RADAR · Product Overview

Forensic CyberTech Pvt. Ltd.
RADAR

See every device. Secure every network.

Contact Us
0k+

Devices discoverable per scan

0min

Live scan polling interval

0+

Auto-classified device categories

0% Isolated

Per-tenant data separation

01 — Executive Summary

What is RADAR?

RADAR is a network discovery and visualization platform that continuously scans your infrastructure, maps every connected device, and presents the results as a live, interactive topology graph. It is part of the Eagleye suite by Forensic Cyber Tech, purpose-built for security-first organizations that need accurate, real-time network visibility.

Without RADAR, network teams rely on stale spreadsheet inventories, manual SNMP walks, or expensive enterprise tools that lock multi-tenant data together. RADAR solves all three problems: scans run every five minutes, every client's data is fully isolated in its own data store, and the entire platform can be deployed and running in under 30 minutes.

RADAR's key differentiators are its interactive D3 topology graph — which updates live and shows port-level device relationships — and its built-in multi-tenant architecture that gives MSSPs per-client data isolation without any additional configuration.

The Problem

What goes wrong without RADAR?

Network teams are flying blind. Devices join and leave networks constantly — yet most organizations still rely on point-in-time spreadsheets, manual scans, or tools that can't handle multi-tenant deployments. The cost of this visibility gap shows up fast when an incident hits.

Shadow devices undetected on the network

Shadow devices go undetected for weeks

Rogue access points, unmanaged IoT devices, and contractor laptops silently join the network. Without continuous scanning, they remain invisible until they cause an incident — by which point the damage is done.

Stale asset inventory spreadsheets

Asset inventories are always stale

Manually maintained spreadsheets and quarterly discovery scans can't keep up with a live network. Devices get added, removed, and renamed between reviews — leaving compliance evidence that doesn't match reality.

Multi-tenant data isolation challenges

Multi-client tools mix data or cost a fortune

MSSPs and SOCs managing multiple clients either pay for isolated enterprise deployments per client or accept tools that filter rather than truly isolate data — creating compliance and confidentiality risks at scale.

Key Features

What does RADAR do?

RADAR combines real-time discovery, interactive visualization, and inventory management into a single platform — with every capability included as standard, at every tier.

  • Live D3 topology graph with 5-minute polling and change detection
  • Per-tenant OpenSearch isolation — not row-level filtering
  • Native ServiceNow CMDB sync and versioned REST API included

Live Interactive Topology Graph

Updates every 5 minutes

Automatic Device Discovery & Classification

Agentless on target devices

Device Inventory & New Device Approval Workflow

Included in all plans

Multi-Tenant Architecture with Full Data Isolation

True isolation, not row-level filtering

ServiceNow CMDB Integration

Native connector, no add-on required

Live Device Ping from the Dashboard

Included in all plans

External REST API for SIEM & Automation

Open API, standard JSON
How It Works

Simple to deploy. Powerful under the hood.

A lightweight scanner agent is deployed on one host per network segment. It discovers devices using SNMP, ARP, and CDP/LLDP, then pushes structured scan data to the RADAR platform, which processes, stores, and renders it in real time — no SPAN ports, no agents on target devices.

What RADAR discovers
IP addresses and MAC addresses
Hostnames, NetBIOS names, and domain membership
Operating system type and version
Open ports and running services with risk levels
Switch port topology via CDP and LLDP
Hardware details — vendor, model, firmware, serial
SNMP data — uptime, system description, location
What RADAR lets you do
View live, interactive network topology
Alert on new or unrecognized devices instantly
Approve or flag unknown MAC addresses
Ping any device on demand from the UI
Sync approved inventory to ServiceNow CMDB
Export device lists to Excel or CSV
Feed device data into your SIEM via REST API
Use Cases

Who uses RADAR and how?

Use Case 01

MSSP / SOC: Managing Multiple Client Networks from One Platform

A managed security services provider handles 20+ client networks from a single RADAR deployment. Each client is provisioned as an isolated tenant with its own scanner agents and data indices — full isolation with zero additional infrastructure cost per client.

Use Case 02

Enterprise NOC: Real-Time Network Visibility

A network operations centre monitors a distributed campus with hundreds of switches and thousands of endpoints. RADAR's topology graph renders the full network in seconds, with switch-port-level connections visible on click.

Use Case 03

Security Team: Detecting Rogue Devices

An analyst receives an alert that an unknown MAC address joined the network overnight. RADAR's new-device queue shows the device's IP, vendor, first-seen timestamp, and which switch port it connected to.

