Audit-ready network documentation,without the effort.

NIS2, ISO 27001, and HIPAA all expect network documentation that is accurate today, not last year. Scanopy discovers your network and keeps the map and inventory current on a schedule, so the evidence is ready before the auditor asks.

View live demo Start free

What NIS2, ISO 27001, and HIPAA expect, and what Scanopy produces

Each one expects documentation that reflects the network as it is now, plus evidence that it stayed that way over time.

NIS2 Article 21(2) Article 21 requires risk-management measures backed by an accurate picture of the network and its assets. Scanopy keeps the topology and inventory current on a schedule, and dated snapshots record that it stayed current between reviews. Read the guide →ISO 27001:2022 A.8.20 / A.5.9 ISO 27002 guidance names current network diagrams, and A.5.9 expects an asset inventory. Scanopy discovers both from the network itself, so the diagram an auditor asks for matches the network, not a redrawn approximation. Read the guide →HIPAA Security Rule risk analysis The required risk analysis depends on knowing your systems and how data moves between them. Scanopy maps the hosts, services, and application dependencies that the analysis is built on, and keeps that map current. Read the guide →

Give each control the evidence it asks for

One scan produces four topology views, generated from the live network rather than redrawn by hand. Each answers a question an assessor asks: what's on the network, how it's segmented, what runs where, and how data moves between systems.

app.scanopy.net
Scanopy Application view showing services grouped by application and the dependencies between them, the data-flow map a risk analysis is built on

Hand auditors evidence in whatever form they want

Producing the evidence stops being a scramble before each assessment. The current map is always a click from a document, a live embed, a shared link, or a dated record.

Export the map A static copy: an image (PNG, SVG, PDF), a self-contained HTML page, wiki markup (Mermaid, Confluence), or CSV of the underlying host and service data. Drop the current diagram straight into a compliance document or evidence pack.
Embed the live map An iframe that puts the live map inside a wiki, dashboard, or intranet page. The page an auditor opens shows the current topology, not a stale attachment.
Share a read-only link A link to the live map, read-only, that stays current as the network rescans. Give an auditor a view without exporting or emailing anything.
Save a dated snapshot A saved, dated capture of the network state, taken at each audit or review. Show what the network looked like on a date and what changed since: the record that the documentation is maintained, not reconstructed for the assessment.

No per-device bill, no lock-in, and you choose where it runs

Cloud or self-hosted Run it managed by us, or entirely on your own infrastructure, where the discovery data and credentials stay inside your perimeter with no outbound internet access at all. Security and subprocessors →
Billed on its own Scanopy is priced separately from the tools it sits beside, so your documentation is not bundled into a monitoring or asset contract. Compare tools →
The price does not move with host count Discovering more hosts does not raise the bill, so documenting the whole network costs the same as documenting part of it. Pricing →
Open source core Community Edition is AGPL-3.0, so you can read the code before you run it on your network. Free, capped at one seat and one network. Community Edition →
Motala Kommun IT department, Motala Kommun (Swedish municipality)
"With over 800 switches in our network, keeping topology documentation up to date by hand is almost impossible. We needed automation, especially with NIS2 raising the documentation requirements. Scanopy keeps it current for us."

See it on your own network.

View live demo Book a demo

Prefer to self-host? The commercial editions run in your own environment with support, and pricing covers the tiers.