New User FAQs

What is Nodeware?
Nodeware is an AI-driven continuous vulnerability management platform tailored for MSPs, offering a multi-tenant dashboard, streamlined deployment (under 30 minutes), internal and external IP address scanning, and detailed vulnerability data with actionable remediation guidance.

What’s the difference between Nodeware Sensors & Agents?
Sensors (network-level) are installed on the network to monitor traffic and collect data. It is responsible for scanning the network to identify devices and assess their vulnerabilities. The sensor can be deployed in various environments, including on-premises, in the cloud, and or in hybrid setups. It provides visibility into the security posture of the network and helps in detecting potential threats.

Agents (device-level) are installed on individual devices or assets within the network. It communicates with the Nodeware platform to provide detailed information about the device’s security status. The agent is used to monitor the device’s vulnerabilities and ensure that it is compliant with security policies. It allows for more granular control and management of the device’s security.

How does it work?
Nodeware connects to your assets, via sensors and agents, to collect information about the operating system, services, and processes, and scans those assets for vulnerabilities. It is efficient and lightweight, both in terms of requirements and impact on your environment, and it continuously scans, in the background, 24x7 with no network degradation. Nodeware delivers enhanced, real-time visibility into those connected assets providing vulnerability data that can be compiled into detailed custom reports to achieve security compliance.

Do I need vulnerability scanning?
It is more important than ever that organizations incorporate vulnerability scanning into their cybersecurity approach as attacks and breaches become more commonplace and continue to target smaller organizations that lack industry compliance requirements and capabilities. Many malicious campaigns target large swathes of the internet at a time searching for vulnerable systems and services that can be compromised with widely available exploits.

How often do I need to scan for vulnerabilities?
Generally, it is advised to scan your environment for vulnerabilities on a regular cadence, after any change to the network, and after a new threat is announced. With the rapid pace that networks are growing, and vulnerabilities are published, it has become the standard to encourage continuous scanning and monitoring, which Nodeware provides.

In addition, many insurance companies are now requiring continuous vulnerability scanning.

How does continuous scanning work? Will it impact my network?
Nodeware runs continuously, 24x7, including during normal business hours, with no network degradation. The scans do not impact critical systems in ways that make them unavailable. Continuous does not mean constant scanning. The Sensors run continuously to detect new and unknown assets and to determine the availability of known assets for scanning. Nodeware will attempt a full scan of each asset once a day to ensure coverage of the latest threats and provide real-time views into your network and assets.

The Agents maintain communication with our cloud service so your system's online/offline status is always available and on-demand scans can be initiated outside the timeframe of the automatic daily scan.

I've had vulnerability scans run after hours. Can Nodeware be scheduled?
Traditional vulnerability scans tend to run end-to-end on your network and generate a large amount of traffic during the discovery and vulnerability scanning phases. They also miss key assets, such as employee laptops, phones, and other devices that leave the network or are shut off at the end of the workday.

Nodeware was designed from the ground up to work differently. We constantly work on fine tuning the inventory, fingerprint, and vulnerability scans to have no user observable impact on the network or the assets being scanned. Therefore, Nodeware creates its own schedule based on asset availability and can be run 24/7, ensuring it sees all assets, not just the ones online after hours.

How do I get started?
You can get started with Nodeware by purchasing a subscription or starting a trial, either directly from us or through one of our partners. Visit nodeware.com to learn more.
Once you have created an account, check out the Deployment section to get started.