CAVALL identifies and names custom, internal, and shadow applications across your environment — reading app-route and filesystem-path data from navi.db to surface software that asset management tools miss and that attackers exploit.
Capabilities
- Reads app routes and filesystem paths from navi.db to fingerprint custom applications
- Builds application-to-asset mappings for exposure correlation
- Identifies shadow applications and unsanctioned deployments
- Proposes names and tags — gated, previewed, written only on confirm
What CAVALL Hunts
CAVALL reads the routes and paths the Search Pack surfaces — finding the internal portal built three years ago, the custom tool running on a forgotten VM, the shadow app deployed outside IT's view — and gives each one a name.
Why It Matters
You can't secure what you can't name. CAVALL gives every application an identity so it can be assessed, tracked, and protected — working from the data already in navi.db, not a separate scanner.
Gate Model
All proposed names and tags are previewed before any write. CAVALL requires explicit per-call confirmation before touching your Tenable tenant. Works entirely from navi.db — no external feeds.