PlatformPlatform architectureProduct tourProduct graphRisk intelligenceContinuous governanceEvidence & auditDeploymentIntegrationsExecutive view
BOM SuiteSBOMCBOMQBOMAIBOMHBOMBOM Governance
SolutionsSecurityComplianceSupply chain riskQuantum readinessAI governanceDigital trust
ComplianceCERT-InRBISEBI / CSCRFMeitYNISTEU CRAEU AI ActCERT-In SBOM guide
IndustriesBanking & Financial ServicesGovernment & Public SectorDefence & Critical InfrastructureHealthcareIndian enterprises
ResourcesResource centreSBOM resourcesCBOM resourcesQBOM resourcesAIBOM resourcesHBOM resourcesProgramme & regulationBlogVulnerability disclosuresResearch
CompanyAboutSecurity & trustContact
Request a DemoTalk to an expert
DocumentationPlatform guideUpdated October 2026

Assets and scanning

Register machines, run SSH scans and read an asset in depth, tab by tab.

The Assets page

Assets is where you register machines that IntelliXBOM scans remotely over SSH. The page shows Total, Reachable and Non Reachable counts and an Asset List (machine name, IP, OS, port, status, Delete action). Use Refresh to re-check the list.

1RegisterAdd the machine: name, IP, OS, SSH credentials
2Check connectionConfirm the asset reads Reachable over SSH
3Run scanSBOM, CBOM and HBOM run together; AIBOM runs separately
4Collect BOMsEach run lists its BOM files, counted S / C / H
5Read coverageOverview and BOM Library show what was found

The asset onboarding and first-scan path, end to end.

Register a machine

Click Add Asset and complete the fields:

FieldRequiredNotes
OrganizationYesFor example Globex Inc., Acme Corporation, Default Organization
Machine nameYesDisplay name, e.g. prod-web-01
IP addressYesAddress the scanner connects to
UsernameNoSSH user
PasswordNoOptional when a PEM key is used
Operating systemYesLinux, Windows, iOS, macOS, Solaris, Unix
SSH portNoDefaults to 22
PEM key fileNoKey-based SSH authentication
Scan scopen/aFull machine, or Specific directories
BOM types to generateYesSBOM, CBOM (required by QBOM), HBOM, QBOM, AIBOM (separate scan)

QBOM needs CBOM, which is ticked automatically. SBOM, CBOM and HBOM run together in the security scan; AIBOM runs separately and needs at least one AIBOM target.

Asset detail

Asset detail Overview tab for app-server-01, showing scan success rate, last successful scan, BOM coverage counts and recent scans.
Figure 1Asset detail: the Overview tab for a single machine.

Click a machine name to open it. The header shows status, IP, OS, port, user and enabled BOM types, with Check connection and Run security scan buttons. Tabs:

  • Overview: scans on asset (success / failed), success rate, last successful scan, BOM coverage and recent scans.
  • Scans: every run with status, start time, duration, BOM counts (S / C / H) and PIDs; filter All / Success / Running / Failed.
  • Hardware: HBOM analysis per run, with component counts by category and a Dep Tree view.
  • Cryptography: CBOM/QBOM analysis per crypto location, with algorithm, key and certificate counts, a risk badge and a Dep Graph (Graph View and Tree View).
  • BOM Library: all BOM files generated for the asset, filterable by type and format (CycloneDX, SPDX).
  • Settings: edit connection and BOM generation; add AIBOM targets and scan paths.

Scan runs and the Dep Tree

On the Scans tab, click the arrow at the end of a run's row to open its side panel. A completed run lists every BOM file it produced, filterable by type; a failed run shows the error message and a diagnosis, with Check connection and Retry scan buttons. The BOMs column counts SBOM, CBOM and HBOM files per run (for example 11 / 5 / 1).

The Hardware Dep Tree is a collapsible tree for one HBOM run. Levels run ROOT (the system), DIRECT (category groups such as Motherboard) and TRANS (individual parts: CPU, disks, network interfaces, GPU, BIOS). Use Expand All / Collapse All and search; green marks a direct dependency, purple a transitive one.

Asset settings

  • Connection settings › Edit: machine name, IP, username, password, OS, SSH port, and Replace key for the PEM file.
  • BOM generation › Edit: tick or untick SBOM, CBOM, HBOM, QBOM, AIBOM.
  • Add AIBOM target: a Directory, Docker Image or Docker Container (a container is resolved to the image it was started from).
  • Add scan path: absolute directory paths such as /var/log; an empty list scans the whole machine.
See it on your own stack.Register an asset, run a scan and read your first BOM in minutes.
Request a Demo