Manage assets with Asset Inventory

Akamai’s Asset Inventory provides a centralized dashboard that brings together all your hostnames and APIs, offering a clear view of your assets and their protection coverage.

Asset Inventory serves as a single source of truth for your assets, enabling you to:

View all assets in one place to quickly identify security gaps.
Use insights from Security Center to understand protection coverage and asset priority, helping you assess and prioritize your remediation efforts.
Identify unprotected assets that need protections, so you can address security gaps and achieve full coverage.
Quickly add asset protections for assets that are not protected under a security configuration.

For more information about how Access Inventory builds and maintains a registry of your production-facing assets, see Asset Inventory overview.

Access Asset Inventory

You can access Asset Inventory in two ways:

From Security Center:

Log in to Akamai Control Center.
From the Control Center menu, click Security > Security analytics > Security Center.
From the Security Center menu, click Tools > Asset Inventory.

From Security Hub:

Log in to Akamai Control Center.
From the Control Center menu, click Security > Security analytics > Security Hub.
From the Security Hub menu, click Your Assets.

After you open Asset Inventory:

Accept the consent prompt. Consent is required before Asset Inventory can process your data. Review and accept Akamai’s AI usage terms to enable the service.
Wait for initial processing. After consent, Asset Inventory processes your current security configuration data and populates your inventory. Processing time depends on the size of your configuration.
Explore your inventory. When processing is complete, you see an asset registry and dashboard with key information about your assets, including the number of discovered, unprotected, and partially protected assets found. Discovered assets from traffic analysis appear as Asset Inventory identifies them over time.
Focus on high-priority assets. By default, Asset Inventory surfaces high-priority assets first. Click an asset from the list to view details, including protection status and recommended actions to improve security.
Take action. For discovered assets, add them to a security configuration and set them up with baseline protections. For managed assets, review the posture evaluation and enable missing protections.

Filter your assets

Asset Inventory lets you filter assets by asset type, protection coverage, priority, security configuration, and OWASP API risk tag.

Pre-defined filters allow you to filter by:

Non-hidden assets. Assets that are visible in Asset Inventory. Assets are non-hidden unless explicitly hidden by a user.
Critical and high priority assets. Assets with critical or high investigation priority, which is determined by multiple factors, including, but not limited to, an asset’s sensitivity and protection coverage.
Hidden assets. Assets that have been explicitly hidden from the Asset Inventory view.
Discovered assets. Hostname and/or API assets that have not set up baseline security protections and need protections applied.
Shadow APIs. Undocumented or unmanaged API assets that operate outside of formal security insight.

Filter assets by type

You can filter by asset type:

All types. Both API and hostname assets.
API. API assets only.
Hostname. Hostname assets only.

Filter assets by priority

Assets are assigned priority levels based on detected business impact and protection gaps:

Low. Largely protected assets; minimal attention needed.
Medium. Partially protected assets; improvements recommended.
High. Sensitive assets with minimal or no protection; should be protected promptly.
Critical. Highly sensitive asset with minimal protection; immediate action required.

Filter assets by protection level

Assets can have one of three protection coverage levels:

Not protected. No protection; likely newly discovered and needs to be set up with baseline protections.
Partially protected. Some protections in place; recommended actions for improved protection available.
Protected. Sufficiently protected; no recommended actions.

Filter assets by security configuration

To filter assets by security configuration:

Click the All security configurations dropdown (default value).
Enter the name(s) of the desired security configuration(s).
Select configurations to filter results. You can filter by all configurations (default) or assets not assigned to a configuration.

Filter assets by OWASP top 10 risks

🚧
Indicators for OWASP API security risks will only appear for APIs that are provided through integration with API Security.

OWASP’s top 10 API security risks highlight common API vulnerabilities and help security teams identify and address threats. In Asset Inventory, you can filter by OWASP top 10 API tags, which are available through integration with API Security.

If API Security detects a vulnerability that matches a supported OWASP compliance framework, the affected asset will display a tag indicating the relevant OWASP top 10 API security risk. For guidance on preventing and mitigating these risks, refer to the related OWASP top 10 documentation.

To investigate a specific asset, open its details view. The details view includes an OWASP top 10 API tab with information about OWASP top 10 API risks present for the asset. Use this tab to review OWASP-specific risks and identify Akamai controls that can help limit potential impact.

Manage at-risk assets

To manage assets, click an asset in the list view. A window expands with details on the asset’s protection status. If the asset is at-risk, you’ll see recommended actions to improve its security.

If you’d like to exclude the selected asset from your Asset Inventory view, for example, if the asset is classified as a test environment asset or deprecated service, hide the asset from your Asset Inventory view by clicking Hide asset in the top left corner.

Start by addressing assets with critical or high priority. Some of these assets may still need to be set up with baseline protections. You can add protections for assets from Asset Inventory.

Bulk actions

You can select multiple assets and manage them in bulk. Supported actions depend on the selected assets and include:

Hide. Change selected assets from visible (non-hidden) to hidden. This action hides selected assets from Asset Inventory.
Unhide. Change selected assets from hidden to visible (non-hidden). This action makes selected assets visible within Asset Inventory.
Add protections. Add protections for selected assets of the same type. If assets are under different contracts, set them up separately. Learn more about setting up assets in bulk.