Customer Documentation

Documentation for tenants and tenant admins — people who use Vista Platform to manage their organization's asset inventory and cryptographic posture.

Quick Start

I want to…	Start here
Go from first sign-in to a populated inventory	Quick Start
Get an overview of the platform	Platform Overview
Learn the vocabulary (asset, endpoint, class, relationship, …)	Concepts
Understand how the platform itself is secured	Security Posture
Learn the platform as an end user	Tenant User Guide
Administer my organization's settings	Tenant Admin Guide
Understand CBOM artifacts	CBOM Artifacts
Generate a software, hardware or full-inventory BOM, or export to a SIEM	Bills of Materials
Learn about a specific feature	Feature Guides

Contents

Release notes

• 5.2.1 — the full, per-change record for the 5.2.1 patch release.
• 5.2.0 — the full, per-change record for the 5.2.0 release.
• 5.1.0 — the full, per-change record for the 5.1.0 (DCIM completion) release.
• 5.0.0 — the full, per-change record for the 5.0.0 (DCIM) release.
• 4.6.0 — the full, per-change record for the 4.6.0 (platform maintenance) release.
• 4.5.0 — the full, per-change record for the 4.5.0 (security hardening) release.
• 4.4.0 — the full, per-change record for the 4.4.0 release.
• 4.2.0 — the full, per-change record for the 4.2.0 (CMDB sync) release.
• 4.1.0 — the full, per-change record for the 4.1.0 (integrations) release.
• 1.0.0 — the full, per-change record for the 1.0.0 release. The summary for each release is in CHANGELOG.md at the root of the repository; an unusually large release keeps its detail here.

Security

• Security Posture — tenant isolation, supply chain, scanning, and the guarantees behind them

Start here

• Quick Start — first sign-in, then a sensor, a device and a cloud account, to your first populated inventory

Guides

• Tenant User Guide — the console section by section: Dashboard, Discovery, Inventory, Risk & Compliance, Remediation, search, notifications and your profile
• Tenant Admin Guide — User management, SSO, billing, settings
• Device Interrogation Guide — Interrogating network devices
• Device Auto-Discovery Troubleshooting

Features

The core surfaces, in the order a tenant meets them:

• Concepts — the vocabulary: asset, endpoint, class, relationship, fact, finding, risk, alert, and more
• Getting Started — the onboarding checklist
• The Dashboard — the two heroes (cryptographic posture and assets monitored) and what each number means
• Inventory & Lenses — the unified inventory and its switchable lenses
• Networks, VLANs and IP addresses — the prefix tree, utilisation, free space, VLANs, VRFs and Find
• Sites and locations — regions, site groups, sites and the locations inside them; placing assets; the site page
• Racks and placement — racks, rack types and reservations; placing an asset at a unit and face; the placement rules
• Cabling — cables, the faceplate, port traces, and LLDP/CDP proposals you approve
• Power — power panels and feeds, power ports and outlets, power cables and their traces to the feed
• Circuits — providers, circuits and their terminations
• Virtualization — clusters, hosts, virtual machines and disks
• VPN — tunnels and the IKE and IPsec policies behind them
• Wireless — wireless LANs and links
• Custom fields — your own validated fields on objects
• Config contexts — JSON merged per asset
• Saved filters and export templates
• Changes and journal — who changed what, and dated notes
• Business Units — nested owners on assets and prefixes
• Contacts — contacts, roles, assignments and image attachments
• Bulk import and export — CSV import with dry run and CSV export for every infrastructure object
• Asset Classes & Identification Rules — the class taxonomy, identifier precedence, and the auto-accept threshold
• Asset Approval
• Asset Lifecycle Management
• Assets and Crypto Configurations
• Cryptographic Keys — the Keys lens: algorithm, size, lifecycle state, and where each key is used
• Query — the one-line predicate the filter rail, saved views, scopes and approval rules all speak
• Global Search — the ⌘K quick-find palette
• The Map — two views: the neighbourhood graph around one asset (with the impact overlay and GraphML/Cytoscape export) and the tenant-wide topology tree
• Relationships — how assets are connected, and what breaks if one changes
• Interfaces — an asset's physical and virtual interfaces, LAGs and VLAN modes
• Device types — the hardware catalogue, importing from the device-type library, and applying a type's interfaces to an asset
• Spares and RMA — spare parts in stock, installing them, removing parts to stock, and return cases
• Findings — what a finding is, who produces them, and what "open" means
• Remediation — Alerts, the ticket Queue, and migration Plans

Discovery sources — how assets get into inventory:

• Discovery
• Automatic Active Scanning — what the platform scans on its own, and how to control it
• Sensor Registration & Management
• Agent and Sensor Settings — managing a registered fleet from the console rather than per host
• Host Inventory — what an agent collects about a host, and how it becomes an asset
• Device Interrogation
• Fortinet Device Interrogation
• AWS Cloud Discovery
• Azure Cloud Discovery
• GCP Cloud Discovery
• PCAP Ingestion
• SBOM Upload — CycloneDX / SPDX documents become software inventory
• Spreadsheet Import
• Adding Assets Manually — the New asset form and the class picker
• Third-Party & External Connections
• Certificate Chain Management
• Certificate Trust
• Certificate Monitoring — declare a certificate by name and expiry date and get the expiry alerts
• Operational Context

Posture and compliance:

• Compliance Frameworks
• Framework Transparency — Browse any published framework's controls & measurements (Posture)
• Algorithm Reference — Browse every known algorithm and our assessment (Posture)
• Crypto Risks
• Page-Local Exports
• Scopes

Admin and settings:

• AI assistant — which AI capabilities this deployment has, what answers without them, and your organization's two switches
• Roles & Permissions — built-in and custom roles, and what each grants
• Member Invitations — one invitation flow for every sign-in method
• API Tokens & MCP Server
• Audit Logging

Bills of Materials

• Bills of Materials — The four kinds (CBOM, SBOM, HBOM, full inventory), what each contains, and the OCSF event export
• CBOM Artifacts — Generate and manage immutable crypto snapshots