Use Case 04

Compliance: Continuous Asset Inventory

An auditor requires a full device inventory with first-seen and last-seen timestamps. RADAR's Asset Timeline tracks every MAC address across scan history, exportable to Excel in one click.

Use Case 05

Incident Response: Device Pivoting

During an active incident, a responder needs to know what device owns a suspicious IP, what ports are open, and where it physically connects in the network. A single topology click exposes all SNMP data and hostname history.

Why RADAR

What sets us apart.

Live

A topology that reflects reality right now — not a report from last Tuesday

Most network discovery tools produce point-in-time reports. RADAR's scanner agents push data every scan cycle and the dashboard auto-polls every 5 minutes with a smart change-detection layer — so the topology graph only re-renders when something actually changed. You see your network as it is, not as it was.

Zero

Zero data leakage between tenants

Each tenant's scan data is stored in completely separate OpenSearch indices — not just filtered views of a shared table. Tenant boundaries are enforced at the JWT layer, the middleware layer, and the data layer simultaneously.

Open

Open API — no extra license, no vendor lock-in

RADAR's versioned REST API is included as standard. Push device data to any SIEM, feed it into your SOAR automation, or build custom integrations — using plain JSON over HTTPS, with no proprietary SDK required.

Simple

One lightweight agent per segment — nothing on target devices

RADAR's scanner agent runs on a single host per network segment. No agents on target devices, no SPAN ports, no complex collector hierarchies. Deploy, register, and start scanning in under 30 minutes.

Built-in

ServiceNow CMDB sync included — not an add-on

Competitive tools charge separately for CMDB connectors or require marketplace plugins. RADAR ships with a native ServiceNow integration that syncs your approved inventory directly to your CMDB — included at every tier, configured in the UI.

Market Comparison

RADAR vs. the market

The capabilities that matter most to MSSPs and security teams — real multi-tenancy, live topology, built-in CMDB sync, and an open API — are the exact areas where incumbent tools fall short or charge extra.

CapabilityLansweeperAuvikSolarWinds NPMRADAR
Live interactive topology graph
Static / limited
Yes
Yes
D3 force graph, 5-min live updates
True multi-tenant data isolation
No
Per-client accounts, shared infra
Single-tenant only
Per-tenant isolated indices
ServiceNow CMDB native connector
Marketplace add-on
No
Separate ITSM module
Built-in, no extra license
Per-network scanner agent (managed)
No
No
No
Dashboard-managed, per-segment
New device approval workflow
Yes
Limited alerting only
No
Queue + CMDB sync integrated
Versioned REST API for SIEM integration
No
No
Available, costly add-on
Included as standard
Deployment complexity
Windows server required
Cloud-managed, less control
Complex, multi-server install
Single docker-compose, <30 min
★ denotes a capability unique to or significantly stronger in RADAR. Based on publicly available product information as of 2026. Verify current capabilities directly with each vendor.
Getting Started

Up and running in under 30 minutes.

RADAR ships as a fully containerized stack. There is no multi-server setup, no manual dependency resolution, and no infrastructure pre-configuration required.

Deploy the platform

Run docker-compose up --build -d on your host. The backend API, frontend, MongoDB, and OpenSearch containers all start automatically with a single command.

Step 01

Create your tenant and admin user

Log in with your super-admin account and provision your first tenant organization. Assign your OpenSearch index names, set branding preferences, and create client admin users.

Step 02

Deploy a scanner agent

Install the lightweight RADAR scanner agent on one host per network segment you want to monitor. The agent registers itself with the dashboard automatically — no manual token entry required.

Step 03

Run your first scan

Trigger a scan from the dashboard or wait for the first scheduled scan cycle. RADAR discovers all reachable devices via SNMP, ARP, and CDP/LLDP, then renders the complete topology graph.

Step 04

Review devices and connect your CMDB

Walk through the new-device approval queue, approve known assets to your inventory, and optionally connect your ServiceNow instance for automatic CMDB synchronization. You're live.

Step 05
Specifications

System Requirements & Performance

Platform requirements, scanner agent specs, and security model for planning a production RADAR deployment.

Platform Requirements

Container runtimeDocker 24+ with docker-compose v2
Node.js (for non-Docker installs)Node.js ≥ 22.12.0, npm ≥ 10.0.0
Scan data storeOpenSearch 2.x (per-tenant indices)
User & tenant data storeMongoDB 6+
Browser supportChrome 90+, Firefox 88+, Edge 90+

Ready to see RADAR in action?

Request a live demo and we'll walk you through a real scan of a network environment — no installation or commitment required. If you're ready to deploy, our team will have you fully operational the same day.

Book a Demo