Tripl-i
Tripl-i is an AI-native configuration management database (CMDB) for infrastructure discovery, service dependency mapping, and compliance.
What Tripl-i is
Tripl-i is an AI-native configuration management database (CMDB) for infrastructure discovery, service dependency mapping, and compliance. It uses agentless discovery protocols including WMI, SSH, SNMP, VMware, and database connections to find infrastructure and maintain configuration items, relationships, and tags. AI features classify software to CPE, map service dependencies, assess business impact, and provide semantic search and auto-tagging. Security capabilities include version-aware CVE matching, hotfix detection, network IOC and LOLBAS detection, and software policy enforcement. It lists SOX, HIPAA, and PCI-DSS compliance support, including attestation and control assessment. Deployment uses a scanner on a jump host, without endpoint agents or firewall changes; a self-hosted option is also listed. Tripl-i offers web, Windows, Linux, and API access, along with a REST and webhook API. The product also lists integrations and inputs such as Xurrent, Nagios, Zabbix, Prometheus, CloudWatch, ThreatFox, NVD, and MSRC. A full-access 30-day trial is available without a credit card. Trial results, including exported maps, tags, and reports, can be kept after cancellation.
Good
- Discovers infrastructure using WMI, SSH, SNMP, and VMware.
- Continuously updates configuration items and relationships.
- Maps dependencies and scores business impact.
- Lists SOX, HIPAA, and PCI-DSS support.
- Full-access 30-day trial requires no credit card.
Watch out
- Pricing is available on request.
- No free plan is listed.
- Trial lasts 30 days.
Who it suits
It is presented for organizations that need infrastructure discovery, dependency mapping, security monitoring, or compliance evidence. Teams seeking agentless discovery and self-hosted or hybrid deployment options may find its approach relevant.
Verdict
Tripl-i combines infrastructure discovery with dependency analysis, security monitoring, and compliance capabilities. Its agentless scanning and deployment choices may suit organizations with those needs; pricing is by request.
The facts
Each one read from Tripl-i's own pages, with the date it was checked.
What it does
- Agent controls
- Its agents use plan-based execution, per-skill and per-role grants, approval gates for destructive actions, and audit and cost rollups.checked 3 Oct 2026
- AI analysis
- AI classifies software to CPE, maps service dependencies, scores business impact, and supports semantic search and auto-tagging.checked 3 Oct 2026
- API
- The site lists an agentless REST and webhook API.checked 3 Oct 2026
- Certifications and hosting
- The site displays SOC 2 Type II, ISO 27001 certified, SSO/SAML, US and EU residency, and VPC deployment.checked 3 Oct 2026
- CMDB
- The product continuously discovers and updates configuration items, relationships, and tags.checked 3 Oct 2026
- Compliance
- Listed compliance frameworks include SOX, HIPAA, and PCI-DSS, with attestation lifecycle and control assessment.checked 3 Oct 2026
- Data handling
- Tripl-i says PowerShell, SSH, and HTTP agent execution runs on its NSAgent and credentials do not leave the customer network.checked 3 Oct 2026
- Deployment
- The site says deployment uses one scanner on a jump host and requires no endpoint agents or firewall changes; it also lists a self-hosted option.checked 3 Oct 2026
- Discovery
- Agentless discovery uses WMI, SSH, SNMP, VMware, and database protocols to map infrastructure.checked 3 Oct 2026
- Discovery protocols
- The site lists WMI for Windows, SSH for Linux and Unix, vCenter for VMware, and SNMP v2/v3.checked 3 Oct 2026
- Features
- Listed capabilities include vulnerability management, asset and license management, event management, dashboards, and compliance reporting.checked 3 Oct 2026
- Integrations
- Named integrations and inputs include Xurrent, webhooks, Nagios, Zabbix, Prometheus, CloudWatch, ThreatFox, NVD, MSRC, and LOLBAS.checked 3 Oct 2026
- Product
- Tripl-i describes itself as an AI-native CMDB for automated IT discovery, service dependency mapping, and compliance.checked 3 Oct 2026
- Security
- The site lists version-aware CVE matching, hotfix detection, network IOC and LOLBAS detection, and software policy enforcement.checked 3 Oct 2026
- Security controls
- For agent automation, the site describes per-skill and per-role grants, runtime CI scope filters, approval gates for destructive commands, and audit and cost rollups.checked 3 Oct 2026
- Who it serves
- The product is presented for organizations that need IT infrastructure discovery, dependency mapping, security monitoring, and compliance evidence.checked 3 Oct 2026
The company
- Company contact
- The site lists [email protected] as its contact email.checked 3 Oct 2026
Money
- Trial
- A full-access 30-day trial is offered with no credit card, and the site says users can cancel anytime and keep exported maps, tags, and reports.checked 3 Oct 2026
- Trial limit
- The trial form says setup instructions are emailed within an hour, and results can be exported and kept after cancellation.checked 3 Oct 2026
- Trial support
- The site says a Tripl-i engineer will be on call to help customers land their first scan, and setup instructions will be emailed within an hour.checked 3 Oct 2026
Alternatives to Tripl-i
- 1
Netdata
Free planOpen sourceAndroidiOSWebAPI8.7From $4.50 a month - 2
Jira
Free planAndroidiOSWebAPI8.4Free plan - 3
Lansweeper
Free planWebAPILinuxmacOS8.0Free plan - 4
ManageEngine Applications Manager
Free planAndroidiOSWebLinux7.1From $395 a year - 5
New Relic Session Replay
Free planAndroidiOSWeb7.1From $10 a month - 6
Port
Free planWebAPIExtension6.9From $30 a month