Systems Sensor

Watch every system as it changes

Systems Sensor watches the resources, services, and integrations every initiative depends on — cloud, identity, endpoint, ITSM, networking, observability. Current state vs. target state, conformance by field, drift, and the last reconciliation, for every record, every minute.

14 Data SourcesLive
Okta
Connected
AWS
Connected
Microsoft 365
Connected
ServiceNow
Connected
CrowdStrike
Connected
+ 9 more connected
Systems
Work
People
Evidence
1

API-native, no agents

Every connector uses the provider's own API surface. Nothing to install in your environment, nothing to maintain.

2

Project-scoped discovery

Panaptico only pulls what the rollout needs. The graph stays lean by design, scoped from the user's intent.

3

Unified primitives

Every discovered object collapses into one of four project primitives: systems, work, people, evidence.

Watch

148k resources watched, unified across every source

Sensor deduplicates findings from overlapping tools and preserves full provenance for every attribute — so you always know which source said what, when it last refreshed, and whether the record matches target.

148k Resources Watched

148,291 resources unified and continuously reconciled

Deduplicated across sources · current state checked against target

System NameSystem OwnerOS / DistributionCriticalityData Source
prod-api-gateway-01platform@panaptico.comUbuntu 22.04High
Qualys
AWS
auth-service-prod-mainIT teamUbuntu 22.04High
Orca
analytics-pipeline-proddata-eng@panaptico.comWindows Server 2016High
Tenable
ServiceNow
file-storage-cluster-02Infra engCentos 7.3.1611Medium
Rapid7
dev-sandbox-testingcurtis.w@panaptico.comRocky 8.10Medium
CrowdStrike
Microsoft
nettapphxy-12james.p@panaptico.comRocky 8.10Medium
Orca
nettapphxy-13james.p@panaptico.comRocky 8.10Medium
CrowdStrike
1

Cross-tool deduplication

When Qualys, Orca, and Rapid7 all describe the same host, Panaptico consolidates them into one system record without losing which source observed what.

2

Full provenance

Every field — owner, criticality, environment, controls — carries the exact data sources that contributed. Drill down to see the underlying reasoning.

3

Unified and raw views

See the consolidated graph or switch to per-tool raw data. Both are available; the unified view is the default.

Trust

Every attribute, every source, every confidence score

Panaptico is a control plane across your stack, built on the foundation of a single pane of glass view of your environment.

tp1dist-01

Ubuntu Linux 22.04

System Metrics

Last updated: 02/20/2026, 12:20:31 AM

MetricValueData Source(s)
System Owner
Eng Infra Team
Qualys
AWS
Business Criticality
Critical99% confidence
Orca
Internet Facing?
Yes95% confidence
Tenable
ServiceNow
Contains Sensitive Data?
Yes95% confidence
Rapid7
Environment
Production99% confidence
CrowdStrike
Microsoft
Compensating Controls
Yes98% confidence
Tenable
Qualys
Rapid7
1

Cross-tool deduplication

When multiple sources describe the same attribute, Panaptico consolidates them into a single record while preserving the full provenance of which tools observed it.

2

Confidence scoring on every attribute

See how certain Panaptico's agents are about every judgment. Drill into confidence breakdowns to understand which sources contributed and the reasoning.

3

Raw and aggregated views

Both unified and source-specific details are preserved. Switch between the single pane of glass and the raw data from each tool at will.

Normalize

Provider-specific objects collapse to shared primitives

The ontology is project-scoped and lean — it keeps only what affects sequencing, execution, validation, evidence, approval, health, or audit. Everything else stays in the raw source layer.

IAM Role
Group
AD Security Group
Primitive

Access Principal

EC2 Instance
Virtual Machine
Compute Engine VM
Primitive

Compute Resource

Change Record
Jira Issue
Pull Request
Primitive

Change Request

Scan Report
Coverage Export
Change Attestation
Primitive

Evidence Artifact

Reconcile

Sensor never stops watching

Every category reconciles on its own cadence. When current state diverges from target, Sensor classifies the change — needs review, action required, in progress, or in sync. The status pill earns attention; the noise stays quiet.

+
Discovery Activity
5 events
Connected to Okta — 12 OUs, 847 groups mapped
Connected to AWS — 148,291 resources across 12 accounts
Normalized 3,217 IAM roles into 412 Access Principals
Identified 37 orphaned service accounts — owner assignment required
Linked 2,340 change records to ServiceNow CAB approval flows
1

Classified, not just alerted

Every drift is categorized — ignorable noise, watched, task-worthy, blocking, approval-gated, or auto-fixable. The engine decides what earns attention.

2

Continuous refresh

Providers are polled on their own cadence and rate limits. New resources appear in the graph as they show up in reality, not on a scheduled export.

3

Baselined post-go-live

Once the rollout lands, the graph becomes the baseline for drift detection, operational health, and the next change — without a second onboarding.

Next

Once Sensor sees the truth,
the rollout becomes a software problem

Gaps between current and target state turn into sequenced, owned, approved work — Pre-Flight rehearses the change, the checklist runs it, and Sensor confirms the outcome landed.

See the full platform