Open Source. Agentic. Transparent.

Tholian Scout

Total Asset Visibility for Autonomous Cyber Defense

See Every System

Tholian® Scout is the inventory agent of the Tholian Network. It collects system reports including all necessary evidence and writes them to an external, machine-readable file.

Scout does not guess what is running on a machine. It observes the actual system state and turns it into inventory data that defensive agents can act on.

Complete System Intelligence

  • Antiques and legacy components
  • Installed packages and package managers
  • Devices, drives, and hardware
  • Incidents from live process analysis and system logs
  • Network interfaces, routes, and neighbors
  • Programs and running services
  • Pending updates and update state
  • Users, groups, and account context

The result is a complete operational picture of every managed endpoint, generated consistently instead of assembled by hand.

Every Distribution. One Agent.

Scout detects distributions through /etc/os-release and collects inventory through platform-specific interfaces. It supports the major Linux families, FreeBSD, and OpenWrt, including their native package managers and fallbacks.

One agent covers Alpine, Arch, Debian, Fedora, openSUSE, RHEL, Rocky, Ubuntu, and many more, so heterogeneous infrastructure does not require a different inventory tool for every distribution.

Written Like an Agent

Scout is designed to be managed autonomously and remotely. It runs as an agent, produces a deterministic report, and fits into the same signed, capability-scoped command model as the rest of the Tholian Network.

Inventory becomes a continuous property of the infrastructure, not a quarterly spreadsheet exercise.

Open Source. Transparent. Verifiable.

Tholian is the only Agentic Cyber Defense solution that is built Open Source and remains transparent about what it can do. Scout's platform support, data collectors, and limitations are documented in public.

You can inspect exactly which data is collected, how it is collected, and what the agent does not collect.

Inspect the Agent