31 unknown devices are unknown because the network sees them and the register does not. Discovery coverage is the shared number.
Asset-inventory controls cite this register: audit coverage, lost-device recovery and warranty status are dated evidence.
"Consolidating onto CEDX eliminated four middleware connectors and cut our weekly forecast and close reconciliation from two days to twelve minutes."
"When Sales, Operations, and Finance read and write the exact same Postgres record, month-end stops being a detective investigation across six spreadsheets."
"Our operators actually enjoy opening the workspace. Every screen is fast, legible, and grounded in live production data with zero synthetic clutter."
Drag the seat slider to compare your current stitched stack (CrowdStrike + Datadog SIEM + CyberArk + HashiCorp Vault + Jamf + Kandji) against running CEDX Inventory IT natively on the unified CEDX estate.
Explore the live CEDX Inventory IT workspace on canonical demo data at /app/inventory-it, or book a 30-minute architecture session to map your first entity rollout.
Instant browser access to CEDX Inventory IT pre-loaded with canonical demo records and connected across the 132-application CEDX estate.