Fully On-Premises, Your Data Never Leaves
ConnectMyAssets is designed to run entirely within your perimeter. No telemetry, no vendor access to your data. All configurations, topology, credentials, and audit logs stay on your infrastructure.
The only optional cloud interaction is the CVE vulnerability module, which sends only vendor name and firmware version (encrypted and anonymized) to the ConnectMyAssets CVE feed. No configuration data, no topology, no credentials are ever transmitted. This data is used exclusively to match against the latest vulnerability database and deliver CVE alerts back to your appliance.
Full platform, all modules included
- ✓CMDB & Auto-Discovery
- ✓Config Backup & History
- ✓Compliance Engine
- ✓Firewall Management
- ✓IPAM
- ✓SSH Bastion
- ✓Credential Vault
- ✓Automation & ZTP
- ✓AI Insights (local inference)
- ✓CVE Tracking
- ✓Network Topology
Designed for Isolation from the Ground Up
Isolated deployment is not a limitation mode. Every component, including the AI inference engine, was built to run without any external dependency.
Your Infrastructure Only
No telemetry, no cloud dependency, no callbacks to external servers. ConnectMyAssets runs entirely within your perimeter and has no visibility into your environment.
ConnectMyAssets AI, On-Premise
ConnectMyAssets AI runs on your own hardware with no calls to any external service. Fully private intelligence, entirely within your perimeter.
Controlled Updates
Software updates delivered as new OVA versions or via your internal package repository. You control when and how you upgrade.
Where ConnectMyAssets Is Deployed
From enterprise networks to critical infrastructure, ConnectMyAssets is deployed on-premise by design, meeting the requirements of the most demanding environments.
Complete Data Sovereignty
When deployed on your own infrastructure with no external connectivity, ConnectMyAssets has zero visibility into your environment. Your data never leaves your infrastructure, not even telemetry or usage metrics.
ConnectMyAssets AI runs on your hardware. CVE database updates are shipped as signed offline packages. Every component operates without any external dependency.
- ✓Zero ConnectMyAssets access to your data
- ✓AI runs locally, no calls to OpenAI or any external service
- ✓Private key on your node, inaccessible from outside
- ✓Hardened VM image, no unnecessary services
- ✓No telemetry, no usage tracking, no callbacks
Deployment Options
One delivery format. Designed for simplicity and security.
Virtual Appliance (OVA)
A single hardened OVA file. Import into VMware, Hyper-V, Proxmox, or any major virtualization platform and you're operational in a day.
Frequently Asked Questions
Common questions about fully offline and isolated network management deployments
Does ConnectMyAssets require an internet connection to operate?
No. ConnectMyAssets is designed to run entirely within your own infrastructure with no internet connection required. There are no cloud dependencies, no telemetry callbacks, and no external licensing servers. Software updates are delivered as new OVA versions or via your internal package repository on your schedule. CVE database updates arrive as signed offline packages. Every component, including the AI inference engine, operates without any external dependency.
Does the AI feature work in a fully offline deployment?
Yes. ConnectMyAssets AI runs entirely on your own hardware using local inference. It makes no calls to OpenAI, Anthropic, or any external AI service. The inference model is bundled within the appliance and runs on your virtual machine's compute resources. This means all AI-generated configuration analysis and insights remain fully within your perimeter, with no data leaving your isolated network.
What virtualization platforms are supported for isolated deployment?
ConnectMyAssets is delivered as a single hardened OVA file. It is compatible with VMware vSphere and ESXi, Hyper-V, Proxmox VE, and other OVA-compatible hypervisors. Bare metal deployment is also available for environments that do not use virtualization. The appliance is operational within a day of import, with no additional configuration required on the host system.
Can ConnectMyAssets manage OT and industrial networks in an isolated environment?
Yes. ConnectMyAssets supports industrial and OT network equipment including Siemens, Schneider Electric, and other ICS vendors alongside traditional IT network devices. In isolated OT environments, it collects configurations via SSH, SNMP, or vendor-specific protocols without requiring any outbound connectivity from the OT network. This makes it suitable for nuclear and energy infrastructure, manufacturing, and defense OT networks where strict segmentation from the internet is required.
How are software and CVE database updates delivered without internet access?
ConnectMyAssets provides two update mechanisms for isolated networks. Platform updates are delivered as new signed OVA images that you import on your own schedule, giving you full control over upgrade timing. CVE database updates are delivered as signed offline packages that you transfer to the appliance via your internal file distribution process, such as a USB drive, an internal file share, or a controlled air transfer. You decide when and how to apply updates.
What security certifications or accreditations does ConnectMyAssets support for classified environments?
ConnectMyAssets is deployed as a hardened on-premises appliance with no telemetry, no vendor access, and no external dependencies, which is the foundation for operating in classified or accredited environments. The appliance ships as a minimal hardened VM image with only required services enabled. For organizations pursuing formal accreditation, ConnectMyAssets provides configuration documentation, deployment guides, and network architecture diagrams required by security review bodies. Specific accreditation pathways depend on your national regulatory framework.
Security Without Compromise
Maximum isolation. Zero functionality loss.