The Problem
Tens of thousands of findings only become a manageable list when someone owns each one — but most estates have no map of who owns what. Unowned routes and paths are the exposures that rot: nobody's job, nobody's fix, until they surface as an incident.
What It Does
Atlas maps every exposure route (vuln_route) and filesystem path (vuln_paths) to the team or person who owns it — described in plain English — and tags every asset on a matched route or path with Owner:<name>. It turns tens of thousands of findings into a handful of owned paths, and puts the unowned and ownerless gaps front and center.
Key Capabilities
- Plain-English owner assignment — "give all payment routes to VM Team, put /opt and nginx paths under Networking" maps each route/path to an owner; no query language.
- Owners from your live directory — pulled from navi's users, user groups, and Tenable agent groups.
- Route- and path-scoped tagging at scale — applies Owner:<group> to every asset on a matched route (--route_id) or path (--query).
- Ownership graph — routes and paths threaded and Sankeyed to their owners, with ownerless risk called out.
- Gaps are the headline — the unassigned surface leads, so nothing rots without a name.
- Gated Owner writes — every assignment is proposed, human-approved, and logged.
How It Works
Atlas reads routes and paths from navi.db and owners live from the Tenable API; a natural-language step maps each item to an owner; applying it tags every asset on the route/path with Owner:<name> through the gated navi tag path. All writes are proposed, human-approved, and logged.
Who It's For
Vulnerability management leads who need every finding to have an owner; team leads who want their slice, not the whole estate; CISOs who need to show accountability coverage and ownerless risk.
Proof Points
Atlas turns tens of thousands of findings into a handful of owned paths, and the ownership graph shows precisely which routes and paths still have no owner. Ownership depends on the directory data available; unmatched items are surfaced, not hidden.
Works Better With
The pack's accountability layer — pairs with Gabriel (emails each owner only their assets) and Linnaeus/Classify (names the unknown assets that stall ownership); every downstream email and report routes to the owners Atlas assigns.