SHEET 08 · SURVEY NOTES · RECAP
Asset Inventory News, February to September 2026: A Recap by Theme
By Asset Inventory Ranked research team · 29 September 2026 · 4 min read
Bottom line
Two acquisitions changed who owns two of the seven tools we rank: ServiceNow completed its purchase of Armis in April, and Dragos announced it had acquired runZero in September. The other announcements from February to September 2026 cluster around AI access to asset data, CMDB data quality, analyst evaluations and two NIST publications.
This note covers announcements from February to September 2026, taken from the vendors' own blogs and press releases and from NIST. It groups them by theme rather than by date, and says what each one changes for a team choosing or running an asset inventory tool. Every item is also on our news page with a link to the original source.
Who changed hands in 2026?
Two of the seven tools in our ranking now have new owners. On 20 April 2026 ServiceNow completed its acquisition of Armis. Armis says Armis Centrix remains available as part of the ServiceNow AI Platform and as a standalone product. On 21 September 2026 Dragos announced that it has acquired runZero and NetRise to extend its OT security platform, and said runZero's CEO, HD Moore, will lead integration work while runZero continues to serve existing customers. No deal terms were disclosed.
For buyers, the practical questions are the same in both cases: whether the product you evaluate will still be sold on its own, whether its pricing and packaging will change, and whether integrations with competing products will be maintained. Both announcements say the products continue; neither publishes a roadmap. We score Armis and runZero on the product documentation we reviewed in September 2026, and we will re-check both next quarter.
How are vendors opening asset data to AI tools and developers?
Four announcements point the same way: asset data is becoming something other tools query directly.
- 24 February: Armis launched a developer portal built around version 3 of its API, with references and integration guides for IT, OT, IoT and medical device asset data.
- 3 March: Armis opened Armis Marketplace, a self-service portal for existing customers to find partner integrations, tools and services.
- 13 May: JupiterOne announced a tool that maps how AI agents, cloud resources and identities connect, queryable in plain English, together with Unified Vulnerability Management, which deduplicates findings across tools. Both are built on its graph platform.
- 21 July: Axonius announced an MCP server, in early access, that makes its asset data queryable from other AI tools, an AI agent inside the Asset Cloud in preview, and machine-readable documentation at docs.axonius.com/llms.txt.
- 10 September: runZero 5.1 lets users generate and adapt integration scripts, written in Starlark, with an AI provider of their choice; the scripts run in a sandbox on runZero Explorers.
None of these changes our scores yet: early access and preview features are not scored until they are generally available and documented. They are worth asking about in a proof of concept if your team plans to query inventory data from other tools.
What changed for CMDB data quality?
On 22 July 2026 Axonius described a CMDB Reconciliation Workspace that compares a CMDB such as ServiceNow against correlated adapter data, flags assets missing from the CMDB and field values that do not match, and can create missing records through its Action Center. It fits the pattern in our note on how to reconcile a CMDB: the inventory finds the differences, and the CMDB stays the system of record where the correction is recorded.
What did analyst evaluations say?
- 4 March: Armis said it was named a Leader for the second consecutive year in the 2026 Gartner Magic Quadrant for CPS Protection Platforms, which evaluated 13 vendors.
- 24 September: Axonius said it was named a Strong Performer in The Forrester Wave: Proactive Security Platforms, Q3 2026, an evaluation of 12 vendors, with the highest possible score on the prioritization transparency and customization criterion.
Analyst placements are not inputs to our scores. Our methodology uses vendor documentation and pricing pages only, and we list both items here as news.
Which standards moved?
- 25 August: NIST finalized SP 1347, a quick-start guide explaining how informative references map other standards to CSF 2.0 outcomes, with sample use cases.
- 21 September: NIST released the initial public draft of SP 800-82 Revision 4, the Guide to OT Security, which expands guidance on OT security controls including asset management and network monitoring. Comments are open until 30 November 2026.
Our note on NIST CSF 2.0 and the CIS Controls explains what those frameworks ask of an asset inventory, and the OT asset inventory note covers the SP 800-82 draft in more detail.
What did the year's endpoint data show?
On 7 September Lansweeper published an analysis of several million endpoints across 30,000 organizations. It reported that 96% of endpoints had some protection, while 68.1% ran full EDR or next-generation antivirus. The gap between those two numbers is the reason our note on finding devices missing an EDR agent starts from sources other than the EDR console.
What should buyers take from 2026 so far?
- Ask any vendor that changed owners in 2026 how packaging, pricing and third-party integrations will be handled over your contract term, and get the answer in writing.
- Treat AI and API features as questions for the proof of concept, not as scored capabilities, until they are generally available.
- Keep the CMDB as the system of record and judge inventory tools on how well they find and correct its gaps.
- Watch the SP 800-82r4 comment period if OT assets are in scope.
Related pages
Sources
- Armis blog, "Welcoming the Next Chapter: ServiceNow Completes Armis Acquisition", 20 April 2026
- Dragos press release, "Dragos Acquires NetRise and runZero", 21 September 2026
- Armis newsroom, developer portal, 24 February 2026
- Armis newsroom, Armis Marketplace, 3 March 2026
- GlobeNewswire, JupiterOne announcement, 13 May 2026
- Axonius blog, MCP server and AI agent, 21 July 2026
- runZero blog, "Building custom integrations at AI speed", 10 September 2026
- Axonius blog, Asset Cloud enhancements, 22 July 2026
- Armis newsroom, 2026 Gartner Magic Quadrant for CPS Protection Platforms, 4 March 2026
- Axonius blog, Forrester Wave: Proactive Security Platforms, Q3 2026, 24 September 2026
- NIST CSRC, CSF 2.0 informative references quick-start guide, 25 August 2026
- NIST CSRC, SP 800-82 Rev. 4 initial public draft, 21 September 2026
- Lansweeper blog, "Almost Every Endpoint Is Protected, but Are They Protected Well Enough?", 7 September 2026