The Problem
Your Tenable agent groups already describe how the estate is organized — but that structure is invisible everywhere tags are consumed. Scans, reports, automation, and every downstream hound work from tags, and when tags drift out of sync with deployment reality, segmentation quietly stops meaning anything.
What It Does
Sirius tags assets by their Tenable agent group, turning deployment structure into clean, queryable tag segmentation. Group membership becomes usable structure everywhere tags are consumed — one mapping, consistently applied, kept current.
Key Capabilities
- Agent-group → tag mapping — your deployment's own organization becomes tag structure, automatically and consistently, without inventing a taxonomy or holding a design meeting.
- Clean segmentation — group-based asset populations ready to scope scans, filter reports, and drive downstream agents. One mapping, consumed everywhere tags are.
- Gated writes — even routine structural tags are proposed, human-approved, and logged. Nothing writes silently.
How It Works
Sirius reads agent-group membership from your Tenable data in the local navi.db and proposes matching tags. All writes are proposed, human-approved, and logged.
Who It's For
Security operations teams who own the tag estate, and anyone who wants scans and reports scoped by how the deployment is actually organized.
Proof Points
In a reference environment of 268 assets, Sirius's group tags are the segmentation backbone the pack's producers and the Contract build on — structure laid down once, consumed everywhere. Tags propagate to the Tenable UI/API on Tenable's schedule.
Works Better With
Sirius pairs with Garmr — structure laid down, clutter swept out — and feeds Covenant, which keeps group tagging current on the Contract's schedule.
Why It's Different
- Structure you already maintain — no new taxonomy to invent; agent groups become tags with zero design meetings.
- Reliable segmentation for the whole pack — every other hound's group-scoped work stands on Sirius's tags.
- Gated like everything else — even routine structural tags are proposed and approved, never silent.